Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f72950c-052e-36d4-b734-c4f79dfb2a05.roa
File:                     7f72950c-052e-36d4-b734-c4f79dfb2a05.roa (raw, json)
Hash identifier:          E7hIC9yGOBHCojyj5v64E26k7M1xjhyE/0Nq7E2cd+M=
Subject key identifier:   8B:9C:95:9E:A3:41:2D:74:8F:A8:9E:1B:EA:5B:E8:02:62:13:71:A9
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780269678480E59EB80CCB8C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f72950c-052e-36d4-b734-c4f79dfb2a05.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:4ac0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:96:78:48:0e:59:eb:80:cc:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=53e5f59a-878e-40fe-bf6e-e4bd2d27b23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:b5:aa:cd:5a:da:de:3a:52:1c:f5:47:b2:
                    c2:39:0c:99:6a:42:ee:1c:fc:1b:7a:cc:3f:d0:b0:
                    56:8f:ee:c3:65:36:1d:a2:0a:8c:ae:35:46:88:00:
                    13:0b:22:c5:0e:bd:af:03:f0:5f:ef:25:db:c2:7d:
                    d4:63:1b:80:22:c0:64:90:be:6e:59:b8:cc:d1:a0:
                    6a:34:67:d2:0c:a9:50:46:b7:41:7f:ea:f0:e5:6e:
                    85:81:8c:ad:2b:64:00:8d:e3:ab:2f:d0:4d:62:25:
                    b6:a7:b0:af:ce:3c:e8:5f:34:fd:60:b3:07:cf:25:
                    04:06:fd:78:8e:b3:73:97:f1:ce:9a:41:f6:27:e9:
                    56:a0:d2:a8:fc:4c:20:18:99:1e:fc:a0:b3:34:e8:
                    0f:92:3e:cb:a4:4b:ab:60:84:d5:ec:cb:f0:af:c2:
                    56:5c:6f:10:8b:cc:14:45:2a:65:13:b6:9f:3f:93:
                    44:c0:7d:7b:7b:1c:46:7e:65:fc:c3:87:31:d9:3f:
                    05:05:dc:a4:1a:43:5e:b7:ad:66:1a:d6:b3:fa:d5:
                    08:a7:8a:be:cc:d5:5d:f4:83:18:d5:88:c3:e6:96:
                    ad:72:74:58:8b:c4:34:c5:34:bc:00:c7:7c:8f:ea:
                    dc:3f:55:eb:09:16:cf:52:98:fd:02:cb:80:ab:66:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9C:95:9E:A3:41:2D:74:8F:A8:9E:1B:EA:5B:E8:02:62:13:71:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f72950c-052e-36d4-b734-c4f79dfb2a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4ac0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:28:12:aa:bf:99:52:50:84:64:24:e1:3c:da:bf:5e:85:c0:
         4b:25:6e:f5:29:0b:e5:b0:c4:fa:68:6b:5b:60:bd:1e:ee:c7:
         83:5a:77:07:95:bd:66:97:35:4d:78:03:9b:61:1b:bd:ab:6d:
         ca:af:bf:7c:cd:cf:f8:60:8a:23:6a:3b:95:dc:55:d5:8c:4d:
         da:68:d4:cb:21:25:b2:c7:04:78:29:ce:15:d0:bd:58:c9:ba:
         c6:8d:fc:51:96:80:66:15:a4:e5:eb:51:0a:90:89:a3:54:6c:
         be:c7:8f:e5:0f:da:ef:9c:50:46:8b:6c:16:3c:78:7e:74:c8:
         d9:cf:4e:3b:4d:1b:e3:8e:72:15:3c:a9:dc:ce:1c:a5:f0:fb:
         4d:cc:a0:9d:af:68:51:fb:ab:c3:bd:af:80:a6:fe:36:0a:47:
         2a:d7:5b:4d:f8:49:26:21:13:87:3a:fa:cc:3e:c6:b2:e1:43:
         c5:cb:52:43:75:bc:08:01:1a:05:7d:38:af:76:e3:3d:eb:c1:
         0c:c4:fb:a1:e1:f7:26:fe:0c:0c:a5:b9:2d:7e:78:0f:ce:01:
         ec:19:25:f4:62:97:b4:71:b2:dd:4a:a2:e9:56:db:30:3c:30:
         17:01:e0:40:db:88:aa:24:54:99:c4:a2:15:b9:59:bc:5d:15:
         09:77:55:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:48 2024 by rpki-client on console-fra.rpki-client.org