Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/16c452c4-513c-32d7-b096-826a2bb98de5.roa
File:                     16c452c4-513c-32d7-b096-826a2bb98de5.roa (raw, json)
Hash identifier:          krLkv6HTKIYar1TTvmq2n76zbxRxf28B8dAZPgr+kiU=
Subject key identifier:   C4:88:8E:E9:5A:79:A3:CC:C9:DF:25:3E:7D:93:BC:07:E1:24:DF:21
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802683CC9B192CD96646CE00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/16c452c4-513c-32d7-b096-826a2bb98de5.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:2b10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:83:cc:9b:19:2c:d9:66:46:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=e62a1ee9-b369-40e6-b67d-09e754f11085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:2a:6b:80:a7:83:36:61:ee:3f:da:9b:ff:
                    64:9f:64:7d:e0:be:54:fb:ed:9b:c0:22:4f:61:8b:
                    11:f6:06:91:3d:30:b7:49:d9:3f:85:f6:14:18:ff:
                    5a:87:75:74:73:55:69:17:5c:a6:e9:dc:5f:ba:1c:
                    12:86:9f:f9:c4:70:62:cc:e6:57:d1:6c:29:22:7c:
                    71:74:3f:cb:8e:c5:68:9a:8d:ce:60:88:c3:66:29:
                    15:ab:4d:37:c6:52:27:d2:a4:81:dd:15:99:7a:54:
                    f6:49:b0:c1:2c:e0:ad:38:03:e8:0e:78:12:7d:4e:
                    53:d4:02:fc:42:a4:92:10:0d:b9:f7:9a:c4:9a:3c:
                    e1:cc:84:b3:ee:38:1d:dc:b3:e5:81:63:cf:95:fa:
                    c0:07:02:50:72:10:e0:db:a8:be:52:28:4b:12:9b:
                    1e:27:16:14:9b:ac:a2:ab:d1:fe:4c:b4:63:d6:a7:
                    2e:04:36:e9:aa:10:aa:ad:1e:49:b4:2e:64:08:c1:
                    ed:c0:7e:73:56:0b:b5:43:69:de:6b:f9:ad:7f:2e:
                    99:be:ea:63:0d:d7:d6:4b:bc:9e:2a:e0:62:f8:0f:
                    13:4d:6f:a3:c2:48:07:51:68:d2:03:0b:d0:1c:41:
                    df:64:24:db:6e:29:d4:28:8b:3e:5b:57:01:dc:8e:
                    ca:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:88:8E:E9:5A:79:A3:CC:C9:DF:25:3E:7D:93:BC:07:E1:24:DF:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/16c452c4-513c-32d7-b096-826a2bb98de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2b10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9b:87:25:ab:b0:07:2d:a6:37:98:af:8a:a1:f1:b6:16:a8:
         42:32:7e:27:d0:45:07:43:1f:d9:be:5e:14:28:79:c9:fa:53:
         a1:05:31:be:da:d8:0a:17:3d:f9:0c:b4:05:fa:3b:7c:f5:1c:
         2c:48:1b:fc:ab:5f:c3:41:f1:7a:f7:67:7d:f0:45:33:57:41:
         62:63:36:ca:1f:ac:11:30:25:54:85:81:c8:41:43:39:07:e0:
         d5:59:11:b9:0b:1e:da:00:c3:76:78:cd:ee:89:3d:f7:c9:f8:
         5e:21:cb:e8:f5:e3:f2:06:87:05:d4:d9:14:f4:79:bb:56:a3:
         c3:f4:0a:a5:9a:25:a2:d0:be:51:f3:53:28:98:75:1f:7b:41:
         8c:92:f3:94:e1:01:2d:85:c0:5e:de:21:ef:74:22:8f:b6:e9:
         d1:18:86:bd:71:c6:61:b8:1f:b7:fe:49:5f:66:25:cd:24:ec:
         b5:90:93:7d:5e:34:b6:2b:42:7e:06:9f:06:20:30:39:c5:5f:
         c2:a5:d7:b4:a2:c9:e4:93:43:dd:8a:34:be:27:5c:d7:0d:ea:
         b1:fe:05:ad:57:7f:f4:c2:92:ed:a7:bb:86:b5:c0:7a:8d:72:
         04:58:2d:03:1f:8d:35:55:10:b6:aa:b4:3a:ae:a3:6e:2c:26:
         32:24:e8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:11 2024 by rpki-client on console-ams.rpki-client.org