Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1fc14bd8-5c26-3ffd-8b0b-53c8417cb088.roa
File:                     1fc14bd8-5c26-3ffd-8b0b-53c8417cb088.roa (raw, json)
Hash identifier:          NjopoM+/YiwPI5eRBPL7Uk97CMIpXgVa2mKmCDf1Yys=
Subject key identifier:   DC:20:A7:BC:55:C1:F8:2F:2A:0F:EC:BA:02:19:BB:41:DF:A1:08:8A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858478026709956DD40B4B6FBAFD0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1fc14bd8-5c26-3ffd-8b0b-53c8417cb088.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:4090::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:70:99:56:dd:40:b4:b6:fb:af:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=1f5896f9-7998-4400-93dd-7677053f1593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:07:27:a1:16:b6:66:d8:af:10:97:58:5c:ae:
                    46:e2:6a:b8:89:a7:a3:e0:f0:cd:fd:11:fd:51:eb:
                    d9:0c:9a:ca:24:a9:a9:a7:7d:b5:52:2a:4f:fc:23:
                    b3:1d:78:4f:03:3a:b1:b5:8b:30:e7:a3:71:e3:11:
                    4c:b1:f8:f6:99:84:2b:e3:6d:93:29:74:f5:f1:7d:
                    de:de:91:d5:1f:74:a3:e5:05:01:7f:50:05:54:c8:
                    5e:84:3d:82:b4:b5:8c:c6:02:bc:bc:ae:75:d6:dc:
                    ae:28:81:bb:29:06:fa:e8:1a:38:cf:a3:11:cd:f7:
                    83:ea:ad:14:f2:91:27:2e:c5:e8:a2:57:f4:59:31:
                    12:b6:09:8e:01:23:e3:34:c3:db:c2:0e:a2:8a:2f:
                    57:8c:74:a8:d4:10:04:7d:fe:b1:95:b5:e1:43:c2:
                    3b:b1:a3:d8:a9:41:0a:a3:a9:f9:a1:c7:73:e9:3c:
                    93:52:e6:07:d6:7b:66:0b:ce:50:4d:5a:8d:82:d7:
                    34:3e:5c:5c:8f:86:92:09:9a:72:5b:39:b7:5b:5e:
                    fc:f4:b9:90:67:4c:90:57:ac:6e:29:29:e8:cc:d5:
                    e7:8b:94:77:63:9e:45:47:8e:b1:6f:81:3e:a7:c1:
                    46:0b:d4:50:14:60:17:07:c8:bb:02:dc:08:9a:51:
                    12:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:20:A7:BC:55:C1:F8:2F:2A:0F:EC:BA:02:19:BB:41:DF:A1:08:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1fc14bd8-5c26-3ffd-8b0b-53c8417cb088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:75:f5:75:5e:95:5c:4a:c5:13:94:5c:ae:91:d0:97:b3:7c:
         5c:10:f2:7e:46:29:e8:64:5c:a3:b7:e4:d0:99:e9:02:70:eb:
         60:53:df:df:bc:d7:af:4a:66:ce:8a:12:16:e1:e2:23:e8:d8:
         2c:11:62:53:17:03:e5:dc:ce:9f:da:0f:d5:e0:21:fc:51:c8:
         42:28:00:23:ce:39:dd:71:c5:26:8a:ff:76:05:67:2b:b6:be:
         b8:dc:ca:a3:dc:be:4d:4a:14:2a:96:37:e0:80:d6:c6:02:db:
         04:fe:bd:52:69:93:01:11:2c:eb:4e:da:83:c3:26:0b:d8:17:
         d4:82:49:7a:a3:e0:7c:4f:14:06:c2:9d:f5:98:c6:af:d4:eb:
         c8:5a:2f:5c:27:5a:85:bb:1c:d0:0d:f5:2b:03:bc:e5:af:46:
         fd:88:7f:8b:d7:b3:0d:ff:89:82:55:6e:fb:c4:c3:f9:a1:5f:
         f1:26:3d:6f:a6:f2:e7:f3:51:03:62:41:98:3d:60:3a:2b:ba:
         3d:68:0a:28:a7:f5:d6:db:97:f8:63:65:66:c3:ec:20:66:50:
         f3:23:bd:0b:65:45:6c:8c:83:3b:c0:bd:af:9c:97:84:b8:a7:
         c0:d4:d6:ff:2a:05:ff:44:c0:c0:76:40:37:85:4b:a2:61:ba:
         52:ef:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:19 2024 by rpki-client on console-ams.rpki-client.org