Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba938988-b182-316a-a82e-b05596bbea07.roa
File:                     ba938988-b182-316a-a82e-b05596bbea07.roa (raw, json)
Hash identifier:          VuAkfreOG5ciYY5om0CvklV4Qj6LUGdOQdG66Jmtlrw=
Subject key identifier:   7B:94:D5:04:93:45:3F:C3:44:3F:49:00:F5:34:76:BB:88:E2:A2:A3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C1EBC58BBCBDBFFD5C840
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba938988-b182-316a-a82e-b05596bbea07.roa
Signing time:             Tue 24 Sep 2024 16:26:19 +0000
ROA not before:           Tue 24 Sep 2024 16:26:19 +0000
ROA not after:            Mon 23 Dec 2024 17:26:19 +0000
asID:                     397217
IP address blocks:        2001:502:ad09::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:1e:bc:58:bb:cb:db:ff:d5:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:19 2024 GMT
            Not After : Dec 23 17:26:19 2024 GMT
        Subject: CN=70d4377b-a751-41c3-b95f-51a4d02d3aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:50:fd:e3:35:d8:7f:d2:c9:3a:05:db:8a:a2:
                    1e:0f:5d:b2:d4:3b:1e:00:13:a4:97:bb:cb:83:c0:
                    9e:48:9d:b3:eb:da:dd:60:ec:bb:2b:b5:f6:21:4c:
                    96:b5:2b:65:a4:4a:85:95:13:fa:b3:d0:0c:f4:bb:
                    bb:2b:7a:56:81:23:ce:4b:ef:96:53:bc:f1:e7:44:
                    8c:af:54:5a:ba:69:3f:30:86:3e:9b:1d:b6:6d:44:
                    dc:b1:8c:0e:57:48:9d:83:2e:94:cb:37:53:4d:92:
                    81:00:7b:e0:95:74:9b:ce:1b:10:c3:d9:f0:f1:ba:
                    fc:70:df:01:40:2d:05:6e:10:9c:f7:4e:ed:35:9b:
                    55:2c:d4:e1:76:0d:89:a8:2f:0e:16:a3:47:b5:15:
                    d6:a7:ce:7c:e9:a0:2d:99:bc:88:b2:42:78:c4:ce:
                    fd:76:d9:6c:14:91:4b:9e:7f:09:ad:fd:7b:12:21:
                    43:14:18:f8:f1:aa:af:a4:50:5e:a4:cb:86:50:59:
                    42:e0:24:ba:96:cf:fc:15:85:47:2e:92:37:da:6e:
                    16:9a:79:ab:b8:20:7d:e1:f9:ab:d6:f5:de:d1:86:
                    eb:1b:f9:49:e6:f2:8c:e2:2e:72:6b:5f:ca:7e:79:
                    a2:0e:8b:2d:45:30:78:5a:68:a9:87:40:6d:bd:93:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:94:D5:04:93:45:3F:C3:44:3F:49:00:F5:34:76:BB:88:E2:A2:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba938988-b182-316a-a82e-b05596bbea07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ed:d8:f7:5b:cd:bf:d3:ae:ac:7b:36:41:89:e0:6a:17:c9:
         e8:57:53:85:a7:12:f0:76:45:cb:fe:ff:bc:ea:ae:6f:eb:01:
         bc:4f:d2:dd:6d:0e:10:79:61:96:bc:35:ef:6c:2b:17:73:ff:
         b4:f0:a9:60:c2:f3:89:e9:1f:50:e4:e4:85:a7:ee:e1:bd:d9:
         9a:ea:e9:29:5d:4b:ea:46:6a:32:0a:66:86:85:65:49:fc:39:
         0f:85:63:3e:42:fd:7b:c4:73:4a:65:67:30:af:04:41:4c:cd:
         4d:cd:b9:c2:b0:8f:9c:a0:1c:2b:dc:ba:63:d5:41:25:29:0e:
         7f:be:e5:dc:a5:9a:53:d0:47:be:12:f3:bd:09:32:d6:14:45:
         ae:2b:d8:ad:a8:f5:9e:00:a4:90:45:1f:90:e5:8d:ab:90:4f:
         4a:e6:bf:18:17:08:91:2d:a1:51:9d:cd:c1:16:00:88:4c:c0:
         78:0f:a4:36:06:dd:e3:0c:6c:82:60:94:b2:3a:00:03:49:1d:
         6d:f6:9f:ca:27:37:a5:53:3d:67:8c:06:cb:d6:8c:25:ac:2b:
         a5:4c:2d:85:c4:fb:42:a0:28:d2:7e:e8:db:cb:36:96:34:1b:
         dc:33:e1:61:bd:f1:27:74:8a:e0:c2:87:e5:6a:d8:1a:e1:b7:
         7c:23:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:31:03 2024 by rpki-client on console-ams.rpki-client.org