Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2fc21e75-035a-3493-8c78-e454ccac5f53.roa
File:                     2fc21e75-035a-3493-8c78-e454ccac5f53.roa (raw, json)
Hash identifier:          fuKIHx/Fq9zLz20tbvDqPkZ0C26DPeOh+uuxii6RJS4=
Subject key identifier:   69:36:82:E0:63:7C:82:82:DA:8F:41:80:2F:D8:D1:DD:3D:DB:6F:EB
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780269B20ED3FF9695423D380
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2fc21e75-035a-3493-8c78-e454ccac5f53.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:20d0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:9b:20:ed:3f:f9:69:54:23:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=33c0e76d-c82f-4b65-917a-4dad7ff091ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:a1:3b:a1:20:aa:a6:f4:19:6c:93:7e:ea:
                    41:f5:15:71:b2:b3:59:6b:4e:d4:52:82:89:91:cf:
                    f4:31:07:4e:b9:92:66:5b:d4:e4:2b:b3:a6:78:8f:
                    cd:c1:4b:7f:a4:43:5e:64:58:d7:37:b7:7b:a5:19:
                    f9:e5:5c:cc:91:b4:9f:ba:30:55:fa:e8:47:25:24:
                    6c:75:6c:92:2f:01:c8:45:c2:20:3e:26:a4:e6:64:
                    0b:6d:68:c7:1f:25:e9:44:3c:ef:5d:3c:a4:f6:4e:
                    f7:85:d4:f1:3f:33:a0:33:f1:56:4a:d8:66:ba:6e:
                    49:dc:0c:d5:15:1f:20:4c:e7:5e:23:bd:40:69:fe:
                    af:ff:93:70:73:72:3f:c6:d3:d4:c5:d8:0e:68:ce:
                    4c:97:1c:86:63:6b:23:9b:68:22:de:5a:1f:b7:e8:
                    f9:9b:b9:1a:0d:21:af:dd:64:49:20:db:3d:18:01:
                    3f:c4:9c:cc:7f:a7:53:0b:2d:1a:e8:97:cd:11:a3:
                    a4:71:fa:0c:25:af:8d:df:ab:69:20:b8:f5:c8:4b:
                    3d:84:6d:51:5e:4f:b1:0d:d6:e7:19:44:4e:36:2e:
                    3d:52:f5:b2:c8:7a:c5:95:f2:c9:e5:75:a7:15:55:
                    72:c5:87:e3:67:38:89:9f:d7:31:6c:1c:0a:29:9b:
                    43:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:36:82:E0:63:7C:82:82:DA:8F:41:80:2F:D8:D1:DD:3D:DB:6F:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2fc21e75-035a-3493-8c78-e454ccac5f53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:20d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4a:54:a1:30:72:9b:10:aa:6f:e2:92:9f:5a:f5:66:69:3f:
         4a:82:36:d8:58:5f:8f:73:e9:47:d4:85:6d:cb:f5:02:51:da:
         02:2a:74:d6:9f:58:b8:aa:5c:44:b4:bf:18:5a:4a:91:b8:58:
         97:78:40:72:7a:02:3f:9a:37:e7:1e:de:85:d0:be:6a:5a:fd:
         df:e5:92:d0:35:25:f5:26:19:5f:65:83:be:ff:6d:2f:73:20:
         d8:52:d1:e4:6e:56:ae:1b:07:e9:32:81:05:d6:51:4e:56:1d:
         66:43:c7:cf:33:30:f9:da:9b:d3:2e:cf:b7:e5:bc:ad:db:23:
         9d:46:b9:21:c9:89:99:41:cd:ff:50:31:7f:9f:91:8e:6d:5a:
         28:09:ad:cf:ff:ea:52:11:73:77:1e:df:75:67:74:fa:3d:e4:
         3e:91:cb:54:1e:13:04:c5:cf:c7:11:2b:33:0c:13:02:d2:ff:
         cf:17:36:9c:9a:5b:8a:0c:5e:41:ab:1c:44:64:67:dd:dc:62:
         2c:54:58:cd:ba:c7:97:10:5e:25:c4:86:0d:78:ff:6f:7f:31:
         b0:64:3e:11:21:8f:ce:9f:ab:5b:f5:88:7e:4e:5c:dd:9b:59:
         0e:6b:6b:a5:f9:1d:a1:d5:9e:08:b7:aa:5f:e6:2a:6f:34:cb:
         d8:64:8f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:46 2024 by rpki-client on console-fra.rpki-client.org