Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25f2c16a-54a6-3910-99c6-222ca99cc3cf.roa
File:                     25f2c16a-54a6-3910-99c6-222ca99cc3cf.roa (raw, json)
Hash identifier:          VHDqSE0roXxZ+Z1hnrzk4W3Cb68b0fGUuobSXlhB3xI=
Subject key identifier:   A3:CB:4C:9C:D8:54:10:5F:36:AE:C7:1D:06:01:77:A5:41:A8:31:70
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858478026918452C1EF36005CD680
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25f2c16a-54a6-3910-99c6-222ca99cc3cf.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:3dd0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:91:84:52:c1:ef:36:00:5c:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=63bf14c5-9f1a-42a3-a514-4bf5aee7d7da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bb:5e:e0:f7:15:3b:fa:c7:c9:45:6a:7e:63:
                    aa:52:0b:3a:0d:0d:75:bd:12:06:61:42:9c:e1:13:
                    d5:43:c1:64:c2:3c:7b:7f:d4:df:2b:31:1d:c5:07:
                    fa:77:b8:83:4d:02:31:9f:f7:6b:b7:8e:97:b4:c1:
                    99:82:9d:32:a5:55:1d:8d:e5:a4:3b:c8:13:c0:68:
                    c8:f0:f4:c7:ae:eb:88:35:51:58:e1:bd:ba:91:8f:
                    1b:92:fc:99:4d:fc:06:22:2b:fb:b2:53:f4:f0:5c:
                    a2:6f:57:d0:9c:0c:f8:44:8a:40:81:cc:db:b0:2a:
                    56:ea:2d:f3:5b:30:9e:04:35:5d:ae:e4:5a:59:24:
                    f2:02:25:e2:a8:37:8c:33:c2:66:24:68:a6:46:05:
                    b3:43:05:7b:7e:ff:a2:be:cb:6a:2b:77:3d:63:00:
                    66:47:22:da:3d:99:20:c6:cb:c8:e8:9d:32:4d:28:
                    ea:d0:ca:6a:17:d5:f3:22:ba:79:04:a6:ff:e2:32:
                    9f:08:8c:d5:41:ff:ff:22:68:4c:bb:97:28:05:eb:
                    5f:ed:04:02:3f:f9:b8:03:c1:dc:08:46:49:eb:2a:
                    d7:54:7e:b9:b3:88:3b:48:28:3d:c4:f4:19:30:74:
                    16:f0:40:dc:1d:89:a1:60:16:34:a9:59:73:f7:a3:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CB:4C:9C:D8:54:10:5F:36:AE:C7:1D:06:01:77:A5:41:A8:31:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25f2c16a-54a6-3910-99c6-222ca99cc3cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3dd0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e1:03:1d:17:7e:9e:b0:7e:eb:c7:18:b2:56:d5:37:3e:6e:
         53:58:28:95:91:c4:5b:fe:cf:fb:5a:3c:bd:ad:da:98:f9:84:
         dd:98:ad:3e:99:1b:ec:15:93:a0:74:03:04:08:06:27:3a:b3:
         27:e7:a8:d8:4d:b0:12:8e:ec:bf:8e:4b:e7:43:6d:4b:59:df:
         ee:63:14:42:97:13:1b:7c:0e:18:00:15:ac:52:3c:0a:c7:0f:
         8e:f2:cf:b3:55:1a:cb:d1:aa:70:1b:05:70:42:71:bf:23:10:
         e1:25:f0:32:57:31:0d:36:f3:22:cf:21:32:43:ee:22:b7:af:
         26:82:2b:9e:fa:7f:e2:31:72:98:67:f4:fe:37:c9:5e:4e:f9:
         7d:3f:ee:bc:d8:6e:a7:49:9b:af:3d:9f:1a:0b:28:3a:42:d8:
         36:0d:e3:24:da:ec:42:c5:21:72:98:34:ea:0b:de:e6:5d:ec:
         95:b2:08:d8:a8:15:63:d0:d6:2c:39:11:37:b7:36:94:ee:f8:
         75:ae:55:c8:ca:dd:bf:bb:39:b0:e0:79:07:15:17:f7:73:0d:
         79:0c:37:a9:0f:bf:76:12:ef:15:4f:8f:cd:ce:1b:8b:40:6d:
         ad:df:eb:4a:08:ed:a1:ec:2a:97:dd:f9:93:78:46:db:ba:10:
         1f:03:e4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:45 2024 by rpki-client on console-fra.rpki-client.org