Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fd6c997-d93b-3cbd-a718-bd53e7401577.roa
File:                     4fd6c997-d93b-3cbd-a718-bd53e7401577.roa (raw, json)
Hash identifier:          0WbTtnr5oKZnnyLR3npcTd9ae9hbLkIV3/3+P5oVuxc=
Subject key identifier:   13:76:2B:A0:E0:3C:B3:94:E7:48:DF:E1:6D:97:A4:E7:A0:05:6A:D6
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178F199C087766D91459838
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fd6c997-d93b-3cbd-a718-bd53e7401577.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3fd0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:f1:99:c0:87:76:6d:91:45:98:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=1ddeeae5-ccc9-4cab-b726-8c00b81d3c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:57:3d:74:13:88:3d:a7:68:da:dd:cc:97:f6:
                    83:ee:c0:7f:95:84:3b:41:6f:33:3e:ee:4c:6d:da:
                    27:ce:21:21:9d:3c:68:6b:b0:26:a7:17:a8:49:1a:
                    f8:1d:22:38:d0:6b:03:8a:5a:6b:16:7a:aa:93:8c:
                    3b:10:51:8c:13:0c:d4:93:da:a8:71:18:dc:89:d1:
                    01:62:b6:c6:3b:ac:fa:d8:b5:b1:53:ca:fb:8b:74:
                    5b:aa:39:63:7e:18:a4:0e:65:d9:1c:87:73:9b:e8:
                    f6:84:97:6f:8d:71:ca:bc:0c:53:03:1a:c2:9b:31:
                    25:02:65:66:5e:76:64:b1:83:38:3b:c2:f8:1a:38:
                    68:d2:0b:9b:83:f1:ec:10:83:55:4d:9a:79:b8:b4:
                    a9:a6:04:2c:a2:bd:a8:c3:fa:2a:9d:ec:62:3d:2e:
                    61:7d:60:b4:ae:d7:3b:66:53:61:3c:73:27:5a:8f:
                    f8:e7:22:35:b6:07:71:ed:9d:9d:9d:02:63:5b:57:
                    fa:74:12:d2:b9:a0:50:97:98:40:7a:c0:e6:99:73:
                    9a:2f:b9:6d:cc:79:c3:b4:37:53:1b:51:a2:f4:c8:
                    47:89:d3:f1:78:04:f7:1c:e6:a6:1c:3f:c3:98:7c:
                    f0:00:9a:d3:ef:80:2f:5c:fc:a5:8c:0a:70:e3:e7:
                    4e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:76:2B:A0:E0:3C:B3:94:E7:48:DF:E1:6D:97:A4:E7:A0:05:6A:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fd6c997-d93b-3cbd-a718-bd53e7401577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3fd0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:2b:d7:8c:60:a7:b4:63:38:ae:49:d6:cf:54:ae:7f:76:f9:
         ed:d4:a1:80:91:70:bb:82:5b:fd:b8:63:3b:d7:d8:92:cb:a0:
         62:80:8d:1e:dc:60:11:d6:c9:73:0a:96:f5:ed:5b:77:c2:8b:
         69:f7:5f:be:8d:fc:86:4d:c5:69:f9:af:82:02:d7:a1:23:00:
         f9:67:a8:95:3a:9c:7b:3d:07:6d:0c:ff:b7:68:da:dd:18:11:
         8d:1f:43:58:c9:eb:e4:94:5a:1d:05:a2:af:52:d4:d4:fe:21:
         fc:5d:7c:4d:c1:8d:ea:0c:1d:1d:99:f8:8a:a0:a0:7f:d4:ab:
         0e:11:b0:95:e1:18:d3:1e:a6:76:55:e7:25:2b:4d:5a:1b:5e:
         62:5c:d3:8c:37:22:97:89:31:6a:96:cc:e6:5c:2b:24:96:c4:
         c5:2a:95:3c:98:4a:9b:9d:a9:13:90:ef:d9:2c:e5:d7:6d:b2:
         f7:c7:14:88:ca:80:14:12:d8:af:a0:5d:14:0a:7b:08:8f:7e:
         b6:5b:03:0c:cf:70:d6:4f:0d:62:fe:4b:7b:fc:a6:a2:9b:29:
         48:48:fb:e2:a6:2a:8b:db:cf:05:24:56:2f:d2:bf:94:d1:91:
         27:04:c0:0d:b1:35:3f:20:ec:f5:1b:53:38:55:45:64:c6:97:
         1d:ca:57:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:12:07 2024 by rpki-client on console-fra.rpki-client.org