Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4bd03671-f192-3fa7-8d40-9cac5c9703f3.roa
File:                     4bd03671-f192-3fa7-8d40-9cac5c9703f3.roa (raw, json)
Hash identifier:          ASDFPS8CJWYdPxtbNbdJ19vy9dwQzuCMxg3mnrXQ7Jo=
Subject key identifier:   76:7B:D5:25:67:8D:7E:46:B8:51:89:5F:FE:C7:C7:EC:B4:A8:DF:0C
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802666E4EDEDFA3A88C9EB00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4bd03671-f192-3fa7-8d40-9cac5c9703f3.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:43d0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:66:e4:ed:ed:fa:3a:88:c9:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=5b693ef6-063d-4d56-bc91-ecc44937ed52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fb:e0:94:e8:5c:1f:73:59:0e:8b:48:b8:06:
                    3b:9b:11:3c:21:cd:c1:a6:10:a4:c7:92:03:b9:5b:
                    7d:27:51:47:fe:39:19:eb:b7:98:27:d6:6f:cd:2c:
                    51:6c:b1:19:38:73:ab:80:96:8f:65:47:9e:ac:d2:
                    30:65:75:cc:ec:e8:30:66:a9:25:68:a9:05:fe:39:
                    3a:e7:93:2f:ab:b0:ea:6d:53:12:3f:cf:e4:a6:68:
                    ec:b0:d1:e8:ae:0a:b3:78:d5:30:95:e9:cf:aa:1b:
                    e5:b2:aa:c4:8f:60:c1:b3:1c:c9:aa:e4:61:6a:da:
                    7c:4c:57:96:78:43:b4:ff:18:96:7c:ff:d6:be:94:
                    09:da:64:84:39:66:1a:10:1e:44:a5:66:c3:7f:cb:
                    04:c9:1e:a0:24:2d:86:9a:7c:6c:9f:f4:9e:5e:1a:
                    53:01:c5:d1:f5:f7:c1:74:d8:89:02:16:fb:e7:d8:
                    51:79:bf:18:b8:65:94:40:13:0a:2a:16:3d:e7:0a:
                    56:2d:ff:7b:6c:4d:11:38:2a:2c:cd:e4:ce:f3:29:
                    a7:df:97:3c:7c:ac:d0:6d:f4:a0:f1:88:3b:b5:c1:
                    08:46:1c:ca:83:99:4e:a4:63:ca:2e:54:b3:da:5f:
                    f4:bd:9a:22:bd:a5:4f:77:11:58:db:ba:8a:dd:87:
                    f2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7B:D5:25:67:8D:7E:46:B8:51:89:5F:FE:C7:C7:EC:B4:A8:DF:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4bd03671-f192-3fa7-8d40-9cac5c9703f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:43d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e6:5a:d5:c4:0d:a3:42:3e:59:6d:c2:e3:b5:90:c5:b8:1d:
         9d:f4:d5:1f:76:2c:aa:66:80:29:ba:76:d7:00:cb:8a:bf:02:
         fd:cb:69:ca:e6:ff:72:b7:86:91:24:13:ed:54:81:34:22:ff:
         aa:a4:fc:a3:51:d6:62:b0:35:f6:86:07:ca:37:fd:09:f9:71:
         3d:bd:0d:54:1c:87:7c:e9:e0:69:d4:80:db:be:22:51:29:99:
         97:f1:51:6a:5a:2e:e5:8c:dd:ed:9c:d9:6b:11:d6:3b:6c:1e:
         3b:76:45:c4:25:33:df:9c:78:6a:45:90:3d:a8:ac:17:95:e9:
         db:8b:b2:eb:4d:da:0c:1e:87:58:a4:a3:bd:6a:a4:91:c8:be:
         4a:e7:e5:ad:6f:f0:c7:ca:16:22:ec:2e:8b:24:9f:db:83:83:
         04:88:1c:fd:d8:27:52:1f:32:c3:1b:8c:65:58:bb:36:3c:fd:
         d0:9f:a8:cc:6a:ec:e8:58:e9:1f:dc:ba:10:bf:cd:90:14:ee:
         39:9c:80:63:42:68:a8:e0:6a:ed:93:b3:47:fd:e0:44:0b:70:
         cc:d4:09:b3:79:bc:95:26:1d:11:df:70:19:45:47:00:eb:66:
         5f:f8:e4:bd:12:e7:41:b7:f2:0a:c8:7e:bb:99:e7:d8:ed:01:
         16:9a:d5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:20 2024 by rpki-client on console-ams.rpki-client.org