Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6aa29d7e-7456-3783-8f96-58621dab5bcd.roa
File:                     6aa29d7e-7456-3783-8f96-58621dab5bcd.roa (raw, json)
Hash identifier:          WbQseGnbetK+V+9uFUWqT0KIl08rKpzqcHYtawk5/Dk=
Subject key identifier:   D1:42:94:62:29:D5:25:49:EE:0A:BA:0F:B3:A6:64:6D:73:00:95:0E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9AF2F2A18DE5E629207DC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6aa29d7e-7456-3783-8f96-58621dab5bcd.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5dd0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:f2:f2:a1:8d:e5:e6:29:20:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=a6bfd1f2-55cd-4cfd-89c8-bb60a0412ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:8e:99:22:88:0a:d4:f4:34:05:2b:8f:52:
                    bc:68:45:95:cf:cb:1b:2a:6f:bf:1a:ac:c5:89:df:
                    2f:0e:66:87:77:6b:32:61:6c:07:a5:30:ad:88:8f:
                    75:18:fa:af:c9:40:a9:f6:3a:6f:d5:aa:c4:b9:48:
                    ca:9e:eb:7a:af:02:12:51:7b:78:20:25:51:d6:ba:
                    64:75:3d:f0:33:26:55:a2:c9:c5:6d:65:03:a0:f4:
                    fa:db:7d:a5:38:71:65:10:52:9d:3c:3a:b2:c6:66:
                    cb:c9:6f:44:ca:5a:ed:02:59:79:a8:84:e3:9b:23:
                    07:db:bc:c7:58:aa:6c:2f:c0:33:68:46:6f:8a:e8:
                    74:5d:ab:4e:de:30:e1:b9:4f:b3:7c:65:bb:34:65:
                    dc:e1:4a:63:9c:05:52:3a:18:8b:7a:f2:a1:22:1b:
                    05:c2:30:f1:19:3b:5f:40:20:50:30:fb:97:49:8f:
                    54:af:79:b9:21:b0:b0:8a:d0:5d:cd:4d:34:44:a8:
                    cb:05:b9:d0:1b:c2:f1:31:12:bc:90:65:50:3b:3d:
                    6b:28:6a:3e:5e:8f:a0:c6:3b:81:25:a2:97:16:0b:
                    ac:9f:7c:d7:6f:15:f7:28:6a:84:4a:09:a4:aa:ae:
                    8a:2e:fb:79:91:c0:0e:6d:fc:d8:e0:cf:8c:47:0d:
                    ec:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:42:94:62:29:D5:25:49:EE:0A:BA:0F:B3:A6:64:6D:73:00:95:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6aa29d7e-7456-3783-8f96-58621dab5bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5dd0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:36:3c:2b:df:b1:f4:ec:76:88:b3:58:52:06:b1:cf:dd:d3:
         e8:32:49:f5:55:e2:3d:05:69:a1:3b:5a:86:34:79:e4:41:f9:
         75:7d:9b:fd:14:f2:43:ce:a8:4f:cf:a4:6d:d8:3d:7e:bf:a9:
         86:9d:1f:59:3d:51:39:89:4e:b6:b4:ce:da:3d:dd:8a:c8:f4:
         c9:29:54:69:82:af:22:04:3f:26:37:88:7b:cd:f8:b6:de:4a:
         bf:89:45:a6:9b:f4:33:36:2f:57:56:ec:a7:7d:02:df:db:76:
         31:ca:b2:63:63:f0:72:1a:7c:52:89:2c:3a:37:cb:f5:1f:14:
         31:bb:e9:30:3d:ef:0a:4b:09:42:ad:90:ad:25:ba:bc:92:e3:
         4b:35:22:ce:28:80:ea:0d:a0:02:01:7c:75:50:22:9c:d8:53:
         cf:eb:ef:ee:68:c4:8d:bf:1a:3d:2c:54:7f:ab:79:66:b3:34:
         94:37:09:ec:80:7e:f2:0c:83:90:ce:eb:dc:8c:3c:73:3c:dc:
         69:6c:b4:45:b0:4c:4c:70:2c:69:6f:53:a1:67:b0:f2:64:ed:
         5c:93:b4:e3:23:75:7e:fc:e3:2a:c3:e8:eb:24:8f:bf:08:08:
         b3:92:59:5c:d0:f9:95:1a:e4:58:1b:cd:5d:f0:12:2c:1f:ba:
         36:cf:b7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:07 2025 by rpki-client