Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/acebcb87-756c-37c2-9dfa-e6611b84652c.roa
File:                     acebcb87-756c-37c2-9dfa-e6611b84652c.roa (raw, json)
Hash identifier:          gRw7qm9LEtoFV1q5ZfQ9qLHT1iPa4NI1b4epLT43mzw=
Subject key identifier:   0A:59:BE:1D:98:58:C2:4C:79:91:7F:34:21:A2:E5:52:68:C1:D1:A6
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858478026974311684D8F26AC9800
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/acebcb87-756c-37c2-9dfa-e6611b84652c.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:23e0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:97:43:11:68:4d:8f:26:ac:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=09cd899b-3522-4461-a232-1449819082ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:52:9e:48:fd:f7:03:74:9c:d6:86:76:3c:be:
                    d5:73:98:a5:a8:06:8a:f5:3b:53:86:e6:04:ee:f8:
                    ed:e9:10:4c:35:a8:b5:ae:e2:ec:44:8e:f3:16:7b:
                    85:1f:2e:bf:3e:e1:91:5f:25:95:9b:de:3a:78:fb:
                    98:c1:d9:22:86:14:a8:8f:52:f5:49:d9:a6:c3:22:
                    0b:1c:72:ad:89:25:77:8c:1d:af:ee:26:dc:20:f8:
                    8f:9a:29:e0:f7:81:e1:ba:e3:74:64:b1:0f:fa:31:
                    aa:b7:98:2d:70:c0:2c:91:79:89:47:bd:f0:67:6f:
                    e2:2a:6a:f1:09:7f:ad:de:16:9a:4d:5d:56:90:40:
                    58:c5:be:11:22:d5:f6:d7:ea:e4:5a:19:cd:c9:37:
                    d4:4f:84:9c:fb:75:e6:58:36:7f:40:e0:1f:c3:44:
                    7c:f1:1f:11:3b:56:b8:bb:e8:c6:a2:ee:97:82:d7:
                    44:80:4d:75:1c:6d:8d:15:78:ac:8c:3b:d1:2d:30:
                    1a:ef:9f:e7:30:f7:0b:aa:07:ee:91:0a:8a:2d:70:
                    cf:de:fd:93:80:6f:a6:22:4d:1a:5a:c1:f8:c5:de:
                    d1:2d:58:ee:76:63:76:35:15:52:2a:7a:93:5c:17:
                    5c:09:83:d6:74:86:19:c9:c2:30:fc:60:09:eb:eb:
                    53:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:59:BE:1D:98:58:C2:4C:79:91:7F:34:21:A2:E5:52:68:C1:D1:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/acebcb87-756c-37c2-9dfa-e6611b84652c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:23e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:90:35:e4:2b:7f:1c:80:7f:b9:ef:59:a8:d9:80:cb:bd:93:
         62:68:15:46:c5:2c:81:2c:56:bc:4f:65:e9:38:8e:73:13:bb:
         4e:d8:b3:28:0e:bd:99:61:7b:e9:06:d6:b1:1b:a5:7d:b5:7f:
         b1:da:2a:e2:ef:04:56:12:21:ab:06:92:e7:cd:ee:b8:c6:61:
         1f:25:c0:94:e6:e5:e0:d7:aa:5d:e7:35:06:6f:1d:07:a4:f2:
         71:df:bc:97:51:7a:33:9e:f4:fe:13:76:6d:8e:ce:88:68:20:
         4c:91:80:79:1a:37:2a:e6:0b:43:bf:8e:eb:d1:1b:54:1b:b3:
         c5:cd:09:fd:74:b6:cb:fc:ae:58:ee:a5:c7:89:cc:72:f1:9b:
         37:ca:0f:d1:8a:dd:cb:41:78:b7:62:3d:40:7a:91:b1:aa:ef:
         44:87:84:92:a2:e8:d7:4b:87:f1:60:69:5c:06:a5:f0:b4:14:
         3c:19:50:55:78:5d:e4:a7:39:ae:4b:eb:6d:29:d5:92:d1:bd:
         09:9d:9c:20:8b:d6:14:6d:15:10:ac:fc:85:74:11:86:d7:84:
         a7:33:65:c1:8d:59:b7:fa:92:42:67:7d:33:87:26:ea:5d:05:
         48:a9:3f:4f:a8:8b:97:d6:28:cb:ba:52:54:be:e4:7f:75:70:
         d5:03:d2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:48 2024 by rpki-client on console-fra.rpki-client.org