Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5ac52f8b-10b5-36fc-bb14-e7dc6313de97.roa
File:                     5ac52f8b-10b5-36fc-bb14-e7dc6313de97.roa (raw, json)
Hash identifier:          aAf8dU1ax5bIbee5EVHv8v3axCxh/WkJga/puVwWBtY=
Subject key identifier:   9A:52:81:28:42:1F:C2:56:B8:F7:84:48:21:50:08:63:1E:00:B5:39
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802692C995959687747C4700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5ac52f8b-10b5-36fc-bb14-e7dc6313de97.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:5890::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:92:c9:95:95:96:87:74:7c:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=545cfb5d-5ee4-4076-a420-89282289fb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f8:e0:ec:c7:5e:41:59:22:99:b1:32:40:58:
                    37:b6:56:80:a3:1f:b1:e8:6f:4e:23:9d:ef:35:44:
                    31:de:01:96:1d:c7:f3:9e:34:2a:bd:15:1b:30:50:
                    c4:a4:e7:3c:2d:24:48:54:2a:df:8a:bf:6b:48:27:
                    c3:9d:06:ff:1e:b1:12:71:87:a0:e9:4a:bd:1c:c7:
                    d9:d2:e9:58:bc:73:60:fe:7e:40:8f:af:3d:e9:88:
                    1d:d9:48:5c:fc:8b:e2:15:a0:6c:10:9d:73:4e:ec:
                    9d:94:e9:66:8d:df:37:68:94:62:87:c1:6a:3c:ef:
                    a3:c1:19:e2:9d:01:59:78:c3:58:f9:c4:7f:e4:a0:
                    cf:db:1d:51:4d:f7:e7:58:fb:ee:44:b2:c4:41:b1:
                    6a:27:a7:45:79:4a:c4:2d:e1:4d:90:a5:97:ad:db:
                    ce:43:74:ff:e1:d4:c1:ec:a9:36:37:64:76:c2:24:
                    7d:6e:66:fb:cc:00:28:a2:68:b3:4f:23:f6:07:e3:
                    51:a9:cc:48:53:30:c1:62:75:65:80:82:78:a5:b4:
                    39:e3:61:9b:47:2a:ef:c3:df:aa:01:08:c6:7e:15:
                    8a:3b:d1:82:df:cc:e8:11:a7:b6:6a:99:aa:87:8a:
                    60:e6:c8:95:58:26:eb:ec:bd:ca:9d:72:5d:2f:d6:
                    2f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:52:81:28:42:1F:C2:56:B8:F7:84:48:21:50:08:63:1E:00:B5:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5ac52f8b-10b5-36fc-bb14-e7dc6313de97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5890::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ee:ad:32:a0:39:e2:e6:5c:f1:37:96:42:45:6b:bc:3d:ee:
         e8:76:36:0d:32:85:bd:03:a9:ba:6f:7a:15:ac:88:4b:24:27:
         c7:48:77:6c:57:58:05:57:ba:89:b7:40:72:f2:92:26:0a:c9:
         23:10:a7:8a:26:a5:46:d7:4f:03:2c:a8:7a:c3:fb:62:72:10:
         3f:b6:27:71:42:a9:83:26:ba:61:57:37:41:e9:30:61:2e:b0:
         b4:e8:e0:63:aa:56:6c:3a:d6:d8:e9:39:d7:34:53:93:d4:c3:
         98:dd:fe:f3:26:bd:8c:ec:c0:92:2e:87:62:c4:cc:cc:75:0e:
         4d:7b:90:4c:71:c6:b7:4f:b5:ff:0d:d2:5a:be:b5:e9:90:70:
         d4:49:01:b0:70:67:4f:b9:9c:78:26:6e:58:be:db:20:a9:01:
         52:5b:8b:70:f3:8a:2f:3b:3f:7e:9b:70:b0:7c:3e:a3:b9:de:
         6c:71:45:af:98:c2:e7:a9:04:56:04:a2:f8:77:62:46:09:67:
         4f:26:a2:fa:92:4d:0a:23:0c:16:cd:17:e8:67:95:86:7d:45:
         5d:08:28:85:41:c5:b3:38:e6:0b:7d:2a:82:60:02:a3:0f:d1:
         48:f0:1e:7f:59:68:83:d7:b6:d8:37:01:07:f3:2e:9e:b2:02:
         d5:2f:82:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:46 2024 by rpki-client on console-fra.rpki-client.org