Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ba05ce95-0887-3236-8bf3-ad9f7f013d94.roa
File:                     ba05ce95-0887-3236-8bf3-ad9f7f013d94.roa (raw, json)
Hash identifier:          7EHFj7Nz2iSLZF8vx52lVe4z3or6owbxNaGy6bHGY9M=
Subject key identifier:   A0:05:0F:79:D8:9A:66:96:D9:14:83:59:9A:95:D8:C6:55:07:52:6E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858478026995F7EDA55DB48170300
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ba05ce95-0887-3236-8bf3-ad9f7f013d94.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:2780::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:99:5f:7e:da:55:db:48:17:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=a8c8ef38-232e-46c9-9d96-fd94a76f4bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2b:38:2a:76:e4:20:63:f6:26:ef:92:00:73:
                    a4:d7:d3:2e:c8:04:b9:c6:06:7a:f7:c2:03:10:fc:
                    e1:c5:f2:4b:f7:ba:84:5d:76:6a:92:c3:22:99:c3:
                    ea:a3:39:ad:88:8f:e5:e2:e8:23:5f:ab:f0:93:36:
                    97:a1:20:79:52:ae:a7:5a:d5:07:d4:d2:b0:a2:f0:
                    0e:92:06:2c:dc:eb:47:33:f4:37:bb:03:d5:fe:8f:
                    95:d1:a7:38:9d:1c:29:ae:d6:13:91:76:c6:6f:e1:
                    f4:8c:97:aa:ec:44:03:8d:a7:20:68:a6:6d:9a:c6:
                    68:ed:e2:32:11:f4:8a:cd:55:c7:b9:b6:9a:f9:96:
                    39:bb:7a:c6:60:73:75:cc:48:bb:f3:ee:60:c0:05:
                    65:e1:4a:f6:79:c6:3a:2b:e0:11:3c:b4:ba:2c:f4:
                    dd:5a:4b:64:89:1b:18:60:f8:75:60:ca:03:a4:29:
                    89:77:cf:3c:32:b5:4f:c0:b0:a6:3f:d7:7c:6b:7d:
                    35:a3:c1:7a:38:bf:6e:73:27:66:41:30:73:d7:e8:
                    71:20:fe:61:7d:b6:d7:7c:c7:ec:4f:4a:f2:9c:20:
                    e5:23:07:6c:9c:9b:4f:b8:30:ca:94:0f:68:09:d9:
                    33:8e:9f:58:34:64:71:23:04:3e:6f:79:8d:f1:b7:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:05:0F:79:D8:9A:66:96:D9:14:83:59:9A:95:D8:C6:55:07:52:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ba05ce95-0887-3236-8bf3-ad9f7f013d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2780::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:cf:ba:b6:52:49:8d:58:5c:31:87:42:72:e7:bc:7f:96:62:
         34:86:8c:45:e0:13:c7:20:7c:39:c7:9e:56:76:59:70:0e:93:
         97:7d:6d:da:7a:cd:0b:75:61:7f:4e:8b:88:95:dc:d3:d8:6b:
         38:94:3f:88:fe:08:86:48:86:fa:90:58:aa:86:b7:b7:dc:1d:
         fe:ec:6e:05:c0:97:7d:2d:1c:5f:3f:7b:3d:45:91:4e:73:8b:
         30:e4:be:24:e6:d9:f3:15:f5:0f:0b:f0:40:57:e4:8e:8c:f7:
         f7:cd:b5:b9:06:45:79:6b:d8:ee:30:3f:5d:0d:73:8a:1c:6d:
         08:be:f4:b5:94:5c:5d:56:0e:91:2c:54:13:36:29:77:bf:c4:
         b5:9d:08:bd:48:27:af:8e:c2:97:ac:2f:fa:5b:78:37:7d:06:
         08:93:a0:b1:e9:c6:43:6d:ab:2e:73:1f:d9:7f:22:78:2e:7e:
         5a:1b:a6:74:10:1c:5e:2b:43:1f:ce:b6:0f:78:19:94:c0:1e:
         1a:64:45:c8:e1:49:d2:2c:07:c7:fb:0b:d4:25:ac:f7:f0:00:
         ed:45:89:b3:9e:6a:5d:68:a6:56:b9:c2:08:07:3e:d5:29:52:
         c2:57:d0:96:aa:f4:e7:1b:27:1b:f5:86:43:eb:5b:92:ec:87:
         cc:60:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:50 2024 by rpki-client on console-fra.rpki-client.org