Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0064ef1e-27b0-3a10-8b02-72b605f80fdd.roa
File:                     0064ef1e-27b0-3a10-8b02-72b605f80fdd.roa (raw, json)
Hash identifier:          5nbVcYYOoziX2voiIXYPc3NhF/M4/DUI9GNw7d9yIu8=
Subject key identifier:   01:03:E5:9E:A9:83:B9:A8:13:E6:C6:95:0B:73:39:DB:DA:CA:9F:7B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780268EA655367FD7A3562880
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0064ef1e-27b0-3a10-8b02-72b605f80fdd.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:2430::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:8e:a6:55:36:7f:d7:a3:56:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=8fc89ea8-3f08-498b-adb6-59d3b97580b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:73:dd:55:4c:1e:d3:1f:4e:04:2f:38:87:df:
                    25:c5:47:93:e3:65:6f:ba:67:5d:39:d2:bf:db:19:
                    46:9f:5f:bd:07:aa:4c:5f:b1:65:61:aa:6e:42:74:
                    5a:ca:6e:7b:6c:bd:71:b4:74:00:57:dd:67:db:57:
                    fc:c2:d5:d7:96:18:d0:3d:71:cd:b8:af:6e:4b:5b:
                    1e:88:9c:67:49:fb:b0:8f:8c:5f:ee:54:22:e3:c9:
                    27:38:bb:fd:f7:ea:d9:c7:0d:88:c4:d9:bd:9f:36:
                    2d:83:a5:eb:6b:d0:57:76:54:21:4f:32:a5:44:6b:
                    ff:8e:30:25:48:a4:8d:90:86:c4:91:fb:55:68:fa:
                    6b:6a:a8:5d:2a:75:27:4d:b4:f3:16:25:d0:f9:03:
                    ae:a6:dd:b2:ff:c8:91:09:ed:70:d1:c6:77:5a:38:
                    a6:63:c2:2d:75:3a:d8:40:03:c1:37:32:2c:35:b3:
                    40:bf:fa:20:ac:8f:93:98:f5:f2:a4:d9:46:ca:1c:
                    5e:0d:f8:86:88:53:43:2e:6b:cc:f9:eb:b5:91:65:
                    c6:04:14:d9:d5:09:55:4f:82:0c:d2:61:d4:d3:57:
                    0a:47:5e:bd:89:28:c4:57:e7:af:ca:8e:ce:88:f8:
                    56:81:4d:e4:01:c3:1d:a5:3d:9e:09:77:15:d6:4a:
                    8f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:03:E5:9E:A9:83:B9:A8:13:E6:C6:95:0B:73:39:DB:DA:CA:9F:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0064ef1e-27b0-3a10-8b02-72b605f80fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2430::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:c4:3f:d0:e5:80:0a:14:7f:da:fa:78:68:b1:fc:19:ba:92:
         6d:bd:fa:27:90:58:58:e4:eb:7b:77:94:47:e0:1b:35:7d:e2:
         81:90:0f:f9:6a:8e:62:39:a5:16:75:17:4b:9e:cd:52:0f:9c:
         a7:a7:b1:27:8b:d9:f4:c4:71:11:a6:64:5f:1b:c0:e4:7a:4b:
         c1:58:14:c4:2d:92:b2:cf:9b:1b:b8:ce:1b:54:35:ff:e9:52:
         27:6e:88:5a:c6:0d:d6:07:67:ea:94:ae:8a:e1:8b:99:b3:1a:
         5f:26:ab:d9:d0:08:5e:c6:c9:52:cb:f7:7e:90:4b:da:6a:05:
         c2:55:f8:c0:dc:ed:dd:14:a9:80:26:3d:5c:50:be:10:b9:0d:
         67:45:72:c5:d7:d7:d4:c3:22:7e:e5:d9:ad:e5:07:37:1d:41:
         f0:b3:1e:76:8a:b2:06:b9:8e:fe:97:1f:54:b6:b9:55:54:8c:
         ff:7b:9d:0b:b3:81:e3:6d:0d:3f:f2:fe:5c:44:38:75:51:2a:
         91:f9:33:a0:08:df:ea:d0:13:b9:60:4b:0f:72:97:df:09:f6:
         ae:f0:05:a8:84:df:d7:80:66:2e:e7:a4:98:b4:ab:eb:b1:17:
         df:76:bb:10:d7:0c:27:54:2b:42:2a:4c:e0:c8:01:09:98:43:
         91:7b:32:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:10 2024 by rpki-client on console-ams.rpki-client.org