Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/59a30e07-3417-3c01-9cc2-774b6a0b6fc4.roa
File:                     59a30e07-3417-3c01-9cc2-774b6a0b6fc4.roa (raw, json)
Hash identifier:          HbiS58ZM9FF51X3wJpZW0/Wj/RrmRurtib4G3eiD1P8=
Subject key identifier:   21:99:A4:08:B6:C6:03:15:91:AE:4A:81:B0:80:3A:5F:55:AD:19:54
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858478026802E27DC6C5926563980
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/59a30e07-3417-3c01-9cc2-774b6a0b6fc4.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:2a90::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:80:2e:27:dc:6c:59:26:56:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=95a8ce35-f79f-43aa-a8f4-e215aafa4856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:c7:82:78:7c:13:a0:45:7e:3a:1f:78:53:
                    0e:a1:7c:5d:13:0f:4f:90:a1:c2:7f:f1:0b:5a:48:
                    61:ec:60:dc:9a:3d:1f:1c:c6:a5:50:5c:2f:7b:b1:
                    c2:6e:66:64:5d:1f:72:d2:01:53:69:17:d3:d1:4b:
                    01:b7:03:63:31:de:58:5e:2a:de:be:23:81:dd:06:
                    9c:dc:80:04:00:f2:dd:45:79:6a:bb:53:cd:ad:ba:
                    a2:6e:12:b2:82:d4:f2:4d:ea:e8:18:c4:9b:0e:7f:
                    bc:be:b2:7f:9b:6c:07:b1:fc:df:61:83:97:83:d9:
                    b9:49:99:36:d2:fa:c2:6a:20:f7:20:5f:79:bf:7e:
                    d9:75:0d:3a:da:80:9d:66:01:d4:b3:cb:5f:12:da:
                    ce:5e:19:17:63:58:fd:1d:20:10:2d:be:a7:6c:19:
                    a5:a7:0c:f8:94:37:9a:d0:f2:a6:13:fa:f1:55:1a:
                    58:db:f7:f9:24:2b:c7:fd:f5:d7:0c:71:2f:ac:e0:
                    33:b1:8c:f2:c8:11:1b:cc:1d:e3:29:30:3c:90:1c:
                    97:8c:38:2a:c8:c1:d7:14:3b:08:06:5b:26:14:2c:
                    85:92:fd:c9:25:03:ba:dc:82:bd:0f:1a:8c:03:a1:
                    95:bc:89:d2:79:fe:69:30:a4:db:5a:ac:3a:8d:1a:
                    16:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:99:A4:08:B6:C6:03:15:91:AE:4A:81:B0:80:3A:5F:55:AD:19:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/59a30e07-3417-3c01-9cc2-774b6a0b6fc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2a90::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:2b:71:bb:43:36:fb:3a:0b:71:b6:7c:02:f4:ae:72:fb:b1:
         ae:b7:06:13:f8:cd:56:16:a9:99:30:3f:d8:18:2b:3b:7b:79:
         4e:e4:af:24:94:d2:1d:1a:12:64:29:9e:18:c3:ef:f2:20:de:
         71:4f:42:d3:8e:e6:13:df:0a:e4:01:d8:4c:13:e2:0d:88:2a:
         48:71:58:b6:e8:0c:a3:0b:6b:d3:ec:26:c5:f7:ae:7e:df:68:
         16:6a:bd:28:00:5e:b0:8b:0c:51:34:43:1a:6d:be:01:b6:69:
         e1:34:17:55:7b:7f:95:22:24:89:2f:ca:30:94:bb:5e:3d:3c:
         7e:9b:69:7f:4b:e0:c9:79:4a:a0:29:0e:8f:ab:62:f3:60:b6:
         bc:43:05:a8:1a:a0:86:fa:45:0c:f5:48:23:e2:46:8e:86:ea:
         7c:d5:b1:4e:81:58:79:03:37:37:b1:43:4e:33:74:8d:8e:44:
         c2:17:85:af:68:65:2b:a5:ee:c3:2d:88:3b:81:6f:8c:4e:73:
         2e:2c:29:a9:bb:ed:2d:cf:85:6e:f2:ee:a5:2b:c5:6e:d9:d5:
         9c:f8:c4:39:b1:5c:18:37:ca:9a:94:ca:83:f6:77:31:ad:e6:
         20:50:a0:23:ae:a6:b7:1c:59:3b:2b:55:84:70:56:37:15:ac:
         5b:1f:7a:00
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJoAuJ9xsWSZWOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
OTVhOGNlMzUtZjc5Zi00M2FhLWE4ZjQtZTIxNWFhZmE0ODU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY3Hgnh8E6BFfjofeFMOoXxdEw9PkKHCf/EL
Wkhh7GDcmj0fHMalUFwve7HCbmZkXR9y0gFTaRfT0UsBtwNjMd5YXireviOB3Qac
3IAEAPLdRXlqu1PNrbqibhKygtTyTeroGMSbDn+8vrJ/m2wHsfzfYYOXg9m5SZk2
0vrCaiD3IF95v37ZdQ062oCdZgHUs8tfEtrOXhkXY1j9HSAQLb6nbBmlpwz4lDea
0PKmE/rxVRpY2/f5JCvH/fXXDHEvrOAzsYzyyBEbzB3jKTA8kByXjDgqyMHXFDsI
BlsmFCyFkv3JJQO63IK9DxqMA6GVvInSef5pMKTbWqw6jRoWIQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCGZpAi2xgMVka5KgbCAOl9VrRlUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNTlhMzBlMDctMzQxNy0z
YzAxLTljYzItNzc0YjZhMGI2ZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQCqQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFQrcbtDNvs6C3G2fAL0rnL7sa63BhP4zVYWqZkwP9gYKzt7eU7k
rySU0h0aEmQpnhjD7/Ig3nFPQtOO5hPfCuQB2EwT4g2IKkhxWLboDKMLa9PsJsX3
rn7faBZqvSgAXrCLDFE0QxptvgG2aeE0F1V7f5UiJIkvyjCUu149PH6baX9L4Ml5
SqApDo+rYvNgtrxDBagaoIb6RQz1SCPiRo6G6nzVsU6BWHkDNzexQ04zdI2ORMIX
ha9oZSul7sMtiDuBb4xOcy4sKam77S3PhW7y7qUrxW7Z1Zz4xDmxXBg3ypqUyoP2
dzGt5iBQoCOuprccWTsrVYRwVjcVrFsfegA=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:13 2024 by rpki-client on console-ams.rpki-client.org