Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f72950c-052e-36d4-b734-c4f79dfb2a05.roa
File:                     7f72950c-052e-36d4-b734-c4f79dfb2a05.roa (raw, json)
Hash identifier:          QhKBkXSj2GB2VgY2lBJVIGZofJ4ulbsHP7EiSB61aTk=
Subject key identifier:   E9:74:90:BB:85:2C:DB:33:AE:62:99:4B:26:63:BA:76:A1:B8:6D:0A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C1790C790932127ABA777840
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f72950c-052e-36d4-b734-c4f79dfb2a05.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:4ac0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:0c:79:09:32:12:7a:ba:77:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=a25e8a68-3ad8-4b21-8c0f-6622a09708d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:0d:17:e1:bc:f2:0a:9b:da:ed:22:17:0f:
                    c1:7e:22:54:2c:79:d1:3e:5f:e6:27:b8:24:3b:72:
                    24:e4:27:d7:40:71:ff:9d:d9:95:88:95:17:47:3e:
                    ba:0b:0b:02:b0:d8:10:2a:6c:07:47:de:79:4f:59:
                    76:f2:81:f1:5a:9a:fb:d8:ce:f9:49:c6:0a:80:41:
                    d4:2f:02:14:16:37:08:a2:91:e2:49:6a:16:b4:cf:
                    22:0a:7b:69:b4:28:34:3b:73:d5:a5:b7:04:a6:2d:
                    13:92:ef:c9:a5:38:21:36:32:71:ef:c4:25:2d:cf:
                    53:3d:e9:ad:df:22:f8:39:1b:41:79:be:73:b8:42:
                    e9:b2:41:59:bc:77:06:3d:c6:7d:8b:f2:ad:eb:1f:
                    97:72:28:4f:8d:44:cc:bc:7d:18:38:af:03:ce:49:
                    d4:88:ec:ef:8a:c4:e9:c5:2f:d5:53:a5:b4:ad:a3:
                    bf:65:a0:b0:6f:a0:52:f8:15:ff:48:00:39:1b:1a:
                    6f:20:de:11:fa:99:00:15:16:f2:0b:c6:15:3d:1e:
                    42:26:e5:fb:ec:f5:24:6d:bf:f2:74:09:cc:d0:00:
                    11:c0:6d:ae:47:86:83:4b:e0:55:ee:43:8a:d1:e4:
                    05:8c:a5:b3:04:0b:85:6b:c7:46:55:83:8c:75:ee:
                    c9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:74:90:BB:85:2C:DB:33:AE:62:99:4B:26:63:BA:76:A1:B8:6D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f72950c-052e-36d4-b734-c4f79dfb2a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4ac0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d3:ec:e2:64:eb:3b:de:c4:95:37:93:90:5b:44:8f:52:47:
         4a:34:c7:ed:c8:41:27:e4:ab:65:f2:c6:66:57:45:d8:e7:fc:
         37:80:aa:ff:e9:b4:4f:6f:a8:55:0c:05:c4:bc:82:85:ef:ac:
         b7:35:7a:9e:64:3e:c8:f2:eb:34:76:25:51:10:82:e1:d7:88:
         76:ed:26:4e:fe:68:ce:ef:fa:48:9e:e7:e9:03:57:cc:c2:39:
         0d:bd:9c:2d:f2:cd:2c:ab:ed:b1:ae:7b:29:8a:d6:0d:37:28:
         66:bd:85:ff:33:d0:ab:9e:c4:16:71:b8:44:38:5c:4c:2b:7e:
         f4:93:b5:06:a9:67:fe:92:cd:13:84:5a:3a:2d:3f:34:6b:9e:
         cd:a7:0f:82:08:63:15:45:59:a2:d7:13:d0:82:a0:b5:6f:66:
         ff:5c:b4:c2:72:52:c8:51:02:a8:9d:d1:40:8a:dd:34:2c:e5:
         de:ab:fc:06:e4:9f:7e:35:c3:fd:ad:6a:b1:57:08:d6:c6:8b:
         5a:79:08:be:d1:40:ae:78:a4:df:6f:9c:1f:6e:dd:39:f7:61:
         21:be:9a:f0:31:d9:4a:f9:fd:25:d6:d4:ff:36:23:16:0c:45:
         f4:fa:52:47:d1:98:4b:c9:c3:64:4a:ea:13:3c:d2:8c:2e:ef:
         85:75:da:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 22:48:21 2024 by rpki-client on console-fra.rpki-client.org