Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b19db91d-f37b-339e-93b9-0126867f8fda.roa
File:                     b19db91d-f37b-339e-93b9-0126867f8fda.roa (raw, json)
Hash identifier:          8F5lliLAlPbshD9oXZn9xhQC5kpo9MMzyb2Xp7olGFc=
Subject key identifier:   A2:D3:93:50:58:A0:CA:C0:8E:4B:CA:A9:6D:44:39:72:92:15:50:60
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9B050E2C3EF98070C91700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b19db91d-f37b-339e-93b9-0126867f8fda.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:58b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9b:05:0e:2c:3e:f9:80:70:c9:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=efea5e14-1cf0-4075-9035-beebbb433ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d3:cc:df:12:76:ca:6d:a8:88:6c:59:ce:f1:
                    dd:41:48:96:42:44:9e:e3:e0:7e:ce:c8:69:a3:60:
                    77:b0:65:d2:59:f4:63:40:26:96:63:2a:31:81:a1:
                    28:c7:80:d7:c0:f9:93:50:07:fb:42:8f:c8:b8:c3:
                    80:49:fc:3f:78:91:9d:89:99:c4:f1:cc:a0:a3:0b:
                    4e:3a:ca:91:39:32:39:49:c6:aa:64:fc:56:3c:d9:
                    8e:9a:7d:14:78:66:84:e6:a5:fe:05:15:a5:51:d7:
                    c4:ee:e9:ea:2b:54:5a:18:2a:fa:7d:ec:10:86:a0:
                    aa:4e:c0:32:a7:9f:60:77:c9:ac:94:d3:4f:00:11:
                    b7:fd:19:2b:1d:ee:8f:50:46:3e:c8:47:90:2d:3a:
                    bc:26:24:73:a4:3f:64:f9:c9:85:4e:18:53:c5:e8:
                    00:2f:e7:5b:b4:1c:3a:96:fc:ff:86:ae:bf:8f:6b:
                    15:cf:2a:33:17:ec:f6:0f:45:60:2d:a2:cb:7b:be:
                    d0:3e:32:ed:fb:7a:d4:99:65:0d:7b:5c:4e:e7:7b:
                    9e:a1:00:87:95:34:fd:05:b4:11:3b:4d:17:cb:02:
                    9f:4f:3a:62:0f:da:77:89:09:a1:c2:23:08:06:38:
                    9e:b8:64:e4:80:63:94:42:da:47:45:42:43:4b:fa:
                    d9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D3:93:50:58:A0:CA:C0:8E:4B:CA:A9:6D:44:39:72:92:15:50:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b19db91d-f37b-339e-93b9-0126867f8fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:58b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:85:52:e5:d4:b2:1c:36:24:f4:09:32:04:82:11:d0:d4:86:
         d8:3f:bb:16:29:cf:fd:04:c3:50:9c:32:9a:c3:2c:a3:45:84:
         bf:b3:44:64:de:f0:0d:8b:31:b8:8d:86:f9:f3:e3:59:9d:0b:
         18:cf:cd:75:3c:52:8b:46:d9:98:84:b6:2f:7f:29:ea:f3:7e:
         94:8b:96:14:74:b8:50:c9:33:12:15:54:c0:57:89:97:89:05:
         21:49:f7:83:74:51:44:f3:c8:79:5a:cd:8d:0a:23:9b:b9:e0:
         df:8f:39:ec:f4:93:74:eb:7a:bf:57:d9:13:21:80:c4:cd:5c:
         91:ae:18:82:bc:de:ac:f7:45:c2:bb:76:88:7e:d1:3f:78:03:
         ec:03:f7:5f:de:c2:cb:8e:13:77:19:96:f6:28:0d:0e:0b:0f:
         b5:02:4f:91:6a:16:92:19:b0:42:0c:a4:06:07:1e:d5:89:cb:
         a9:c4:ae:af:0a:8f:5e:75:12:07:9d:a1:5a:19:ee:2b:0c:70:
         53:79:50:01:5d:21:5d:0b:17:d5:1c:e9:d5:d6:ae:04:f3:ab:
         3e:db:fd:86:95:ab:9d:e0:59:03:6e:b3:37:c9:4e:40:c5:d2:
         6c:7f:c2:55:07:51:e7:9a:1b:b0:33:70:1e:d5:e7:b4:0b:2e:
         c4:1e:6c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:39:02 2025 by rpki-client