Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/65b87aeb-618b-3e92-8acd-f71ac04a094c.roa
File:                     65b87aeb-618b-3e92-8acd-f71ac04a094c.roa (raw, json)
Hash identifier:          hTdI5us6pFb3M0cfOQIr6Tur+RYpvAR4E0c1VZ9Y0jM=
Subject key identifier:   BB:F2:D0:2D:2F:AF:3A:DB:D7:F1:97:ED:7F:19:34:91:B4:1F:8B:6F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858478026856BD91B5AE78F7ACD80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/65b87aeb-618b-3e92-8acd-f71ac04a094c.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:5350::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:85:6b:d9:1b:5a:e7:8f:7a:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=6eaeb00f-e158-49fe-ba58-cc19bf877fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9b:1a:25:af:ca:c8:58:5b:e4:97:43:7b:34:
                    05:89:6b:0a:a7:f8:f0:69:24:d3:79:af:4c:0e:4d:
                    30:7b:f2:86:c0:c9:28:c8:d3:93:f0:99:28:dd:3c:
                    b2:a0:c7:34:d1:78:c4:ee:2b:5a:02:0d:01:2f:6e:
                    56:e6:64:19:42:25:29:0b:fd:67:c7:ab:7e:cc:bd:
                    08:b4:04:b8:f9:52:e5:34:87:ca:73:9a:b9:75:8a:
                    f1:6e:fe:3f:0c:de:4e:b4:a8:98:8c:bb:c7:e4:02:
                    22:b5:33:3a:e8:e5:58:2e:44:ba:e2:2e:61:bf:4b:
                    ed:f2:25:91:bf:fa:0f:8e:a1:d5:0c:09:89:37:c8:
                    5a:80:b6:6d:05:9f:f2:5e:eb:5b:c9:b5:c8:1a:aa:
                    8d:7b:67:7b:4f:49:99:d0:45:14:c9:0b:dc:7c:73:
                    74:6d:ae:16:04:86:79:7e:75:7c:e3:af:60:8f:64:
                    68:f0:f5:6c:bd:58:df:71:97:db:16:76:d0:c3:03:
                    64:f0:24:c8:7f:b2:3b:19:51:a4:41:99:82:b1:8c:
                    70:d7:bb:12:1c:d9:6c:e6:94:db:d4:b9:80:9e:b1:
                    fd:15:45:05:18:34:6e:d3:6d:d7:54:70:d5:f1:00:
                    2a:f9:91:75:b6:75:43:20:e3:a0:b7:74:37:f7:a1:
                    1e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F2:D0:2D:2F:AF:3A:DB:D7:F1:97:ED:7F:19:34:91:B4:1F:8B:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/65b87aeb-618b-3e92-8acd-f71ac04a094c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5350::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:70:15:2b:66:ce:a2:c8:23:70:55:18:af:65:0f:19:a4:dd:
         13:eb:c5:e5:b0:ca:9e:a3:7a:e5:ce:05:99:86:49:a4:e5:d2:
         3c:af:b3:d7:6e:f9:a8:fd:ba:8c:46:6b:03:c9:a3:77:f0:01:
         95:ec:7f:2a:0a:fa:cd:b1:42:3e:6f:83:e1:62:aa:86:51:48:
         a6:f4:2f:a5:06:cf:a5:ce:ad:3c:d2:4a:c6:6a:d5:71:ee:d6:
         23:3b:02:1f:59:11:18:1b:b4:61:14:60:22:ce:ea:be:1a:c9:
         a6:06:6d:88:d6:1f:fd:de:cd:ff:7d:2d:b1:89:b2:86:23:10:
         5f:46:b9:ae:eb:df:b3:a9:43:04:99:0c:f4:e0:31:58:e9:1f:
         c0:c6:d7:33:e7:b8:61:e5:77:ef:dd:3f:29:b3:80:06:dd:b0:
         e2:cd:57:e5:7b:c8:96:6f:d8:92:5e:50:a3:44:0a:95:1e:ff:
         41:31:f8:bf:fa:43:7d:b2:3e:cb:d1:f7:25:45:d9:25:d4:73:
         30:0b:34:7b:38:65:c3:ef:d7:b3:02:3a:26:c6:94:31:cb:32:
         5d:2e:2e:19:5e:62:f4:aa:99:8a:2a:77:43:51:2d:81:d5:27:
         1b:8a:24:d7:32:68:96:71:a5:d4:d3:9d:a8:b7:89:f9:38:03:
         bf:a1:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:48 2024 by rpki-client on console-fra.rpki-client.org