Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d51ed52e-b9a3-315b-b6b8-a65f8721fe3d.roa
File:                     d51ed52e-b9a3-315b-b6b8-a65f8721fe3d.roa (raw, json)
Hash identifier:          yC9A1Advj/0ImHNIajMnany4WoAqkQjzHpHphTlFYdg=
Subject key identifier:   30:5F:4B:3B:B1:03:98:CA:0A:2F:CF:FC:30:17:E7:35:B3:B5:F0:CD
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780269877866617702A2B5280
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d51ed52e-b9a3-315b-b6b8-a65f8721fe3d.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:2c70::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:98:77:86:66:17:70:2a:2b:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=bbee9958-3578-4e83-a928-122765a1d87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6b:67:d6:58:36:db:96:35:84:0c:f2:d9:55:
                    5e:63:46:30:e9:07:3d:b9:bc:c7:af:e5:20:d7:35:
                    bb:9e:bb:7b:79:47:35:95:40:37:de:76:1d:46:87:
                    df:c2:64:ff:22:46:b5:28:a0:6f:26:05:3b:b8:22:
                    82:68:fb:df:c6:aa:1a:ac:9c:6d:af:e5:87:0b:0f:
                    ed:72:4d:c8:b4:56:cc:d4:6d:fa:b9:2a:31:f7:35:
                    3e:7e:46:c1:5c:b1:6e:86:ef:27:40:a0:8e:0b:a1:
                    58:23:14:73:df:a1:09:8b:62:08:be:a4:4c:f1:32:
                    73:78:0f:fc:db:a5:85:27:f2:63:32:ae:4c:05:93:
                    23:45:42:ae:e5:f6:03:4b:27:08:6f:cc:fc:33:e7:
                    87:76:66:cf:57:6f:bf:51:1f:5e:ff:ee:68:c0:e3:
                    2b:0f:da:61:04:53:f3:de:f7:57:be:b6:29:72:ae:
                    1d:19:7f:e3:5f:20:79:7c:81:95:2c:a9:86:ba:77:
                    ff:2e:5e:1a:44:7f:52:c3:88:93:bd:42:c9:95:4f:
                    ca:de:81:21:b7:74:2c:0c:c6:5c:0b:b2:ea:73:cb:
                    2d:f2:ce:37:6c:69:8e:7c:39:8a:0f:54:f0:00:32:
                    f3:21:81:81:a0:95:a0:bc:40:80:8a:5a:6b:c9:f1:
                    cb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5F:4B:3B:B1:03:98:CA:0A:2F:CF:FC:30:17:E7:35:B3:B5:F0:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d51ed52e-b9a3-315b-b6b8-a65f8721fe3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2c70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:37:ec:1a:98:4d:44:0f:6a:96:fa:42:43:cc:61:2a:3d:03:
         95:a2:69:ec:82:d3:bb:49:d2:e1:8f:07:98:bc:91:97:46:c5:
         16:67:60:fd:cb:50:f4:95:a6:1a:25:ae:0b:68:54:27:e2:68:
         d7:d7:2f:be:4b:44:38:31:7c:3e:2e:af:22:e0:7b:32:31:74:
         97:5b:df:85:4c:6e:06:9b:e3:61:56:d7:85:b6:1f:1b:6c:ed:
         05:34:c3:de:f3:d5:6e:b5:59:9b:1b:16:ed:f1:93:a8:7b:52:
         c4:bf:96:89:02:aa:b7:5f:77:be:86:bd:5a:ac:ae:07:0b:50:
         01:1a:15:94:09:69:f5:81:47:94:22:e9:d1:49:a6:f3:13:d4:
         98:d8:d8:65:f3:2e:6a:b1:e8:be:6e:a1:b1:0e:d6:ae:a2:40:
         52:08:93:f7:f8:08:68:7e:ba:a5:45:2e:1c:55:b0:ca:8f:c9:
         0e:43:90:e7:ce:ec:22:28:85:97:2c:56:62:5c:3c:10:d7:cd:
         a5:c0:e6:e8:33:f8:11:fb:ca:f2:e5:a0:18:46:26:7d:9a:5e:
         3f:a7:c4:01:4f:56:67:37:27:9a:ec:13:ed:e4:29:e8:44:e3:
         6c:7d:03:d2:ac:08:6b:50:e6:6b:0c:be:6b:de:f3:72:35:1a:
         3c:76:a9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:50 2024 by rpki-client on console-fra.rpki-client.org