Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/57cf66aa-a303-3c14-b380-832f5f83862c.roa
File:                     57cf66aa-a303-3c14-b380-832f5f83862c.roa (raw, json)
Hash identifier:          ZxEOM2YjM//llJeDgEgJO0QrSk5S3FXg6wVbtR7F9x0=
Subject key identifier:   9D:A6:82:3C:06:74:70:DA:EB:9E:95:35:D2:D9:E4:12:B0:51:1E:61
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178F324F698893FD7400280
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/57cf66aa-a303-3c14-b380-832f5f83862c.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:22e0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:f3:24:f6:98:89:3f:d7:40:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=a6127939-bcee-4a07-ba2e-f42a7c7269d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c3:c4:9b:08:e9:b3:c3:c3:7c:c4:c4:c2:21:
                    1a:4b:65:90:b2:9f:98:b3:b8:d1:8f:f3:03:9f:6c:
                    27:39:93:6d:e6:80:dc:eb:7b:c5:85:38:13:72:47:
                    06:6c:45:dc:91:42:38:f2:86:51:ea:e9:c0:a5:ce:
                    ca:0d:19:04:73:93:61:89:93:44:ee:03:4a:1a:64:
                    a5:4d:e0:b5:c5:6e:3f:3b:d7:d8:06:5a:4f:c3:4d:
                    9e:3b:fa:e2:84:4a:be:ec:80:e0:c1:b8:2e:b2:e1:
                    ec:05:f3:0d:80:60:2d:9c:81:7c:18:ff:6d:2a:93:
                    49:5d:75:cd:47:51:ec:0b:23:80:0f:59:2f:63:fe:
                    aa:f1:4c:91:0d:26:63:b7:35:e9:7f:0b:82:41:3b:
                    a5:63:13:06:64:ab:fc:ca:7a:f6:75:7c:3f:7e:08:
                    56:de:a0:e1:27:cf:9a:ba:1d:a6:aa:32:c3:d5:60:
                    25:24:33:d0:50:ef:50:01:e4:bf:4a:97:1e:e1:c0:
                    3e:22:dc:a2:de:81:af:dd:f1:50:c7:a1:c5:82:db:
                    3e:59:63:0f:1e:77:82:3b:46:28:bc:c3:d4:3d:a2:
                    2d:ce:7d:7d:cf:f1:85:e6:53:85:3d:59:49:e8:7f:
                    55:70:90:14:f5:c3:6c:fd:b8:76:d5:35:12:3b:d8:
                    83:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A6:82:3C:06:74:70:DA:EB:9E:95:35:D2:D9:E4:12:B0:51:1E:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/57cf66aa-a303-3c14-b380-832f5f83862c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:22e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:8c:2b:be:cf:49:e1:1e:d4:fa:e1:4c:cf:87:95:31:3b:2b:
         95:d4:3d:2f:e4:5c:c2:bf:cc:19:9f:d6:bb:73:0c:16:00:e3:
         b5:b1:cf:2d:04:df:97:d0:0a:c8:43:85:cb:ac:f2:ba:e0:b6:
         86:f7:05:5c:6c:c4:7a:3f:74:11:48:5b:2d:2e:56:5a:64:81:
         d6:90:e4:19:58:8b:49:d9:99:67:48:6b:8c:80:4a:a5:99:d5:
         6a:3b:e5:01:f4:73:f2:c7:ae:9c:a0:9b:6b:4f:0f:2b:7e:6c:
         de:fd:ae:42:50:94:82:07:06:40:1c:32:95:97:19:15:2f:7c:
         be:c4:58:c7:7f:72:46:34:bd:d0:4e:85:77:f5:3a:22:cb:d0:
         4c:6b:de:e5:ad:d2:3a:99:be:fa:23:3a:20:23:61:19:97:ed:
         49:ff:5e:0f:3c:02:22:67:09:47:27:31:0f:47:69:65:be:e4:
         be:30:ba:71:6f:43:21:4b:9f:df:f7:07:ac:2a:18:72:52:81:
         3e:5c:1b:8b:b7:39:4e:33:5d:d7:8e:db:90:8c:5a:78:6e:16:
         31:30:58:7c:ed:92:b4:e5:8d:bc:d9:60:96:34:4d:1f:e6:02:
         37:8e:b5:38:7d:db:c5:9b:59:bf:22:6f:be:b2:b0:d6:67:94:
         2d:8f:3b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:12:07 2024 by rpki-client on console-fra.rpki-client.org