Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5e11a241-e7ac-380e-ad90-d308b235fc62.roa
File:                     5e11a241-e7ac-380e-ad90-d308b235fc62.roa (raw, json)
Hash identifier:          fPEoNvSuCNWLgkOiY4id8vj5Wdn3rEPFjZ1xjLmdbT0=
Subject key identifier:   DB:08:07:39:0B:0B:8B:27:7C:DB:77:5B:A4:BD:B5:6C:6E:A7:90:95
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858494039684AAE9FDC42CCC14180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5e11a241-e7ac-380e-ad90-d308b235fc62.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:5e40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:68:4a:ae:9f:dc:42:cc:c1:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=15463123-2b34-4c09-8c5c-4431dfa70269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:b6:6e:5f:f8:9a:d9:b1:9c:fc:21:fe:14:
                    4c:60:0a:dc:12:3f:6c:63:a1:dd:60:e4:91:a3:7c:
                    b8:bd:31:63:1c:4a:15:65:86:e7:c1:6e:12:1e:c8:
                    3f:44:db:1c:3b:6f:b3:b0:74:88:36:69:a5:61:b0:
                    a6:1f:4d:0e:6f:bf:82:d1:75:f7:3a:ac:46:ae:11:
                    7f:c0:6e:38:3f:f3:74:89:25:a3:7b:bf:76:98:e1:
                    9d:ef:38:72:3e:70:f9:4b:0b:46:97:3f:a3:12:27:
                    24:52:fc:84:d5:e3:79:fd:57:cd:77:1f:27:e6:d5:
                    74:da:b6:b2:91:15:1f:b7:83:cb:8d:50:7c:bb:f9:
                    69:d9:4c:46:7f:35:7f:d0:cc:86:5b:22:3d:34:0c:
                    70:dd:66:23:cf:2a:86:c1:8b:68:ca:57:ec:ed:96:
                    ce:f1:2d:df:89:b2:90:0c:5e:04:18:7b:ed:0b:ff:
                    7e:2d:af:d2:3c:49:d1:3f:38:eb:cc:5b:00:8d:0e:
                    58:62:0c:0f:ac:49:fb:c6:06:18:04:cd:e0:d1:8c:
                    e1:a2:16:56:35:f0:78:a2:d3:3a:34:fe:0a:7f:4a:
                    40:9c:6f:b5:c3:fa:c1:77:16:71:74:51:23:59:2c:
                    4d:79:77:61:c6:23:e5:53:0a:ff:8e:5b:31:8a:02:
                    0d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:08:07:39:0B:0B:8B:27:7C:DB:77:5B:A4:BD:B5:6C:6E:A7:90:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5e11a241-e7ac-380e-ad90-d308b235fc62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5e40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b3:cf:23:0e:f3:4f:7f:5d:90:3f:19:dd:a3:d4:24:95:63:
         0e:01:f3:7a:6e:1b:6d:c0:a6:bf:ed:f2:b9:61:1b:bc:4c:f7:
         91:f8:f9:88:94:36:11:75:93:9c:1b:3a:f7:1e:8b:89:ff:f3:
         34:f5:74:60:18:73:8d:ab:aa:96:6a:06:5f:cf:36:2f:71:1c:
         d0:1d:98:c6:df:2e:a9:71:fb:d0:46:7f:22:f1:6d:9c:66:fc:
         c8:11:8d:43:ac:a9:f2:bf:74:66:4c:c9:f2:f6:5f:fb:7a:1e:
         10:7c:47:27:6c:ec:b2:d4:83:82:3d:46:c7:b9:79:9a:ad:6b:
         45:70:2d:70:15:00:f9:56:69:58:3a:fd:dd:f6:12:9d:e6:48:
         6d:e5:cc:c6:61:6b:40:18:af:f3:7c:12:22:ec:cd:26:54:9e:
         7e:6b:93:ef:26:10:c0:6c:f0:75:44:85:7c:be:f4:dd:41:80:
         f8:8f:48:c8:6a:65:02:66:b2:98:fb:b0:8c:b5:f9:51:47:f5:
         2c:a0:fd:dc:0c:3d:5c:ce:2d:0e:65:ac:63:80:03:f2:9f:b7:
         2c:a5:66:76:b8:1f:0e:f3:97:2e:db:27:64:ef:8c:ea:86:c8:
         d7:ec:e2:19:cf:eb:9a:15:fa:f0:24:9c:fa:ea:25:94:8e:db:
         18:43:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:46:39 2025 by rpki-client