Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5c40304a-ceec-324e-832c-5e941febf55b.roa
File:                     5c40304a-ceec-324e-832c-5e941febf55b.roa (raw, json)
Hash identifier:          AKK+upA8N9B1e39YNrAt4Ze+iJ6CxPor+i3WeMBfPC0=
Subject key identifier:   A3:15:9F:EC:53:F7:88:73:9B:78:D6:5C:63:A4:D8:24:60:2F:52:B2
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9B08577C1FA6400978C900
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5c40304a-ceec-324e-832c-5e941febf55b.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4be0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9b:08:57:7c:1f:a6:40:09:78:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=302a0c62-bd09-4a38-b7ae-02f1cedcaee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:64:d4:76:02:27:dc:5c:75:42:df:a1:e8:93:
                    39:71:46:c6:4e:5a:3f:7a:f0:b0:70:19:88:aa:c1:
                    05:82:a2:12:fa:29:01:bb:2c:4d:a4:28:87:56:e8:
                    35:da:8a:10:71:eb:45:a6:c3:f6:13:86:87:1d:7a:
                    fa:19:ac:15:26:e8:de:d9:e1:5d:97:86:bf:cc:39:
                    b5:61:6e:cf:a4:59:17:97:15:ff:9b:17:66:b5:da:
                    11:74:c7:83:d1:c1:6d:9d:19:37:12:8e:78:8c:78:
                    dd:cb:72:37:fd:f1:ac:e5:17:5a:61:9e:83:fe:47:
                    a5:47:5b:9c:66:c9:77:62:8a:a8:99:be:cd:cc:56:
                    ce:90:74:ba:79:5e:e0:93:23:6d:12:1d:d1:24:73:
                    49:4a:a0:bc:bc:a9:7f:d8:bd:44:3f:d5:49:30:0a:
                    7f:58:01:52:bb:18:cb:9e:c6:7b:d8:7c:48:26:50:
                    87:ec:50:17:6d:3a:5d:d4:bf:55:07:d2:b4:09:a0:
                    19:02:bd:61:a3:2b:42:5d:3d:7f:97:ad:9e:6f:32:
                    1c:72:4f:ed:09:33:af:a6:0f:08:5b:f9:2c:be:75:
                    15:20:5d:22:1d:20:7d:fa:56:32:fd:e7:7a:1b:30:
                    4b:9d:69:d4:3b:f1:14:39:12:0e:fb:14:2f:ac:8d:
                    95:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:15:9F:EC:53:F7:88:73:9B:78:D6:5C:63:A4:D8:24:60:2F:52:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5c40304a-ceec-324e-832c-5e941febf55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4be0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:16:40:d2:84:55:3d:88:6c:84:29:f5:ee:fb:80:eb:e9:65:
         3d:e4:eb:80:a0:89:bb:b7:83:89:49:53:21:51:44:82:e2:2c:
         f6:9a:33:d2:60:59:1e:57:15:92:b3:ff:3f:54:0b:80:64:6d:
         d8:a3:f7:3f:01:37:80:e9:54:ed:0b:d2:91:0f:a5:82:ec:50:
         a2:98:43:ee:15:1e:72:d3:40:1b:94:33:e8:e0:e4:02:c5:ba:
         37:c2:fc:43:db:65:e6:eb:58:89:57:18:48:5f:ca:02:90:9b:
         3b:98:7f:b0:fa:bc:a6:91:35:0b:0e:7d:7f:08:a0:2b:1b:36:
         86:a7:aa:71:4c:6f:4d:6b:3f:c4:f9:06:b4:be:ee:3c:01:62:
         93:02:0b:9a:05:e2:16:da:02:57:05:36:1a:ba:d7:e8:c1:5f:
         aa:a8:54:d2:c3:32:7f:0c:32:27:26:92:f8:b0:e0:ff:13:25:
         8d:c2:f6:0a:4e:05:c4:9e:26:89:f1:b5:37:d5:9b:f3:63:97:
         22:77:56:d2:77:d2:be:30:27:8e:6f:88:a9:97:12:7a:3e:f5:
         8f:2e:c2:80:1b:08:01:dc:0c:eb:75:a4:fc:5a:26:54:9a:a1:
         6c:fe:e0:b6:62:27:ed:1b:bb:fb:a9:ca:92:ca:d1:f4:aa:3f:
         9f:91:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:42 2025 by rpki-client