Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3df175b3-2432-3d8a-95a6-24a12160d7ee.roa
File:                     3df175b3-2432-3d8a-95a6-24a12160d7ee.roa (raw, json)
Hash identifier:          iRGA0e6/ZRZtdjJceUUQ3ICETCSN0Mn2dmX+PJl0rKU=
Subject key identifier:   38:C6:9A:E0:89:C8:25:26:8E:8B:F8:A1:E0:A6:86:13:59:85:F6:95
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C179028D4FDEE63AB63BC100
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3df175b3-2432-3d8a-95a6-24a12160d7ee.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:20b0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:02:8d:4f:de:e6:3a:b6:3b:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=7c069755-3b47-4bba-8033-f336f51dc17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:e5:b0:81:5a:9b:e3:51:74:40:35:28:17:
                    da:a8:59:36:c0:ad:06:83:7d:8c:d2:0e:3a:eb:68:
                    94:16:9d:d2:24:9f:f9:2a:c7:d6:ed:63:04:4a:2b:
                    06:70:d3:1d:7d:fc:e4:51:c8:7c:08:9f:c4:59:2d:
                    55:02:2e:45:ca:32:d3:2b:4a:2d:e9:ce:ea:26:5b:
                    6f:dc:ed:e5:89:fa:27:03:cc:e0:0f:26:1d:64:ab:
                    cb:ec:45:30:9e:a0:8a:d0:2b:93:e1:9c:24:44:d6:
                    fc:47:3f:35:88:75:aa:fb:58:93:56:f2:41:cc:7f:
                    21:8b:e4:7c:e9:22:16:e7:fb:09:ff:e6:d6:92:a5:
                    df:7d:b3:90:fc:ad:89:22:53:76:41:9c:63:97:34:
                    3b:70:2e:0d:9a:aa:51:7a:77:92:cd:d2:40:2d:2b:
                    53:18:5b:54:41:5a:1b:2b:be:3d:70:65:16:fb:83:
                    5c:00:be:b5:49:43:d4:72:78:8b:cd:f6:dd:17:36:
                    a3:99:60:ac:8c:45:c1:07:89:7a:28:87:18:de:37:
                    f5:d6:e7:d6:e4:f6:a1:75:89:5c:91:76:29:46:18:
                    4d:08:fa:f6:99:34:20:7a:ec:d3:55:fc:52:c9:34:
                    6b:7f:28:62:56:79:7a:1f:50:49:6f:e4:57:dd:ea:
                    67:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C6:9A:E0:89:C8:25:26:8E:8B:F8:A1:E0:A6:86:13:59:85:F6:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3df175b3-2432-3d8a-95a6-24a12160d7ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:20b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:35:03:47:e4:35:55:9a:6e:80:74:c1:20:6b:f5:9b:c1:f4:
         13:18:05:01:f8:e6:5b:56:34:ab:30:76:fa:26:6b:fa:d7:e8:
         fc:27:b4:74:1c:d2:36:e1:de:10:32:9e:6a:a7:13:70:61:0f:
         8d:bf:36:82:a2:5b:c5:21:c6:8e:ec:4e:ad:ca:03:53:14:55:
         9b:2c:9a:01:d2:ef:ec:2f:81:b3:07:ef:1c:65:cc:8a:76:22:
         62:c7:21:d3:3c:0b:0a:12:37:72:e9:38:03:22:c1:b3:f3:58:
         93:28:d3:db:35:fa:35:e1:78:d4:62:76:2d:fa:2f:c5:02:86:
         c8:32:f2:55:d4:82:1d:96:33:f9:8f:f8:9b:cc:99:7a:22:75:
         76:88:6e:7c:b5:49:e3:77:ce:05:b7:4b:84:18:53:18:62:25:
         f2:d9:fa:bf:17:04:10:ed:f3:ba:3a:40:08:75:51:f4:4c:64:
         3a:70:ab:52:ee:d3:36:e3:db:12:ee:cc:59:16:6b:1f:96:6b:
         e6:44:59:f4:85:60:27:11:2e:ab:cb:99:b0:a5:68:cf:20:42:
         24:87:ca:ef:75:fc:1c:76:97:39:0d:23:ad:12:49:51:f6:7c:
         12:17:85:9a:9f:d5:8a:bd:47:c6:60:dc:fd:c5:7b:68:a6:16:
         af:9c:56:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:56:46 2024 by rpki-client on console-ams.rpki-client.org