Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7cf9ae0b-2e25-3446-a139-2287d55fd260.roa
File:                     7cf9ae0b-2e25-3446-a139-2287d55fd260.roa (raw, json)
Hash identifier:          H3oVaUQ16pmwqOEa50uIW2UaByCSEwiCUyKFJ9YGIKM=
Subject key identifier:   1A:A5:C7:A6:A0:44:B6:07:9D:6E:FF:FF:12:5D:4B:BA:F4:52:42:AA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C1790BBC5D73AD38F2243FB0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7cf9ae0b-2e25-3446-a139-2287d55fd260.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:2b30::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:0b:bc:5d:73:ad:38:f2:24:3f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=6b658053-56ab-448e-8acf-76158837a2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:85:84:ae:92:d3:a5:1f:28:3c:ad:77:b3:55:
                    d9:f3:73:b0:0e:96:17:ae:7a:75:39:0a:82:4a:aa:
                    6b:ea:fb:2a:79:ec:53:45:e5:76:66:66:97:f0:58:
                    56:a7:07:43:6f:89:4e:92:02:2a:53:1b:5f:ae:31:
                    49:d5:9a:80:f8:6a:32:49:96:63:48:f4:a0:b3:54:
                    88:78:10:61:5b:17:d0:ed:a5:8f:4a:4a:49:13:9c:
                    f9:c7:fe:d1:96:06:1b:bd:99:2b:c8:fe:8d:ef:0c:
                    0a:ec:d7:10:78:65:bc:76:6f:f6:47:0c:9b:f2:b1:
                    ce:72:45:00:85:94:4f:b5:30:5d:21:16:8d:64:70:
                    a1:29:7f:f1:66:c1:0e:2b:0a:27:b1:d9:b7:09:bd:
                    9c:04:cf:05:fc:bf:09:79:fe:af:bd:ad:f1:f9:2d:
                    17:59:25:27:88:bf:0b:24:d7:af:91:f1:e2:97:eb:
                    87:fc:9f:c2:fa:4f:e7:23:a0:48:79:ca:db:15:f2:
                    e0:34:19:50:97:65:c0:a4:93:f7:79:3e:34:37:e1:
                    ab:b4:99:ef:da:1e:2c:ba:98:aa:bb:f9:6a:65:f0:
                    1d:15:c1:d1:4a:29:7c:a0:99:1c:f9:3c:47:96:38:
                    4e:f6:61:39:02:47:13:71:e7:f6:a9:66:b4:e0:8a:
                    a2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A5:C7:A6:A0:44:B6:07:9D:6E:FF:FF:12:5D:4B:BA:F4:52:42:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7cf9ae0b-2e25-3446-a139-2287d55fd260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2b30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:8e:64:da:3b:d7:bd:bc:ba:79:4a:bc:06:d6:b1:28:19:ee:
         08:ee:32:94:c8:82:06:84:86:99:52:f2:9a:c2:5b:f9:e3:83:
         06:43:0b:01:12:34:c7:bf:ef:86:ac:97:9b:f4:d2:f5:d1:fa:
         25:33:95:a2:91:1c:5c:44:e0:8b:23:7a:7c:06:f7:11:8c:13:
         2b:e5:43:f3:8f:9b:75:f0:57:ae:ea:d5:56:f3:b1:d4:5b:82:
         aa:2d:d0:92:ac:a4:40:0b:5c:87:5c:46:ee:c5:0b:bf:e2:b1:
         36:69:00:0e:9d:a2:6f:68:f8:6a:d7:d1:71:35:c8:e2:1c:57:
         87:b4:f2:d1:92:8f:6c:b6:24:56:11:5a:72:ff:b7:5a:bb:bd:
         42:3a:ea:fd:75:5a:b7:c2:49:c8:0f:85:67:97:85:85:da:dd:
         d7:54:95:f4:ab:c8:23:11:fb:fe:76:48:7d:05:78:22:c1:18:
         6d:99:d3:79:72:df:28:0d:6b:32:a5:d4:9f:57:af:84:51:2c:
         59:30:e1:b6:d9:1f:c8:f3:32:ce:2b:02:03:75:bc:3e:09:63:
         10:11:a2:da:01:dc:99:c9:65:94:ae:f6:65:f8:e6:24:c1:e4:
         a0:51:cc:57:a0:96:f9:51:5c:96:42:10:35:3c:34:4c:97:b3:
         77:50:7f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:36:57 2024 by rpki-client on console-ams.rpki-client.org