Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad9d2cde-81d6-3c77-a464-32f6b0c5e44c.roa
File:                     ad9d2cde-81d6-3c77-a464-32f6b0c5e44c.roa (raw, json)
Hash identifier:          EIvzJTw44HOTIDdYNkIh0/OneNVE9YIftmUYRpUG388=
Subject key identifier:   E3:A5:12:1F:BC:51:41:97:24:70:4E:87:AB:70:E5:48:A7:B0:FA:6F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802687DE7C40F1A693E014B0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad9d2cde-81d6-3c77-a464-32f6b0c5e44c.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:4470::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:87:de:7c:40:f1:a6:93:e0:14:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=cb316071-ef5e-4248-8c0c-bc236221f797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:da:26:8f:a6:fc:38:0f:d8:fb:18:e6:b6:
                    97:e6:95:74:93:10:41:64:4d:56:b3:ce:dc:c8:9d:
                    98:97:78:ec:a8:2f:8d:93:90:95:68:77:65:2a:5b:
                    3b:08:1d:80:a0:3d:c4:7b:b0:55:e6:82:84:d2:12:
                    de:20:fd:a7:bc:30:30:7d:1c:ca:26:ae:41:d8:70:
                    b6:33:94:6b:57:19:8a:d5:dd:1a:a9:a9:0f:29:d1:
                    c4:0e:bb:5f:bc:d7:16:36:09:8f:66:7d:1d:0b:58:
                    2a:77:20:c5:27:45:b1:ee:f5:73:8e:67:25:61:55:
                    09:93:33:c7:c0:07:06:3a:dd:fc:ad:2d:46:61:4e:
                    02:f1:87:0e:54:0e:49:ab:96:ff:19:d4:de:79:92:
                    72:d5:c2:ae:15:17:7f:9c:01:a0:5e:8d:e8:43:59:
                    e1:e4:97:e4:72:46:fd:d7:e4:e6:56:95:d1:9e:ea:
                    bc:63:ba:76:1b:a1:b9:6d:67:99:f0:8d:ff:13:a4:
                    9d:10:cf:5d:a0:18:65:b1:f1:f4:a1:b4:98:06:d3:
                    f1:ab:e7:56:61:65:b4:be:ac:c6:c4:d5:92:3f:3f:
                    f8:b2:ef:f8:88:2d:0b:57:6a:c2:a8:2f:ff:be:1c:
                    07:a5:d7:01:7a:0b:ca:fe:d5:3b:7b:44:88:7d:67:
                    91:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A5:12:1F:BC:51:41:97:24:70:4E:87:AB:70:E5:48:A7:B0:FA:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad9d2cde-81d6-3c77-a464-32f6b0c5e44c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4470::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:03:3b:68:bd:7a:8e:0b:9b:5c:9a:46:f0:66:e5:35:b3:5a:
         3f:5e:87:da:2e:72:1f:ec:f3:78:7d:b8:15:08:c7:13:a9:f1:
         72:0d:b3:f5:57:b5:5d:a4:fb:96:53:68:0b:9c:d8:de:c0:da:
         15:10:45:f6:16:5c:c9:3b:01:2b:8e:62:47:84:c5:82:1d:39:
         a5:2b:cc:9f:54:e8:e1:d7:57:9d:43:26:de:11:b5:76:27:1d:
         0f:34:6a:bd:db:66:ad:17:31:c1:3c:00:a5:78:05:4f:50:15:
         ed:7c:1c:98:30:76:2d:03:6a:ce:7e:e2:a3:8b:bb:e8:08:10:
         0f:ae:5e:ff:33:ab:c8:80:c0:99:d2:92:a6:56:02:21:c3:57:
         2c:d9:af:f7:7e:fe:cb:ca:7e:3d:55:cb:c4:1a:7d:46:d8:f6:
         7c:00:c1:11:45:d0:a0:92:bb:18:06:4f:7f:a9:48:4a:39:65:
         e3:87:1f:d2:a7:2c:5e:c2:39:22:42:f0:ef:37:9c:b8:d4:9e:
         ea:fd:b9:99:7e:86:dd:a9:0b:8c:67:c3:25:6a:9b:9b:a5:e3:
         9b:cb:49:ca:1a:44:59:3f:99:fa:bc:52:6a:77:df:58:8c:81:
         f2:01:f5:72:1b:21:ce:6b:fb:4a:2d:02:27:f9:f1:79:78:d6:
         ab:17:23:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:49 2024 by rpki-client on console-fra.rpki-client.org