Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/ba83fafa-9f43-3e85-b0b7-0e086378e3d7.roa
File:                     ba83fafa-9f43-3e85-b0b7-0e086378e3d7.roa (raw, json)
Hash identifier:          jh0pflsDgqJHsI61GjnMwKYBpzEjalNUVIgsut35YRM=
Subject key identifier:   56:28:F0:47:E1:5D:5C:7F:F0:B9:CC:88:0D:02:97:2C:28:EB:AC:68
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F432858477230F0379781262B9C4F6E80
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/ba83fafa-9f43-3e85-b0b7-0e086378e3d7.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     22192
IP address blocks:        2607:2240:1800::/37 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:f0:37:97:81:26:2b:9c:4f:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=133e074f-3ce8-4ff0-8844-fba88d0e417f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:9b:d9:f4:4a:38:02:58:73:87:ce:46:dc:
                    9c:de:4f:ce:16:5d:86:68:1b:de:03:0a:45:9e:27:
                    0e:51:40:05:d5:e6:17:7c:a0:25:fe:e0:ba:19:42:
                    f6:60:d1:43:19:70:da:8b:6c:7d:09:c4:56:c4:e5:
                    77:fb:4f:79:34:b2:b2:e6:53:df:e0:40:b8:8a:a3:
                    7b:d5:44:32:58:1e:30:78:53:09:ff:49:a5:39:56:
                    35:97:ce:50:4b:14:53:bd:00:84:60:db:f0:f0:ff:
                    15:95:91:59:a9:36:d7:0e:11:ea:22:73:d9:cc:8a:
                    9d:1f:55:83:3d:6d:4c:77:ca:e4:6d:0c:92:fd:d6:
                    24:b1:9c:db:3d:1a:f2:b0:02:6b:f6:79:9e:e2:57:
                    95:55:81:97:a4:cb:55:8e:0d:77:6e:90:1b:e7:e6:
                    8e:c5:ab:8d:75:21:6d:9c:80:57:77:ab:5f:3a:8b:
                    75:d5:06:6e:03:8d:6f:8b:5d:34:d1:67:40:89:34:
                    29:88:2b:40:63:f2:d8:d1:63:fa:b3:b4:a0:f8:1a:
                    0e:f5:36:6a:fe:e5:02:c1:e5:d6:27:a1:39:3b:b5:
                    34:47:67:8f:e4:c2:13:33:d5:91:ab:e8:5f:08:a8:
                    3c:1a:a4:5c:3b:11:1e:e1:d7:91:7a:4a:78:50:99:
                    89:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:28:F0:47:E1:5D:5C:7F:F0:B9:CC:88:0D:02:97:2C:28:EB:AC:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/ba83fafa-9f43-3e85-b0b7-0e086378e3d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:1800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a1:d3:66:ad:bb:47:ba:af:03:c7:ac:f7:0a:fb:c2:a4:90:
         b9:b3:ca:e0:df:21:0c:da:2f:35:51:f6:1c:46:e1:c0:03:af:
         d9:51:c1:5b:ae:00:43:38:ee:6b:54:39:96:34:a4:24:5f:63:
         f0:3e:20:fe:33:1a:fe:4a:61:70:81:85:96:e6:fb:b5:f3:69:
         f5:f6:cd:90:68:78:08:93:31:bc:fe:5b:63:20:d8:55:d5:23:
         4d:d0:54:c5:41:6f:92:3a:4e:e9:b8:4f:80:35:33:c9:48:06:
         4a:3b:b4:df:b7:42:3d:6b:7c:f8:3a:4a:e4:d8:c5:7b:22:24:
         56:89:19:dd:9a:26:48:6a:3a:cf:6d:a9:05:4c:41:9b:50:5e:
         ea:bb:90:a4:c0:49:e9:1b:75:69:07:ef:95:1e:b4:57:b4:84:
         f2:b0:e6:d3:72:67:a8:b2:d7:cc:0b:a5:24:4f:f0:77:56:d0:
         f4:12:10:e3:c0:51:b2:78:31:90:59:8d:2d:6f:5b:84:77:ce:
         4d:2c:25:84:96:94:ea:0a:9a:77:61:9e:e2:b4:1a:23:88:1b:
         01:9e:75:95:2b:f3:34:84:4e:55:5f:49:8a:24:b1:83:10:db:
         6b:f6:a3:ad:5a:c9:04:f4:33:0e:02:7f:c4:cf:d9:05:63:b5:
         4a:dd:f1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org