Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0cbf7607-cf57-3fe6-b44c-fcddbd36ad06.roa
File:                     0cbf7607-cf57-3fe6-b44c-fcddbd36ad06.roa (raw, json)
Hash identifier:          DbmbzcpBIcOdXywEfz7tBbo5czKrT34mUe3c26HNne8=
Subject key identifier:   62:BB:E3:ED:72:A7:83:37:75:3C:15:9D:07:8E:09:53:1C:9C:55:AB
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9AFD8BDB2DB705570ED9E0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0cbf7607-cf57-3fe6-b44c-fcddbd36ad06.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4700::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:fd:8b:db:2d:b7:05:57:0e:d9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=2dea9248-60f8-4ded-8dfa-3f3f5fce253d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1a:a8:d9:12:92:a3:af:88:95:2d:0e:d3:92:
                    73:b8:a6:e1:e5:f3:30:1f:b4:e6:27:50:b8:10:64:
                    b7:7e:44:b2:fb:27:d8:3c:ad:36:2e:e2:aa:98:1b:
                    05:d4:5f:cb:67:0d:4d:6e:bb:07:20:c6:91:05:1c:
                    06:f7:a6:1f:34:61:89:70:05:51:59:31:d5:af:44:
                    5f:97:dd:78:79:aa:9f:f6:df:5e:1c:64:38:a0:6a:
                    9b:73:fd:7a:9f:c3:92:5d:1b:8a:6f:ab:21:dd:d7:
                    44:be:d4:62:c3:b2:bc:e2:1a:5e:e8:d4:ec:39:55:
                    0d:cc:18:fc:6a:ff:8f:2a:09:04:c2:4a:5e:8a:98:
                    e0:68:92:ce:ed:a7:e2:c2:20:34:75:6d:a7:0b:b9:
                    27:ba:0a:68:8e:fc:d1:e2:26:ee:39:4f:84:c2:2b:
                    c4:58:26:b1:6d:1c:e1:77:a0:18:d8:dd:17:46:e2:
                    e2:1e:46:41:59:58:6a:cd:49:ef:e2:b2:45:ef:be:
                    b8:59:b5:ad:61:40:58:b6:14:76:10:de:a4:a0:53:
                    e1:ed:7f:03:9f:6d:66:60:c2:20:60:ca:be:31:5b:
                    10:76:61:54:ca:b0:c9:77:82:3d:5d:70:3e:18:2c:
                    b1:69:a7:06:46:17:20:c4:b8:1d:a4:23:ee:b0:29:
                    eb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BB:E3:ED:72:A7:83:37:75:3C:15:9D:07:8E:09:53:1C:9C:55:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0cbf7607-cf57-3fe6-b44c-fcddbd36ad06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4700::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5f:b4:f3:c6:11:e8:7f:e9:3b:19:7a:7e:12:1d:26:42:c0:
         28:19:7c:d0:05:ed:3b:a3:0f:41:3a:e2:d0:79:31:9a:3a:67:
         0b:42:1e:78:60:b2:a2:a7:16:0b:cc:64:2b:db:6c:bc:60:76:
         17:62:be:5e:0d:f1:d9:f5:05:43:ed:fa:26:3d:44:1d:e1:09:
         ea:87:dc:c0:07:86:94:54:20:e8:d7:3e:ec:2a:4a:c8:9f:e6:
         f5:59:db:da:34:6d:14:27:97:5b:d4:31:b1:af:15:52:38:a5:
         76:db:38:47:6b:a6:d1:4a:42:e4:81:94:55:25:f1:81:43:fd:
         31:5d:4a:01:71:99:6e:a7:21:6b:25:c1:84:a7:96:d2:29:f1:
         e9:48:57:a9:8c:13:ce:7e:e3:96:7c:1c:46:7c:79:17:87:90:
         e2:dc:50:51:5e:4e:34:3e:c4:01:24:d1:09:e2:34:9f:0d:df:
         fa:9f:da:dc:c4:00:2b:e7:2a:70:3b:5c:b1:fb:da:4b:e4:d0:
         dd:50:6a:02:a2:b2:96:a8:a9:9b:ce:eb:03:8b:53:98:97:ca:
         56:48:7a:1e:62:e2:b9:d1:2a:f3:43:80:43:a1:30:b9:f8:85:
         e6:2c:97:c6:7f:8d:2e:00:1a:70:fd:7e:46:1c:38:00:9d:14:
         4b:fc:07:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:07 2025 by rpki-client