Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/18b89b3d-6094-3c7d-b4c4-b1260d112bed.roa
File:                     18b89b3d-6094-3c7d-b4c4-b1260d112bed.roa (raw, json)
Hash identifier:          IwLzKytyPqns31RTB303d09cgQEhilaFnLGZrVhhlUI=
Subject key identifier:   3D:2C:BE:3C:A6:61:7C:AA:E4:C1:6A:AF:04:4A:B9:A3:AE:0E:B7:74
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9AF6A27A093F690ACFD280
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/18b89b3d-6094-3c7d-b4c4-b1260d112bed.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:54e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:f6:a2:7a:09:3f:69:0a:cf:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=75c64e46-6691-4e91-a4a3-025ccdc653dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ff:ec:e9:75:e6:14:ce:81:9e:dc:0f:b5:43:
                    7e:f7:37:cf:c5:57:b7:a1:88:5e:f1:63:d0:a1:81:
                    aa:89:c4:14:bc:9d:70:08:98:cb:1b:82:e5:01:2b:
                    f9:1a:dd:2e:b4:bb:a4:48:e1:60:88:6b:d8:b4:f2:
                    05:22:02:1b:93:00:e3:70:47:76:69:ef:3f:d1:54:
                    99:12:ff:a4:c9:fd:44:b8:86:1b:60:22:95:88:1a:
                    85:8e:a1:47:99:b4:f1:6f:3d:07:1d:b4:ca:70:ed:
                    ca:77:47:e3:26:aa:c0:e6:06:ac:b8:ea:c8:82:93:
                    51:6e:88:f8:b1:d6:c4:24:2b:3c:29:3c:04:44:62:
                    99:20:03:79:2d:c1:10:b8:02:08:f0:37:d6:77:44:
                    89:fa:84:87:f2:9f:0c:26:e3:05:6c:e9:08:c8:53:
                    51:b0:18:48:6c:89:70:4d:2c:0b:a2:59:77:30:8a:
                    1f:33:e3:5f:64:1b:2d:87:03:1c:97:d2:95:a4:b9:
                    79:b1:a3:fc:31:d1:0a:ed:34:2a:e4:94:f8:da:77:
                    3e:88:0f:76:c3:c6:c2:91:30:6c:82:4b:e8:57:d8:
                    31:f0:2e:ad:24:eb:be:bf:ce:26:84:49:02:2d:73:
                    9f:85:3f:e0:c1:33:28:5f:fd:70:1e:61:bb:57:48:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2C:BE:3C:A6:61:7C:AA:E4:C1:6A:AF:04:4A:B9:A3:AE:0E:B7:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/18b89b3d-6094-3c7d-b4c4-b1260d112bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:54e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b5:1c:a3:59:19:40:32:80:60:96:7b:eb:8e:8c:5e:23:f2:
         33:ea:34:35:52:dc:e3:eb:da:17:72:24:5b:e0:4c:b4:c7:bd:
         f8:86:77:1b:14:24:e4:6e:5d:ae:ed:2a:ba:6d:10:01:7e:66:
         1e:d2:f9:a5:fc:28:5e:8c:1a:10:cf:de:55:4b:75:f2:3a:51:
         14:d4:18:05:bd:5a:a6:ed:5a:88:b2:ca:b9:e2:ae:b8:aa:5d:
         24:fc:3e:9f:d6:bd:4a:f6:f8:29:24:a8:8f:6f:91:e5:83:c4:
         b9:1a:4c:44:07:26:72:a7:d4:5e:6b:f0:22:4a:b5:0d:07:ab:
         6f:fc:fa:15:49:ab:64:d6:14:a7:1e:52:47:13:43:6e:2e:4a:
         60:48:da:bf:b8:83:45:65:42:e8:aa:ef:5c:9c:a8:78:13:48:
         87:68:79:72:18:13:d1:4b:a8:44:71:75:b0:25:6b:23:9d:85:
         55:25:12:cc:5d:ca:e4:b9:d4:fb:bf:b3:b5:c7:16:56:89:48:
         3c:4d:28:d8:e3:c1:eb:de:d1:57:95:5e:cb:bc:e7:aa:71:37:
         11:74:3d:a7:17:2c:8f:ed:0d:f0:5e:ea:3b:e5:ff:1c:d5:f5:
         4e:c5:3b:47:21:8d:31:13:97:d9:90:08:83:18:7a:10:49:3f:
         9a:a6:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:35 2025 by rpki-client