Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9a081fc8-f6cb-3e0d-8da7-bd25726994d9.roa
File:                     9a081fc8-f6cb-3e0d-8da7-bd25726994d9.roa (raw, json)
Hash identifier:          SPq9jmSC6nopiroYi4TWjSFYzR/ZG3h1IxJLjGAHq5E=
Subject key identifier:   A2:30:B7:D0:24:85:A9:01:62:97:60:A5:12:1D:6A:24:2C:74:17:9E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802699446F2EFC58DDEF6380
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9a081fc8-f6cb-3e0d-8da7-bd25726994d9.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:5790::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:99:44:6f:2e:fc:58:dd:ef:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=ac442f2a-4455-4e95-8906-ee909648fe97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:93:05:5c:d1:ce:ec:b8:f2:95:36:8b:c4:
                    4a:db:fb:86:2e:49:5b:87:bb:86:0c:2a:d0:e5:9e:
                    47:ac:42:0b:5e:07:30:b1:bf:70:f1:d0:5a:b0:da:
                    ee:8d:b2:7c:d8:f2:f6:45:5a:e7:54:1c:06:b3:16:
                    3d:2a:14:8e:bd:1a:83:59:0c:7b:d9:c1:29:c5:e2:
                    d2:65:ed:60:a3:3d:e0:b8:20:e1:f2:ec:45:6c:d8:
                    0e:48:26:70:7e:4f:44:53:91:1d:4e:85:30:02:01:
                    7e:dd:d4:04:b4:48:d2:cc:a6:6c:2f:ed:61:5e:d9:
                    dc:13:8c:7e:f4:61:6d:76:02:d8:cb:6c:d6:09:65:
                    1c:42:ea:44:10:31:af:08:ac:2f:f7:11:ad:4d:db:
                    36:35:2e:65:6e:67:22:bc:ef:34:6a:ad:00:1c:a5:
                    9a:12:0d:b5:8f:ee:c5:ed:ec:89:34:1a:3d:97:ed:
                    b6:4d:eb:36:51:df:b4:87:ed:8f:79:ab:b9:b2:0f:
                    10:9e:bf:7c:f3:b4:6c:25:e1:33:34:32:a3:a2:34:
                    bd:00:3d:11:6b:f9:8c:fb:58:1e:15:08:5b:9d:23:
                    de:c5:89:f0:7f:fe:eb:88:90:4b:15:5f:cc:73:70:
                    eb:a5:fa:49:96:45:7d:06:00:6a:c6:f5:31:18:8f:
                    86:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:30:B7:D0:24:85:A9:01:62:97:60:A5:12:1D:6A:24:2C:74:17:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9a081fc8-f6cb-3e0d-8da7-bd25726994d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5790::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:8d:3e:2d:a4:35:60:88:70:fc:63:22:8d:07:05:d4:94:88:
         d8:77:53:e0:6b:cd:95:61:b8:97:6c:8c:d9:62:75:8b:d4:0d:
         28:21:27:ee:da:b0:dc:49:9d:26:c8:c2:f2:0a:e7:33:83:c4:
         92:36:93:a3:e0:44:23:20:6b:27:16:4a:bb:38:f6:3f:41:8f:
         3f:1f:d1:d7:dc:ff:03:6b:a7:11:54:21:d3:7b:68:50:f4:89:
         0b:35:dd:ab:0d:41:5d:90:23:0e:d9:e1:88:e1:86:c4:e7:6e:
         d2:7e:99:f1:2a:2c:a6:70:ca:72:fb:c4:19:79:c4:09:63:d4:
         c4:46:02:ce:d5:20:54:bc:ec:1b:e0:87:dd:01:c9:8c:13:34:
         e2:4c:81:3b:0e:e7:45:70:86:3e:10:6a:37:39:ca:69:d9:d9:
         23:07:d1:1f:8a:cf:05:a5:4d:81:f8:07:72:ea:80:e4:bf:c6:
         72:91:c8:27:4a:88:90:7e:12:b9:b7:9e:60:6c:9d:96:0d:6c:
         f3:c1:5a:a1:c5:38:91:64:62:2a:f0:ca:17:5e:79:71:3b:2c:
         49:29:6c:66:36:f4:61:3d:e9:7d:23:5d:a9:6c:79:b9:f9:30:
         72:77:06:b3:4f:91:c7:22:af:b9:3f:e6:42:21:56:db:e4:1d:
         bd:60:0a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:47 2024 by rpki-client on console-fra.rpki-client.org