Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/55f87819-54be-3af8-93dc-3517da4309b4.roa
File:                     55f87819-54be-3af8-93dc-3517da4309b4.roa (raw, json)
Hash identifier:          HVZRgoO62bGpdH+DZ8AwGarEP+DufVll5XjnuwhQFGc=
Subject key identifier:   21:15:64:FA:F9:B3:59:87:03:FA:E6:1F:C2:04:04:67:00:22:8A:1B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858478026920E92BDD2E64450E980
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/55f87819-54be-3af8-93dc-3517da4309b4.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:40c0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:92:0e:92:bd:d2:e6:44:50:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=449056b2-c43a-48ba-b048-aafcda0dc663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c0:93:44:b2:30:35:b8:28:b9:a2:66:f4:89:
                    b5:c1:14:18:f1:cb:d4:86:1b:bc:d0:36:62:1e:cd:
                    59:e3:84:c2:a2:08:0c:bf:8a:0b:00:6e:b5:cb:57:
                    a2:d1:ec:0e:e5:3d:c0:18:1f:26:5a:d4:38:4f:1a:
                    b5:08:ab:ff:88:2e:49:47:6c:63:8c:36:a7:f5:6e:
                    24:cc:54:81:bb:60:46:94:bf:67:1d:b5:7d:ec:61:
                    f2:77:21:70:af:a2:a4:23:a9:aa:b9:ed:c9:13:00:
                    3b:f2:94:34:3e:7d:d4:2b:35:4b:a9:a6:e2:cc:5a:
                    20:67:83:ea:f5:b6:58:e5:13:d7:5a:3c:38:d7:f5:
                    b9:f6:b6:3f:85:75:16:bf:22:d7:65:54:76:14:72:
                    61:76:a3:4d:de:b7:c9:6a:f4:f1:b0:c3:94:67:f7:
                    6c:02:d3:6c:14:2d:10:db:b4:f7:e1:79:88:ac:6b:
                    ce:ba:e7:d3:32:58:af:fd:bc:69:a7:c7:70:11:c6:
                    2e:ee:52:e8:ff:08:03:32:c5:d1:9d:d8:45:b9:14:
                    b9:0d:e9:8d:22:17:fb:be:7d:04:f0:f9:73:05:38:
                    e0:05:b0:47:d0:d9:dc:f7:4e:19:4e:c0:75:77:9c:
                    55:33:51:07:7b:d2:7b:37:e6:fc:63:6f:45:df:ec:
                    69:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:15:64:FA:F9:B3:59:87:03:FA:E6:1F:C2:04:04:67:00:22:8A:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/55f87819-54be-3af8-93dc-3517da4309b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:40c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:cd:c1:f6:80:a7:1a:82:17:73:64:b0:4f:f7:9e:2f:24:ce:
         b6:c9:49:47:3c:c0:9f:46:8e:41:2d:6b:85:8f:ba:cd:00:86:
         e8:77:49:d7:3a:2d:7a:89:55:fc:fd:a0:1a:fd:79:be:57:20:
         76:1b:5d:c9:57:02:bf:0e:9a:e7:c0:f4:bb:a4:1b:c9:39:41:
         1c:14:62:67:64:3f:dd:03:42:e7:2b:14:3d:3b:0c:99:60:f4:
         56:80:44:95:2c:60:82:59:43:2d:38:e1:ff:99:71:b8:d2:dd:
         fe:be:b1:6d:28:22:28:ed:6c:66:8b:3a:5e:21:7c:28:59:ac:
         e1:78:68:24:3a:ab:1e:8a:60:70:00:15:52:26:e0:bb:ab:40:
         b3:64:93:e5:a7:a7:1c:ca:18:f5:b7:a0:48:9d:05:1c:65:24:
         45:35:b3:68:a4:4a:9d:fa:b9:cd:b0:b8:eb:92:9a:95:24:a1:
         b6:1c:8c:c9:e1:c8:36:fc:17:93:ee:6f:d0:df:ea:00:48:12:
         f9:cd:d4:b7:a8:f6:60:a6:dd:b5:69:b7:d8:7a:2d:db:8d:54:
         9f:69:6d:28:f6:2b:8d:7d:9d:cb:1a:35:78:c2:90:d1:27:02:
         de:0a:14:0e:3f:f8:3b:94:e4:41:72:ef:79:81:e2:2b:e8:51:
         5a:77:2d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:20 2024 by rpki-client on console-ams.rpki-client.org