Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ba7544c9-2698-3c1d-882c-7ddabe9e62e2.roa
File:                     ba7544c9-2698-3c1d-882c-7ddabe9e62e2.roa (raw, json)
Hash identifier:          NTNsJEN8oa2V4NQj5oknVM/hTkj+OIuv0p9750+8BJ8=
Subject key identifier:   0D:6B:A7:28:70:A0:D8:17:64:A9:BF:E7:42:70:0F:47:B2:49:F2:A2
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584734C880E0B6A0C1DB84CD4500
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ba7544c9-2698-3c1d-882c-7ddabe9e62e2.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     15418
IP address blocks:        2607:f1c0:fe::/47 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:80:e0:b6:a0:c1:db:84:cd:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=da5b939b-5758-4bf0-9483-5f6ab4f40768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cc:4a:7e:2a:e1:34:34:0d:67:f9:ed:a1:f2:
                    31:41:d8:b6:fd:04:d5:82:d1:99:c9:bc:7f:3d:f2:
                    c6:ac:7b:f9:be:d7:44:c0:dd:25:0d:1e:c1:dd:69:
                    38:dd:80:81:fd:f2:57:74:db:5a:d3:cd:97:ba:b0:
                    67:60:ab:6e:a7:38:89:64:12:cc:86:f4:34:5d:8e:
                    c4:f6:c5:c0:ef:91:ce:3f:1a:88:91:47:65:45:0f:
                    79:e8:9f:ba:70:af:01:46:f5:d9:3f:fc:c2:63:7c:
                    52:b3:db:e1:4c:bc:47:3d:2f:8d:46:91:25:c8:10:
                    5d:12:7c:88:d6:b0:11:b6:1f:c0:97:c2:9b:f0:f1:
                    b2:84:4a:92:cc:f2:04:6d:9e:b6:25:66:35:71:a7:
                    e7:d7:8f:a2:b8:d2:9b:e9:06:5b:5f:05:d8:47:8b:
                    ab:af:e4:9f:cd:d1:c9:9a:0a:b3:ef:f5:f2:a7:b1:
                    17:ad:47:f9:f9:84:54:95:5b:6c:7a:a7:71:67:05:
                    16:ba:a9:32:b4:d2:1c:21:a7:a0:76:79:d8:9b:cc:
                    04:79:60:9c:a8:de:4d:e5:89:66:41:a9:f4:a9:f2:
                    7c:87:cd:83:60:3c:cb:2e:2c:79:c1:24:e0:3f:ea:
                    32:18:e0:ca:c0:20:ba:fb:35:51:92:68:d5:96:97:
                    f0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6B:A7:28:70:A0:D8:17:64:A9:BF:E7:42:70:0F:47:B2:49:F2:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ba7544c9-2698-3c1d-882c-7ddabe9e62e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f1c0:fe::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:17:ac:77:35:a7:0b:e9:83:a1:a9:04:9e:c9:0f:5a:e3:76:
         83:36:93:5a:a5:df:cd:98:4c:ee:ec:b2:67:47:c4:f7:34:59:
         3a:61:c9:21:7d:49:58:50:0e:21:5d:b5:7c:81:78:c3:db:81:
         9e:7b:6b:40:2f:66:ee:18:c0:cf:74:0b:75:a2:7d:c1:de:74:
         5a:6c:21:0d:01:6b:d1:70:f2:95:5f:dd:10:aa:3c:67:f7:2b:
         1c:5e:da:bb:1f:19:08:06:b1:28:70:56:38:f8:6c:7f:56:fc:
         2a:be:da:93:3f:ef:c7:a1:ad:97:eb:9e:c6:27:78:72:6b:cb:
         05:be:46:27:f7:23:7e:02:1a:79:c7:9e:55:29:8f:fd:df:a9:
         24:e4:ec:db:58:03:06:06:d7:03:64:ad:73:ee:c2:fd:cb:6f:
         3f:c4:35:1e:b3:bf:0b:91:d3:a4:fd:02:b0:49:bf:53:38:ad:
         f4:96:c4:1e:a0:9f:2f:3f:19:62:9a:99:ec:b9:a3:33:e1:6e:
         77:c8:ea:7f:d6:1f:24:1d:1d:74:9a:e6:ce:62:ca:68:f6:4f:
         d3:0e:84:21:4c:8c:9e:2a:b3:6b:b3:c3:5a:19:1f:1f:f1:67:
         43:cd:2b:d3:69:c7:37:c5:3b:46:9e:a6:8e:9d:01:6f:da:df:
         56:3a:22:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:01 2024 by rpki-client on console-ams.rpki-client.org