Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6749fdbb-1e9a-332c-9e7f-07fac24d74fc.roa
File:                     6749fdbb-1e9a-332c-9e7f-07fac24d74fc.roa (raw, json)
Hash identifier:          Dlh/4y5dj/rSukTye6SZCmAqloSGDKlktAb/yOx0LZo=
Subject key identifier:   57:1B:69:F0:FC:E3:EA:74:9C:4B:AB:0C:06:4E:C7:06:C2:68:E1:72
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9B09B524191038B74A6F00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6749fdbb-1e9a-332c-9e7f-07fac24d74fc.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:52f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9b:09:b5:24:19:10:38:b7:4a:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=76ce08d1-7ea4-47b7-95bc-2954236cfb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:85:a6:1e:4d:aa:65:e3:18:e4:e3:45:00:c1:
                    5e:d9:04:ba:6e:a8:89:6a:f3:04:1a:93:19:c0:c2:
                    e0:71:18:72:03:92:a8:6f:9f:7c:24:90:bc:f1:da:
                    1c:d6:1e:41:84:28:c2:2e:8f:39:8e:da:2a:b4:a8:
                    50:a3:39:36:fd:74:e9:b6:40:ca:18:c4:e9:0f:10:
                    d7:30:dc:04:c3:56:e6:b7:fe:41:9f:6c:0d:e3:83:
                    99:15:97:3d:54:dc:70:be:81:ee:5d:3e:5f:61:04:
                    85:c6:ce:61:bd:f6:81:f7:12:18:a2:28:73:9b:a1:
                    98:b6:8f:39:8b:d7:a4:56:25:7c:80:38:0f:6f:72:
                    dc:1c:34:5e:67:1b:8a:30:2d:8d:10:23:f3:87:60:
                    3a:67:21:23:2b:ee:10:f9:95:7b:9a:e4:e0:b1:17:
                    82:ec:bd:bf:a3:b1:bd:dc:52:fd:21:16:1d:c8:aa:
                    07:2d:56:5b:f9:98:d1:dc:16:19:08:6c:aa:54:8e:
                    7a:4a:6e:ce:7c:9d:fd:f5:68:f8:ed:ee:ec:6a:ed:
                    20:6f:21:42:ab:57:4b:a3:8e:fb:45:88:94:d6:17:
                    23:71:52:98:85:6c:e9:de:bb:54:73:13:62:01:a5:
                    94:6f:f0:13:33:ff:32:29:a4:27:2c:35:9b:b1:bb:
                    e0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1B:69:F0:FC:E3:EA:74:9C:4B:AB:0C:06:4E:C7:06:C2:68:E1:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6749fdbb-1e9a-332c-9e7f-07fac24d74fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:52f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:8d:19:0f:6b:48:a4:f7:a0:df:3d:89:d9:70:e9:4e:d5:b9:
         8e:ee:a0:8b:90:82:76:82:9e:a4:f3:db:ed:2e:d4:54:ee:58:
         ab:5c:e7:24:af:57:45:4c:f6:6a:1d:e2:f5:d0:99:7f:f4:7b:
         2a:73:5c:18:21:09:08:e0:a9:5f:fb:7c:24:10:47:5e:45:62:
         5a:03:1f:49:5a:36:1b:05:76:1b:a2:f3:6b:3d:65:79:40:79:
         5c:e7:87:c8:a2:f9:32:19:eb:94:39:19:90:6d:29:a9:55:d2:
         db:f2:01:be:79:6c:c0:6c:98:d9:74:98:99:f0:2a:6e:d6:a7:
         f9:e0:8b:ce:17:33:e0:5e:ee:7d:79:eb:3e:14:bf:08:ff:65:
         21:8d:e3:f1:8f:df:b8:93:54:c5:2c:f5:21:59:a2:f3:35:a5:
         ec:6e:5a:f7:f6:93:8d:83:07:fe:6a:13:72:41:05:ea:71:c0:
         89:2f:59:11:b7:11:3e:b9:93:08:ed:72:a6:9b:14:07:25:b7:
         68:08:92:62:a0:5e:d3:2c:05:73:20:11:97:3f:fe:23:95:18:
         58:4b:03:ce:6a:f3:45:97:09:f4:3d:eb:6d:9e:3e:ea:08:81:
         2d:e6:9f:00:0e:cb:8c:84:36:b4:c5:cb:ea:2e:bc:74:0d:fe:
         31:40:c6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:56 2025 by rpki-client