Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c1bc8e00-90ca-3416-9381-68ddfb62320c.roa
File:                     c1bc8e00-90ca-3416-9381-68ddfb62320c.roa (raw, json)
Hash identifier:          lsYfoIY99kufczRikLRErRTsiw+8JOe4oHcBkpd/M4M=
Subject key identifier:   FD:6C:90:21:BC:13:0F:AE:67:38:96:12:0C:AE:A5:E0:B7:0E:7A:02
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178FEEC28ACFB8A9DEF2000
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c1bc8e00-90ca-3416-9381-68ddfb62320c.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3710::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:fe:ec:28:ac:fb:8a:9d:ef:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=5c09cf61-abd8-4149-aeb1-a2798b97ef4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b7:bd:8e:02:72:e2:f8:a1:ff:0e:b3:cc:62:
                    ca:59:5c:93:b2:8d:78:7a:da:28:f0:27:3b:fa:7c:
                    3b:86:3a:ce:e8:66:96:eb:40:84:61:de:b8:b9:8c:
                    8f:87:0b:4a:ad:c2:2b:00:57:ca:6a:94:10:f4:a4:
                    14:57:eb:8e:f4:ea:d9:27:ca:0f:d7:91:a9:40:65:
                    b6:f3:b2:c4:f7:ba:62:a6:4b:51:f0:d9:50:df:49:
                    5e:fb:ea:80:f9:e9:44:29:91:88:c6:e1:ff:fc:25:
                    29:5f:51:57:58:66:d8:18:47:2a:4c:e4:e3:09:15:
                    ee:60:88:09:91:19:ab:3d:82:f1:c1:6f:32:6f:5a:
                    31:45:c5:1c:81:36:00:19:19:9f:ed:aa:bb:f9:64:
                    1c:85:3a:b1:0d:24:2d:38:bc:50:3a:cf:a6:fc:d8:
                    dd:b4:8e:21:dc:c7:b6:93:b0:64:21:2f:9f:7b:ac:
                    1e:ca:c9:fa:b7:99:2d:8f:00:7f:81:33:b0:12:f2:
                    9d:8e:f8:b4:5c:92:94:2d:2a:db:39:d7:f8:95:bc:
                    19:e8:f5:c8:32:7f:67:3b:9d:2e:50:72:68:8c:18:
                    cd:cf:5a:93:56:28:fc:8b:44:86:48:18:c9:80:dc:
                    6d:da:12:88:26:cc:4f:99:53:22:4f:49:be:7e:43:
                    38:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6C:90:21:BC:13:0F:AE:67:38:96:12:0C:AE:A5:E0:B7:0E:7A:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c1bc8e00-90ca-3416-9381-68ddfb62320c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3710::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:49:ae:70:ba:97:59:67:06:56:66:70:8b:f6:7e:a7:88:83:
         ce:0f:e6:f1:98:72:be:15:16:26:32:6d:2c:df:2c:4b:d5:2b:
         32:ea:5f:b8:7d:2c:50:08:1c:c1:7c:0e:fd:72:21:6b:85:c0:
         bc:ce:c1:85:7a:60:6a:5f:1f:eb:13:93:e7:4a:f3:ea:17:93:
         25:19:4c:be:b4:60:96:1b:45:a1:da:eb:fe:87:a2:2d:ac:5d:
         2c:31:cd:ab:12:7e:74:0e:4f:cc:6b:74:9a:2f:ab:10:ae:39:
         e6:3d:97:40:01:02:7a:6b:78:a2:a6:c8:00:21:78:a9:47:d6:
         5e:7f:7a:b9:7f:7a:4b:83:d7:87:07:f7:22:07:5a:08:00:86:
         1a:99:48:5d:58:d8:16:0e:ce:20:20:f3:c7:eb:95:02:da:77:
         8b:ec:ad:2b:98:51:6a:ce:d4:a8:9a:bd:20:f0:20:d9:9e:71:
         e4:9b:59:13:7c:28:31:93:e9:4c:b6:16:ff:e4:b0:a5:a9:5e:
         de:42:da:14:ef:61:70:f8:b3:9a:9c:a1:eb:8c:8d:c4:33:c1:
         0e:0e:c4:e1:36:64:22:7d:55:95:a9:ac:06:83:9b:47:e8:c1:
         6f:06:9b:cd:7e:1b:f8:39:78:56:cf:79:f1:a9:cb:e3:07:fe:
         79:79:28:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:48:20 2024 by rpki-client on console-ams.rpki-client.org