Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb3eaaee-9b59-3245-ae24-d2f64bf91ea9.roa
File:                     bb3eaaee-9b59-3245-ae24-d2f64bf91ea9.roa (raw, json)
Hash identifier:          qPwDs3d5dKFpVxB+WrN/8u/0T6K/p0amxyBotCyXlkI=
Subject key identifier:   EC:CA:15:9F:26:53:F3:96:67:68:3B:90:29:77:5E:49:8D:E4:DA:8A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780268277A06A8E0E5367BF80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb3eaaee-9b59-3245-ae24-d2f64bf91ea9.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:57a0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:82:77:a0:6a:8e:0e:53:67:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=bec570ba-5efd-4b4a-87c0-823f701848c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:32:4c:67:04:82:35:d6:1f:15:63:92:f2:54:
                    af:13:73:bb:e5:3f:08:4b:f6:5d:75:87:7b:32:87:
                    c4:af:31:dc:e8:e7:8c:ba:eb:32:6c:ad:89:e0:d0:
                    02:3f:71:8e:ab:84:92:12:2d:f4:8f:14:cb:e6:ad:
                    d5:9f:d5:ed:46:89:0a:25:c1:f0:af:77:c2:2e:0d:
                    f5:37:49:8d:9c:d8:4f:87:39:de:8c:17:02:cf:53:
                    50:0f:c1:89:e7:13:7e:06:00:01:4a:3d:a4:e9:f2:
                    5c:ad:17:55:74:90:d0:bc:6f:74:ef:fa:46:ff:e3:
                    bf:bb:7b:34:74:3a:74:d3:a2:cc:7f:d9:5f:ab:df:
                    4d:08:18:5e:f6:ac:e5:47:9c:33:ab:f9:8d:11:cb:
                    b6:6f:3e:09:3e:56:b0:da:cb:63:e4:8d:3b:84:44:
                    59:1b:bb:f9:2e:d9:0a:e8:8e:c0:0a:e9:8b:e2:96:
                    d6:37:2e:5a:58:d0:40:6b:c7:4c:c5:29:1c:47:29:
                    07:4a:16:07:06:85:32:11:ba:09:72:8f:55:30:1d:
                    d3:d9:1d:db:e1:37:a1:a9:50:1a:78:c9:0a:29:35:
                    ab:86:19:68:37:47:67:44:64:de:3d:f7:b7:ec:75:
                    20:9e:94:04:d9:b4:77:2f:81:d3:b3:e1:fe:5d:21:
                    4b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CA:15:9F:26:53:F3:96:67:68:3B:90:29:77:5E:49:8D:E4:DA:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb3eaaee-9b59-3245-ae24-d2f64bf91ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:57a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f6:44:57:00:fc:19:6f:c0:eb:5b:a0:b2:f5:76:15:9b:87:
         39:70:bf:a1:6b:81:68:78:4a:21:1b:62:dd:84:7b:aa:2e:ff:
         6d:a9:a8:e5:bf:e0:d4:da:1c:96:dd:a1:19:a0:53:2e:55:ce:
         6e:94:1b:2e:71:0d:42:2d:a0:8b:4f:07:26:a3:6f:a2:fc:ed:
         8a:ee:a3:11:4c:95:e5:e5:00:36:44:0b:93:57:b1:d8:b7:fd:
         4a:b3:3c:27:07:55:b9:76:a9:0a:c4:7e:b5:88:b6:d4:57:45:
         34:56:e0:c0:5d:3c:f9:3f:f1:3e:96:f9:de:5e:6d:02:77:71:
         3b:cf:59:d1:2b:11:b3:67:66:26:e3:20:0f:1a:3b:c0:45:92:
         a3:0c:61:50:37:0c:26:5e:02:0e:ae:e5:e4:f7:fa:76:84:d4:
         ee:44:c8:31:22:18:4e:73:32:57:f9:3a:ea:dc:4f:16:70:83:
         c3:e2:5f:1e:5f:45:c8:55:7e:80:c6:c9:de:a7:df:07:f3:59:
         bb:38:89:61:5c:c5:49:5a:d4:f7:71:b7:4b:65:1f:08:a2:c9:
         34:0e:11:78:5f:73:df:c3:6b:a4:1b:8e:69:ca:55:a0:13:fa:
         70:b3:b3:6b:11:64:48:e8:6a:6a:47:c7:c9:14:67:c7:b5:0d:
         76:64:9c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:50 2024 by rpki-client on console-fra.rpki-client.org