Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b19db91d-f37b-339e-93b9-0126867f8fda.roa
File:                     b19db91d-f37b-339e-93b9-0126867f8fda.roa (raw, json)
Hash identifier:          NAPJpwnzv0rC1DiBSBPW0YCyO8fzfNdzNxcaW0Wg65g=
Subject key identifier:   8F:E3:70:48:A7:01:E8:78:93:A6:24:7A:A7:47:D6:F7:1B:20:BB:59
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C17904DE5D1774F1AA128380
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b19db91d-f37b-339e-93b9-0126867f8fda.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:58b0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:04:de:5d:17:74:f1:aa:12:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=4c42e79c-926d-4c02-b0c0-8688a71e63d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:88:59:64:94:e1:b2:e3:aa:26:c7:ba:d7:f8:
                    4f:86:c2:01:87:50:8f:b2:75:e9:38:1c:ee:79:27:
                    bd:bf:c0:df:3d:ce:15:32:ac:68:ba:5a:46:f7:75:
                    62:bc:94:52:dd:71:79:f0:7f:b7:58:b3:75:7e:43:
                    d4:8c:f7:6a:ac:82:9c:66:61:37:9c:45:69:82:3b:
                    a8:8a:68:73:8c:8a:1c:5e:99:78:1b:73:0e:eb:8f:
                    96:b0:cf:74:13:16:96:00:89:73:64:11:96:08:d3:
                    3b:c5:c7:d5:a2:da:fa:c8:12:d3:6a:e7:b3:7d:e8:
                    71:85:6d:15:b1:7b:11:1a:42:90:94:46:49:71:aa:
                    56:28:59:22:b4:6a:44:3c:f1:fe:62:8b:89:79:89:
                    e0:5b:05:e4:aa:ef:53:39:9a:d3:24:31:75:12:9d:
                    32:46:bf:97:bd:d3:a8:b6:48:4b:eb:5a:88:34:6c:
                    08:0c:31:e7:88:c6:b0:1d:93:cf:f9:9b:aa:f3:ed:
                    0c:04:8c:51:29:f4:4e:74:d2:01:5e:8b:af:97:80:
                    88:90:50:f0:3a:d2:ae:8e:c2:4a:7b:7e:bc:a4:53:
                    53:58:07:51:6c:73:3b:96:bb:ec:d4:cc:10:be:4b:
                    b0:06:ff:e7:37:91:3b:39:02:0d:08:9b:43:8a:43:
                    f3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E3:70:48:A7:01:E8:78:93:A6:24:7A:A7:47:D6:F7:1B:20:BB:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b19db91d-f37b-339e-93b9-0126867f8fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:58b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:9b:67:5d:56:b3:96:c4:98:b4:5a:91:6e:2e:c1:e1:1d:54:
         10:c0:d3:39:03:57:a6:06:19:bc:45:43:2c:1a:9d:1e:bc:59:
         9a:5d:a8:ff:c1:20:e3:d1:11:3b:dc:e8:37:ac:20:12:ac:37:
         f2:b6:ab:23:1c:e9:83:48:65:c5:3f:c5:9d:5a:65:6d:10:73:
         4b:22:68:4a:7d:67:da:a3:11:d4:81:7f:db:f7:4a:47:da:69:
         a3:36:42:44:ca:d0:76:db:6c:43:de:d3:e0:f2:56:ef:1a:8c:
         4a:6a:69:3a:72:37:30:7c:eb:05:59:51:82:8c:e8:00:e6:f5:
         3a:29:06:98:d1:21:37:ca:c1:95:39:d7:7b:5e:43:f4:ef:2d:
         ce:3c:91:64:f6:47:d2:09:f3:f6:e1:e2:d5:9d:4c:1b:5f:33:
         46:5c:bd:eb:8c:ea:50:c2:4e:51:01:d1:8a:c1:5b:32:70:be:
         ea:fc:a3:a6:ec:e1:a9:11:ee:f9:bb:95:5a:a4:29:7b:05:e1:
         65:ad:da:02:c1:d3:36:c1:28:62:77:22:82:87:23:71:9e:5c:
         3c:e2:71:a6:3f:d3:7a:1f:e3:99:48:19:e6:93:27:ab:e7:3f:
         8e:b9:dd:a9:5a:8e:30:fb:fd:2e:07:69:6a:b7:1b:63:2c:82:
         71:22:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 22:48:21 2024 by rpki-client on console-fra.rpki-client.org