Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/15642941-be2c-31cf-8c8a-fac0b047d39b.roa
File:                     15642941-be2c-31cf-8c8a-fac0b047d39b.roa (raw, json)
Hash identifier:          rB49xvVGkrOzXgZLhq8+OEHyycldcvf0cnjR3oYWW9w=
Subject key identifier:   97:FE:32:6A:1B:C6:62:E1:CE:BE:25:3B:B8:53:E5:CB:B6:BF:71:74
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780266F6F38C50BDA4186B000
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/15642941-be2c-31cf-8c8a-fac0b047d39b.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:4f70::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:6f:6f:38:c5:0b:da:41:86:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=83a768e4-2bb6-4c10-937e-745c1d9b4e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f4:3c:4a:a2:eb:79:84:15:74:aa:b6:62:b1:
                    89:fe:b6:77:26:b4:03:60:23:2b:53:b0:c3:b0:7c:
                    e0:16:7e:b8:f1:09:b3:24:9f:81:ec:e4:31:a5:7b:
                    16:7d:68:1f:36:2c:e7:31:76:a8:83:1c:39:f2:c6:
                    3c:59:bb:d8:5e:84:7f:20:21:bd:15:89:17:4c:54:
                    26:1d:c6:4c:d0:5f:68:43:d7:af:dc:67:4f:b8:97:
                    a5:25:b2:cc:8c:ca:ab:e0:5a:24:8c:71:f5:ca:29:
                    d2:4c:0f:42:28:a9:68:ea:36:4e:60:20:df:08:e1:
                    d0:4b:f4:d5:79:18:f2:7a:79:dc:84:70:f6:c0:86:
                    82:f1:36:06:e1:67:7e:35:2a:76:e0:be:2b:6d:14:
                    17:0c:47:3a:e3:67:f2:37:7b:af:10:f7:10:a9:0c:
                    59:8a:6b:77:3e:a6:02:90:37:04:ef:b1:0f:9a:83:
                    e6:56:a4:1c:58:04:61:79:2f:9f:c9:59:90:98:2c:
                    42:9c:81:76:e1:98:2b:42:48:f5:05:59:de:52:39:
                    f0:7a:1d:f2:a1:ba:c2:73:61:c1:f3:8a:f4:59:d6:
                    70:63:b0:56:aa:9b:6a:3e:4a:7e:d4:6e:ff:e1:47:
                    36:21:2e:e7:99:a8:6c:df:e6:9e:97:7e:7c:1b:a9:
                    18:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FE:32:6A:1B:C6:62:E1:CE:BE:25:3B:B8:53:E5:CB:B6:BF:71:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/15642941-be2c-31cf-8c8a-fac0b047d39b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4f70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:82:66:ca:43:49:47:8a:37:4f:a5:bf:b2:ce:4d:03:fd:1d:
         51:06:33:6d:70:61:e8:3f:7c:95:45:75:6e:94:b0:99:ae:98:
         40:fc:14:a7:81:71:64:cc:35:d0:bc:11:3b:b2:a7:56:c8:92:
         f8:eb:a3:83:07:7e:59:64:4c:e5:00:cb:73:0e:46:88:6e:d9:
         04:b6:43:bf:64:57:44:5b:19:71:ec:5a:dd:94:10:07:7c:c9:
         35:d3:62:59:1d:90:79:1b:86:db:c9:bf:7e:bb:63:e9:f6:7f:
         e0:db:85:7f:1a:c5:dc:0f:55:c9:17:dc:93:69:50:38:d6:d6:
         0d:8b:d6:a2:40:df:d3:50:72:be:5f:13:e9:38:54:35:78:84:
         51:8a:50:5a:ca:e0:44:2d:1d:1d:e6:96:c4:eb:32:87:ef:79:
         46:26:a7:b8:91:14:00:0b:85:c0:ae:d2:9b:38:09:18:6c:5d:
         b1:53:96:d0:ae:35:f3:71:d8:40:39:61:b9:18:f1:83:ed:bc:
         5f:45:f2:1b:ee:72:fa:2f:57:1b:cc:01:81:e3:85:70:bd:4e:
         bf:c5:69:eb:22:61:7d:05:95:c2:ea:2b:45:51:df:47:57:52:
         4f:0b:95:d9:90:ad:e9:af:4b:6d:e4:cb:76:d6:5e:5e:6f:f3:
         d0:23:51:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:19 2024 by rpki-client on console-ams.rpki-client.org