Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30fd9e76-cce4-37c9-98f3-5da2074debc6.roa
File:                     30fd9e76-cce4-37c9-98f3-5da2074debc6.roa (raw, json)
Hash identifier:          8s1f2L+Z0lXPmcAhqusEuYqg6o4Uty9AZVVoVAVvvjk=
Subject key identifier:   4B:6B:C7:99:86:BF:C2:45:15:19:27:9B:40:1A:A8:0F:A0:14:50:D5
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780266DD92DC0462395C7D480
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30fd9e76-cce4-37c9-98f3-5da2074debc6.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:4250::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:6d:d9:2d:c0:46:23:95:c7:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=0e75819c-313c-4ffa-8a1a-36f4ac3442e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:32:a8:4b:95:38:b9:8e:df:46:6f:d9:b7:89:
                    73:7f:00:27:fd:fc:4e:05:aa:6a:d2:62:21:c3:b3:
                    18:dc:15:30:e9:b3:f7:c6:70:04:ab:60:16:4f:14:
                    af:f2:94:e0:cb:60:8f:0b:be:0b:8f:ae:e5:07:cc:
                    65:ef:ca:b1:8b:98:13:ea:15:78:b4:14:5b:1b:73:
                    a6:51:14:9f:80:bb:6f:5e:3b:5f:3a:d4:67:4f:f4:
                    82:c5:e3:db:17:0e:c4:51:d7:61:e2:c7:e7:0b:76:
                    99:78:c1:61:48:e6:c4:69:f7:43:91:89:82:a3:51:
                    94:da:76:5b:3b:9f:de:4c:22:c4:16:03:48:ef:f1:
                    10:68:8f:4e:16:af:31:e2:ee:44:5b:53:a8:c5:18:
                    2d:10:7d:46:0d:96:6f:6a:fa:d4:8f:1a:fd:08:84:
                    2b:dd:de:ab:97:98:92:9e:03:59:30:37:c9:09:c2:
                    f7:49:84:b9:f6:fd:e8:61:a6:6b:4b:a3:78:5c:0a:
                    72:5a:14:ce:61:ca:f1:63:aa:68:0a:48:6a:40:f0:
                    49:1a:f6:02:c7:42:3e:94:65:78:52:22:4c:10:8c:
                    17:30:b4:65:03:85:de:29:63:7b:e4:b8:7e:80:c3:
                    48:e4:47:e2:2a:d1:91:ab:b7:a4:ff:3b:bf:37:a0:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6B:C7:99:86:BF:C2:45:15:19:27:9B:40:1A:A8:0F:A0:14:50:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30fd9e76-cce4-37c9-98f3-5da2074debc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4250::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d5:f1:48:a2:99:3e:91:63:2e:37:f8:9c:77:d3:d7:20:bf:
         a0:84:b0:ad:e3:0b:57:62:53:f1:e7:93:2f:84:2f:69:0d:b4:
         e6:b1:bd:f8:7e:70:e1:4f:8d:87:e7:af:4d:75:e4:fc:78:28:
         54:1e:a2:2b:62:69:19:22:96:07:a7:b4:d7:2a:e0:e6:4d:2a:
         5c:86:31:2a:89:c9:b5:13:62:17:22:82:14:74:7c:e1:da:fc:
         55:4c:a8:c5:cf:36:75:f0:1a:b4:40:cd:71:4c:0d:68:e3:c2:
         4f:a1:59:ac:8f:43:9f:c7:f7:b8:7e:01:07:f7:4d:2c:36:3e:
         7d:79:36:5d:cc:24:f8:b6:44:14:7c:0a:56:19:eb:a5:9f:71:
         93:fb:aa:9a:66:f2:70:80:a1:28:65:5e:a7:42:1b:76:45:40:
         5a:6b:3e:15:f0:93:cc:77:0a:93:fc:4b:66:2f:ed:e4:1a:e6:
         bd:6f:28:09:2e:38:cd:2c:62:42:c4:16:8d:f5:ba:ca:a1:03:
         eb:79:fb:ba:b5:65:12:04:d6:4a:fe:07:f9:bf:a6:ab:cf:97:
         16:26:e4:a1:f8:32:ee:72:9b:d3:06:7a:24:aa:fa:25:e1:98:
         4d:aa:ab:c1:61:50:66:c5:a6:53:09:11:3f:bf:9b:39:24:72:
         03:d3:46:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:19 2024 by rpki-client on console-ams.rpki-client.org