Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/49d0619b-c9be-3a1b-8037-0dbad60d468d.roa
File:                     49d0619b-c9be-3a1b-8037-0dbad60d468d.roa (raw, json)
Hash identifier:          Acpk1J9JWiOWmkSD6K77+Wr+FXntfPQyBw+9U3j1oEA=
Subject key identifier:   4D:AF:FB:01:E2:84:9E:34:D7:3F:80:E8:81:81:39:5C:FC:DC:F3:B3
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9B091B344955C553D0DB80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/49d0619b-c9be-3a1b-8037-0dbad60d468d.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5cd0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9b:09:1b:34:49:55:c5:53:d0:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=d0cc65d1-7d62-483f-b77a-6e0937903022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2c:6b:d1:9e:30:ab:e7:2a:08:c5:a7:9c:a5:
                    34:61:2d:24:4b:07:bb:e9:99:ad:56:1b:69:89:cf:
                    05:ac:80:a5:1e:dc:78:88:79:e8:26:1e:85:c5:b1:
                    e1:f8:a8:14:51:90:1c:4b:99:70:da:b3:92:26:c9:
                    9d:ac:4e:7d:9e:9f:13:b4:2e:56:23:6e:ec:a3:ac:
                    f6:46:9c:5e:33:2e:5f:54:62:a7:9b:0b:57:61:de:
                    c4:8c:ae:85:d2:26:74:db:66:41:09:75:98:1b:a7:
                    f9:70:4c:55:d2:2c:6e:03:91:1f:18:e2:5c:38:40:
                    19:18:6e:96:47:57:04:2a:4d:66:58:09:f9:bf:ee:
                    1a:67:60:db:81:e5:7f:0f:3a:c7:49:cb:30:6f:c5:
                    60:87:f1:95:5e:92:a9:c9:57:ea:a0:5a:1f:27:b3:
                    5a:da:b9:45:4f:de:32:d1:12:82:eb:0e:84:ee:ac:
                    6e:0a:1b:f4:f5:cd:19:de:23:21:41:3e:fd:ba:a4:
                    00:35:96:71:cb:cd:71:40:61:cf:07:8d:eb:1d:7f:
                    0f:97:f9:f0:0a:c7:2c:2e:48:0e:db:dc:36:aa:fd:
                    33:85:07:74:52:7b:ab:9c:95:10:f8:48:b9:78:96:
                    c0:ee:ab:ca:86:8a:8b:a0:00:b4:29:bc:2a:66:d8:
                    2f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AF:FB:01:E2:84:9E:34:D7:3F:80:E8:81:81:39:5C:FC:DC:F3:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/49d0619b-c9be-3a1b-8037-0dbad60d468d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5cd0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:37:82:3d:48:14:bd:7a:b9:62:96:34:cf:4c:99:c0:3c:7b:
         5d:78:12:8a:7c:ac:63:f1:88:30:6a:20:be:d7:98:cd:04:49:
         81:3a:a4:f6:60:49:64:5b:94:f8:ff:ba:41:a5:5d:97:e1:25:
         61:22:ea:2a:bb:87:3d:39:a7:39:65:b9:33:c1:e5:27:65:96:
         bd:90:34:c4:2b:2a:d2:d5:8b:54:31:3c:20:96:90:5c:16:b7:
         3c:35:96:d3:e9:22:0b:a6:ef:e3:1a:67:0d:85:14:5f:b8:46:
         94:f2:af:ae:99:d1:87:e8:86:ad:31:f6:0b:26:05:14:30:d2:
         99:1a:ee:37:fc:bd:f7:10:6b:71:7d:1f:68:0d:95:82:d6:a4:
         e3:41:43:b1:f1:79:47:28:65:d4:7d:9f:c3:2c:d4:96:48:41:
         9a:92:f7:43:fd:ed:e5:ee:f5:19:c8:cc:d2:34:74:f5:dc:e8:
         cf:d3:9a:a8:96:ad:24:ef:d1:5e:92:46:f5:70:1a:d8:3c:64:
         d1:ae:c2:88:27:79:c1:4e:d2:f2:71:3d:c8:b2:dd:2e:12:f6:
         5e:e8:9a:59:50:17:b7:c0:40:45:e1:9b:bc:b3:b6:55:c7:7e:
         b3:dc:6d:be:71:7f:7b:f4:a6:cd:14:c1:89:53:07:80:3d:e3:
         7e:9b:54:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:04 2025 by rpki-client