Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c2f35cfd-d4f6-31de-98cd-900b81240bd3.roa
File:                     c2f35cfd-d4f6-31de-98cd-900b81240bd3.roa (raw, json)
Hash identifier:          IzHe18LP6v4PtF47eblfJMciL4oCB/LBuyuEl7+ph6Q=
Subject key identifier:   A0:41:84:E4:9E:3A:42:47:20:CC:F5:83:B8:6B:34:84:33:64:55:81
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9B02162309B482AB29FE00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c2f35cfd-d4f6-31de-98cd-900b81240bd3.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5830::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9b:02:16:23:09:b4:82:ab:29:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=569c49be-8e47-4967-9df4-227c158b7964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:74:fe:01:8b:35:d1:ca:dc:74:77:6a:f7:
                    c0:2f:de:9f:20:3c:75:eb:af:77:28:33:77:fb:b7:
                    63:fc:71:01:fc:51:aa:66:53:14:b8:f7:8a:93:03:
                    66:91:06:82:82:56:2f:0c:c7:28:50:01:73:4b:40:
                    35:a6:98:79:74:2a:73:3e:f7:76:7c:2e:b6:d2:25:
                    16:ad:c9:ee:8c:0e:ed:cf:5f:54:86:4f:5a:1f:cb:
                    56:0b:37:2e:cb:fa:80:e6:4a:b2:42:12:c5:c3:c0:
                    fc:58:36:34:10:8a:c7:c8:28:26:8a:45:cb:c0:fd:
                    a9:06:d8:f6:9d:aa:a5:d0:a6:56:39:81:5b:79:be:
                    8f:32:c7:e0:f9:a6:3a:6a:b0:56:1c:68:9a:6a:cd:
                    66:5c:b9:49:10:82:95:17:ea:0d:d7:f6:b7:23:3e:
                    08:23:38:59:f6:ab:ea:1d:dc:7e:c2:6b:4c:3c:cd:
                    66:f6:7e:8b:e4:a7:88:fe:63:69:57:7f:17:06:d4:
                    3b:44:f9:4f:bc:bd:35:22:f3:6c:c0:52:a9:d3:14:
                    c0:94:08:9e:48:fb:02:f4:d3:89:f7:1f:5e:45:c9:
                    10:46:5e:41:85:44:97:40:c6:de:29:40:65:d6:fc:
                    d9:ce:d7:a7:45:fb:81:6a:1f:d5:25:a4:ed:9f:2b:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:41:84:E4:9E:3A:42:47:20:CC:F5:83:B8:6B:34:84:33:64:55:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c2f35cfd-d4f6-31de-98cd-900b81240bd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5830::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d3:e7:50:fb:7e:c4:3a:4c:22:c6:25:d2:f4:7c:7c:83:25:
         1b:bf:05:28:f4:8e:40:dc:23:6c:76:da:6f:4f:90:00:34:11:
         6f:0b:8a:e8:f9:27:6e:90:a7:e2:e5:d7:14:d3:1e:1b:97:b5:
         51:b3:f5:a5:d6:57:c1:5b:27:3d:ae:0f:63:28:44:05:82:b5:
         f1:0b:47:4d:e1:38:6d:de:43:eb:fb:75:7b:c0:97:11:1c:b3:
         28:7c:93:15:f2:e1:7b:5c:e5:f6:b5:a3:ca:20:92:71:d5:fc:
         94:01:1a:91:00:74:eb:1c:47:f7:85:c3:15:0c:a2:8f:37:dd:
         d0:07:5a:0c:9c:36:77:f5:aa:8c:bb:04:93:5a:cb:4f:ce:52:
         f2:7b:46:5a:92:4a:1d:b0:ba:f1:85:1a:db:79:c0:aa:1f:0b:
         08:47:3e:f3:1c:00:ec:a5:b0:f8:a5:0a:8c:fc:5e:19:34:01:
         ac:c7:ed:35:af:74:2e:0d:3b:07:ab:67:62:a1:67:df:b8:fa:
         6c:56:83:ee:81:7b:18:c3:13:03:41:b8:a2:1a:98:d4:88:b4:
         b1:19:0a:a5:76:d1:ae:3d:8d:d6:8c:e0:df:0b:e4:d3:2a:1c:
         6a:30:32:7e:16:90:b1:c1:fe:c1:41:79:91:6b:2b:5b:31:a4:
         62:dc:1b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:29 2025 by rpki-client