Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a11fa60-addc-3012-947d-d9254d3b4897.roa
File:                     0a11fa60-addc-3012-947d-d9254d3b4897.roa (raw, json)
Hash identifier:          VC1Pxl/QFo/wsyNbTPpiFAw/8oQaesxgiIh5WyRoNic=
Subject key identifier:   34:C6:6D:31:93:7E:7D:B5:F9:FD:E0:A7:59:61:82:37:20:C2:F7:05
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178EB12FE6D86E45D5B6062
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a11fa60-addc-3012-947d-d9254d3b4897.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3ab0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:eb:12:fe:6d:86:e4:5d:5b:60:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=92064a39-9396-4554-8d93-c9dd913a2420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:b4:22:c4:d6:c0:f5:a4:f5:5a:30:3f:4a:
                    1a:b3:e4:f2:8c:aa:ab:8c:7a:70:06:4b:d8:7f:2a:
                    49:44:20:a9:56:a7:3e:04:46:5a:9c:f9:a8:00:ef:
                    03:c5:d8:00:b1:9b:70:c1:95:66:f7:6f:47:70:f8:
                    fc:5c:93:13:7b:64:0d:db:6f:d2:c7:0f:e1:77:5e:
                    b3:11:20:61:e6:75:74:75:4a:83:3e:a1:c6:d7:84:
                    56:0d:dd:78:39:24:eb:8f:ac:4a:ea:5f:7a:50:fb:
                    1c:31:53:b2:a2:42:18:5d:c3:94:c5:ee:d7:f0:33:
                    85:db:0b:12:44:d5:76:69:98:e9:81:96:8c:e3:99:
                    e8:a2:85:98:29:92:ad:d8:aa:99:37:ce:bf:77:3e:
                    6f:59:ae:47:b4:fd:1e:ea:41:dc:7f:44:45:3c:4b:
                    bc:05:cc:38:0b:fa:e6:d2:3f:27:7d:82:be:6e:99:
                    68:03:c8:92:a0:58:33:63:6c:b8:5a:c4:aa:44:48:
                    c8:ae:aa:2d:93:81:85:6b:a0:e4:a9:2a:74:65:e8:
                    a8:e8:f1:6b:02:1d:58:6c:a3:75:cb:c5:21:3f:62:
                    04:65:64:b5:54:22:6f:5b:09:83:dd:2b:c3:a8:77:
                    bb:19:df:f0:2a:27:52:e3:1d:c2:16:22:1d:85:60:
                    e0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C6:6D:31:93:7E:7D:B5:F9:FD:E0:A7:59:61:82:37:20:C2:F7:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a11fa60-addc-3012-947d-d9254d3b4897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3ab0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:9d:01:13:ed:9d:74:c8:77:3e:35:88:5d:ec:ef:28:b4:6c:
         1b:ff:d5:8c:07:ea:43:b4:56:67:53:8c:93:f2:4e:9a:6f:f2:
         50:58:55:7f:b9:6b:8e:3a:d3:fd:35:6d:15:2b:16:24:c8:d9:
         65:25:ac:87:02:b9:e2:03:01:f0:18:03:73:96:40:c0:e1:2b:
         fa:14:7b:50:0f:c9:b9:40:10:f1:94:8c:69:b5:11:ef:59:ba:
         4e:7b:59:75:53:9d:86:8c:3d:7f:84:66:8e:83:85:0f:f3:35:
         38:e4:c8:7f:2a:1d:cb:4f:3a:45:b9:b1:80:c6:44:74:2c:d8:
         d2:ab:85:5c:35:00:3a:85:37:cf:d6:20:62:f4:f9:2b:24:b4:
         78:04:e9:b2:6f:ed:9a:b6:5f:24:1b:53:cb:1d:de:3d:84:85:
         bc:a8:5a:0d:f7:c8:29:0c:e7:d7:ac:73:69:3b:7a:40:8c:9b:
         09:03:59:d5:88:c2:35:cd:b3:be:c1:bb:57:52:9e:11:7a:c5:
         93:c0:64:15:05:1a:b5:59:92:fa:22:f0:b1:9e:af:0f:29:d7:
         e1:0e:6c:ff:c1:f1:ee:11:f7:6d:5f:6b:32:30:6e:23:78:73:
         cf:e9:24:17:a4:d4:48:48:ef:cc:d8:63:55:49:4c:ad:ba:71:
         9f:e0:af:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:48:07 2024 by rpki-client on console-ams.rpki-client.org