Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6053ff35-d0b9-30cd-8ecb-27f76279ece2.roa
File:                     6053ff35-d0b9-30cd-8ecb-27f76279ece2.roa (raw, json)
Hash identifier:          f4dZO2TLEAqw9xoWSQBSuFQSc4tm+d/oGNdZv6KJcK0=
Subject key identifier:   10:D5:78:CE:BB:81:30:78:DA:8E:12:7C:DF:F7:5F:E3:E5:95:38:09
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9AF97B026FADB4BED44EB8
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6053ff35-d0b9-30cd-8ecb-27f76279ece2.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5ba0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:f9:7b:02:6f:ad:b4:be:d4:4e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=0e28ed18-5774-4866-90b0-6dfc4e8a8c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:b5:d8:c6:de:9e:fb:c9:c2:e2:fb:88:04:
                    05:34:93:ff:a1:98:0f:e7:da:7e:c4:71:4f:06:1a:
                    bf:e3:20:f9:f6:cd:28:26:77:14:4a:2f:a9:47:56:
                    5f:c9:22:6c:e4:9c:57:ca:af:94:47:64:0e:27:54:
                    92:89:65:19:67:49:0b:9b:e9:22:95:c9:b4:d7:67:
                    7b:d5:89:9f:7f:3a:e6:9b:e9:8b:6b:57:93:62:d2:
                    8d:8b:bc:d4:30:80:14:21:2c:45:51:44:9f:31:63:
                    b4:3e:38:84:42:27:20:e7:77:9c:6a:a1:97:45:1a:
                    aa:70:a6:81:f7:eb:2f:fa:4d:0c:84:c7:64:3e:20:
                    8f:10:1c:ee:5b:b8:6c:6f:f6:02:5c:a1:f6:d2:c1:
                    da:a4:a3:70:53:cf:a1:c8:51:8c:84:15:aa:dc:36:
                    35:36:68:08:c5:ce:66:35:b5:a1:47:08:ef:e2:e2:
                    42:cd:a9:87:d9:57:8c:ac:16:12:64:1f:9b:1c:89:
                    53:cf:20:48:ec:6e:34:f6:1c:79:d8:5d:1c:bd:fd:
                    a0:78:ea:8d:0f:95:de:07:12:0e:ae:66:c2:29:5a:
                    8e:e0:30:38:37:f2:9c:79:f2:54:fe:dd:67:61:c8:
                    af:0c:59:40:42:63:23:da:0c:03:0a:69:25:3c:3f:
                    4b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D5:78:CE:BB:81:30:78:DA:8E:12:7C:DF:F7:5F:E3:E5:95:38:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6053ff35-d0b9-30cd-8ecb-27f76279ece2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5ba0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:0a:cd:b8:4d:12:61:d7:bd:82:ad:1a:da:6f:ab:74:fc:0a:
         df:3a:6f:19:9a:62:31:89:86:b7:ca:2b:6b:0b:07:a5:25:40:
         d0:55:b3:12:2e:f1:e8:e8:35:4b:e8:68:3d:39:04:56:0c:65:
         30:86:5e:c7:31:34:45:f1:76:b8:00:5b:14:e7:9a:98:00:a3:
         d5:56:7f:b8:4e:c6:9a:69:c1:19:a5:bf:13:21:df:f0:cb:46:
         62:83:74:53:a9:98:6a:36:b0:82:e5:d4:52:03:1d:83:26:c7:
         2d:48:ba:9b:64:61:47:05:7c:9c:5f:fb:bb:38:8b:f6:fa:f8:
         71:68:bf:b2:af:3d:ea:15:65:6d:dd:80:af:63:d7:e5:36:4b:
         8f:76:29:96:4b:59:09:ec:8e:ce:bc:cf:c5:2d:37:2c:b7:55:
         e0:6f:d2:f0:f0:71:52:04:7b:1b:3c:6e:fe:b3:e2:11:46:b3:
         c0:87:15:d4:2d:eb:76:32:be:ce:6e:20:70:3f:19:a1:72:f9:
         61:fe:bc:7d:d5:29:62:ae:8b:80:24:d2:f3:3c:a9:42:13:02:
         b6:fe:fa:b2:73:e0:c1:75:59:7d:8f:f7:26:b3:a6:e1:c6:4c:
         f0:e2:16:cd:3c:d5:e4:60:c6:58:a0:2c:bc:0b:b0:3f:6d:9f:
         5b:26:72:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:39 2025 by rpki-client