Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/498870ec-a973-3435-a3ff-e74581627512.roa
File:                     498870ec-a973-3435-a3ff-e74581627512.roa (raw, json)
Hash identifier:          CQ4S31HJhNOm4wW0Z0IWoYnsBciootUmL5dbcMcdGmU=
Subject key identifier:   2F:E9:3A:42:6E:CA:08:F5:03:40:DF:43:C1:97:53:39:45:84:5C:D7
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9B08B28FCF237CDFDAE080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/498870ec-a973-3435-a3ff-e74581627512.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5570::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9b:08:b2:8f:cf:23:7c:df:da:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=f9d60722-e48f-40ee-84d3-16ebab1a5bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:8f:02:99:49:c3:36:70:2a:c6:70:29:f7:
                    d7:77:bd:56:bd:f0:18:cf:f7:7f:e0:dd:2b:67:51:
                    3b:c6:16:b0:6b:f0:e9:95:aa:c2:e1:e9:27:d4:97:
                    df:0f:e5:80:98:54:a8:54:43:b4:0d:a3:36:57:61:
                    fc:b5:0b:38:35:a2:6c:3c:9e:a0:f9:53:62:1b:9e:
                    87:22:22:19:87:85:46:89:8a:23:09:8a:d5:d9:23:
                    d0:62:57:f2:b3:96:9f:93:36:34:5f:81:ca:72:66:
                    bf:72:81:73:36:24:e9:0a:18:8b:2b:ef:45:d0:9f:
                    90:de:36:ba:d1:04:88:48:62:1b:32:63:72:02:a8:
                    b7:09:6a:46:fa:7c:51:41:29:6b:f5:e6:53:8c:4e:
                    00:41:07:26:79:48:59:14:44:62:b9:53:bd:7e:7a:
                    a0:cb:ce:9e:cf:93:1b:e1:e3:f0:32:e9:66:0a:bd:
                    01:81:03:eb:3c:ce:35:3b:66:fb:04:0d:05:99:6d:
                    de:9b:86:e6:e4:ee:20:da:9c:3f:12:5e:53:0b:cf:
                    a4:dc:e1:9c:4a:b3:cc:95:8b:d7:ec:4d:1d:27:a0:
                    33:7f:22:88:ac:14:5c:a7:e9:7e:32:1f:c6:a7:2d:
                    bf:14:40:d3:9a:d2:6e:46:e7:d9:91:2f:f7:dd:5d:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E9:3A:42:6E:CA:08:F5:03:40:DF:43:C1:97:53:39:45:84:5C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/498870ec-a973-3435-a3ff-e74581627512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5570::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:d9:0c:43:c4:2e:49:e8:dc:1d:3a:73:d6:a9:8c:d5:db:37:
         89:fc:bb:ea:63:0d:10:26:a7:d5:c8:95:ca:1c:4d:aa:1d:c9:
         ac:ba:a6:74:e3:ca:65:cb:72:18:d9:c2:73:a5:71:97:03:15:
         ed:a6:b8:f1:bc:53:7f:b3:2e:50:6f:52:79:52:dd:05:f7:9e:
         38:1c:6d:46:f0:ad:8b:31:d7:0f:ff:c4:c9:38:76:90:ee:12:
         ca:c3:bc:c5:2a:47:f7:f6:27:00:a0:0c:d6:8b:8c:07:e8:35:
         81:eb:27:53:11:07:2b:88:e8:dc:ff:f4:41:7d:2f:f0:60:12:
         5b:39:8f:28:e0:64:a5:69:6a:e3:90:31:4a:f8:d3:2c:ad:f8:
         70:6e:14:a6:3d:a0:f5:4a:f1:ea:ef:7a:86:d6:40:24:d7:25:
         15:6a:73:ea:21:d8:cb:cd:f7:61:a4:ec:cd:af:86:6e:0d:20:
         90:5a:40:15:3a:38:b6:f5:b4:67:cb:87:73:ad:dc:f2:dd:e7:
         20:27:18:53:6b:4c:72:77:96:e6:b3:bb:22:25:e1:5f:b4:c0:
         2e:d5:7b:73:04:f8:5f:25:3b:88:61:77:a4:f6:59:bc:f8:c7:
         04:01:d0:9b:f7:87:cb:ca:93:21:bd:4e:8f:2a:73:99:2c:86:
         65:72:b3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:22:05 2025 by rpki-client