Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f0ac017-0777-3c6f-a720-542813987a34.roa
File:                     9f0ac017-0777-3c6f-a720-542813987a34.roa (raw, json)
Hash identifier:          8vTlFM/Nf/JyD6l4tMy7Po1zNB58ntKcJ4nMj+mdGgA=
Subject key identifier:   7D:AD:BD:BA:32:BB:F8:5C:0B:4B:1D:E3:D1:A4:81:FA:B3:36:CE:3A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9AFD9A87559BE315537580
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f0ac017-0777-3c6f-a720-542813987a34.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:59e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:fd:9a:87:55:9b:e3:15:53:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=ff4dbb0a-8135-424f-bc66-547ee35f9eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:37:43:d1:64:f8:6f:e1:ab:7f:06:b4:b0:
                    eb:d7:92:40:ef:94:ae:62:e7:1d:a5:76:e5:ea:f7:
                    b0:1f:f4:31:de:ee:e9:74:d4:66:8f:52:35:b0:51:
                    b8:d8:18:46:05:47:16:c0:7c:dc:4f:d5:11:ef:61:
                    e0:9c:4f:0e:68:d4:a9:48:d2:61:95:bd:28:0a:75:
                    db:0c:08:6e:3f:94:51:d2:b2:28:b7:6b:5e:01:3e:
                    cd:55:31:14:ca:8c:73:83:03:6d:36:a3:98:2f:a1:
                    74:a7:a2:b0:04:0a:e7:a8:13:68:0a:44:16:78:c7:
                    b4:1f:9b:ba:fc:84:7a:e5:07:be:4d:d6:90:14:ec:
                    8f:42:f4:ad:0e:3d:83:34:69:2b:3d:ab:6b:75:d4:
                    cf:4a:01:9a:23:d9:73:c8:9f:07:b3:d8:72:d2:2b:
                    0f:75:b5:55:54:38:31:86:60:29:b2:a0:3a:be:08:
                    05:ad:eb:f5:6c:fd:07:63:54:70:36:0a:8b:11:7b:
                    a2:23:30:17:db:21:e2:0a:a1:22:86:a9:24:11:15:
                    c3:e8:6d:bc:12:b2:d9:78:bf:88:3a:3f:32:ef:63:
                    5e:f5:e3:88:af:61:a5:18:43:be:b5:c7:0f:39:83:
                    26:0f:3c:a2:75:35:19:be:e2:19:54:c6:45:80:c7:
                    f7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AD:BD:BA:32:BB:F8:5C:0B:4B:1D:E3:D1:A4:81:FA:B3:36:CE:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f0ac017-0777-3c6f-a720-542813987a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:59e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:8b:fe:82:58:d9:c1:41:fb:a3:7b:e7:d3:23:e7:32:a0:16:
         f6:b1:1e:06:f9:3e:bb:fb:65:ca:12:27:4c:ec:46:a2:04:68:
         c5:66:13:dc:d9:2f:9a:5b:8c:0d:d7:2d:38:d5:aa:36:e7:da:
         a3:60:ce:7e:29:83:b0:ae:d5:8b:94:41:9c:76:4f:e3:79:ac:
         cb:58:23:d0:86:61:a6:1c:de:69:0a:0b:b3:84:81:d0:f0:f7:
         10:16:14:e3:db:3b:b9:05:f9:c9:79:1d:66:09:e7:61:fc:e8:
         fd:e0:14:19:9b:e4:2c:98:8d:62:1c:87:b4:58:69:67:f8:c4:
         47:8b:2f:6f:56:a3:84:2b:f3:a4:77:8c:d9:4c:75:45:2c:1c:
         38:3e:dc:30:e3:fd:9e:e6:f5:09:66:94:8c:9b:77:08:ef:b5:
         ad:b2:7a:8b:de:ab:8d:0f:3a:65:96:51:b0:74:90:80:06:5f:
         19:5c:00:d3:0d:22:44:00:5c:af:a4:7e:17:b1:4a:d3:01:2c:
         92:65:24:9d:ec:7e:ba:f6:63:90:09:be:41:4a:b8:61:3e:ef:
         89:14:e2:9f:83:31:ff:f4:5e:4d:5f:c6:43:a0:0b:b4:9e:ab:
         72:a2:0f:80:57:04:ec:94:c7:3e:f8:00:d0:51:38:d8:40:f3:
         4c:c5:4d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:13:01 2025 by rpki-client