Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cadc0cc6-3db7-3256-853e-6ecbde7be2d0.roa
File:                     cadc0cc6-3db7-3256-853e-6ecbde7be2d0.roa (raw, json)
Hash identifier:          DUeegwLM+ZzdxceNZa/9ZRBJdiWV4ylMeRvoKFnvvSg=
Subject key identifier:   C4:96:7A:CB:6B:32:AC:60:99:0B:7D:7A:6A:58:EC:17:E0:58:0F:4B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178CD504F6E0024A584B080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cadc0cc6-3db7-3256-853e-6ecbde7be2d0.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3750::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:cd:50:4f:6e:00:24:a5:84:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=53c71b62-3195-49d8-b40f-3b2d50410e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fc:63:19:58:a7:90:fe:b4:68:0e:e3:c5:a2:
                    43:1d:e3:fe:9b:ba:80:f8:8b:71:b4:ed:52:6e:8b:
                    a0:5e:c4:99:71:c3:24:ef:87:4e:cc:33:90:49:08:
                    f9:a6:12:65:0a:b1:28:87:a1:cd:40:6e:dd:03:b0:
                    54:3b:3b:53:f4:6a:d1:9a:89:37:4d:0b:a6:5e:7c:
                    fb:14:ed:b3:7c:5a:7a:25:ee:af:38:7d:40:5e:d0:
                    e2:df:70:bb:dc:8e:55:04:17:59:32:7d:6a:0c:0c:
                    9d:ec:17:7d:16:c9:d2:ea:61:a5:f5:52:28:fa:62:
                    ac:bb:9a:88:af:25:ed:9d:d9:78:b8:ec:0d:77:f7:
                    5a:e3:44:40:4b:3e:df:b8:1e:95:77:50:45:96:bc:
                    74:00:6f:78:a7:71:b6:17:4c:c3:e0:a3:53:7b:21:
                    c2:a4:3a:86:c6:04:7a:82:91:b5:0d:12:fc:76:61:
                    46:49:c5:8b:e0:0c:80:d7:aa:00:7a:b4:38:35:c0:
                    e5:bd:bc:46:f2:8b:35:c3:0f:fc:84:35:b8:cc:f2:
                    6a:cd:d5:4b:41:06:7d:ed:cc:28:5d:e8:b1:0c:b0:
                    4a:ec:06:b1:76:d8:cc:90:54:f6:a7:04:04:05:3c:
                    91:51:34:f9:3f:f9:33:58:d7:b5:14:88:c1:2a:1b:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:96:7A:CB:6B:32:AC:60:99:0B:7D:7A:6A:58:EC:17:E0:58:0F:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cadc0cc6-3db7-3256-853e-6ecbde7be2d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3750::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:95:73:6a:78:75:c8:56:f5:fa:75:0e:7a:9b:5c:12:25:54:
         b2:9f:fa:1b:1f:7d:36:73:4d:8d:36:50:82:a0:11:08:ab:27:
         8e:f4:ab:f3:84:2b:76:40:ee:a4:d0:92:e0:87:41:ba:8f:5c:
         b8:8e:dc:e0:5e:57:9e:b8:68:d8:f6:72:5e:b0:88:a6:07:7a:
         59:d6:b9:df:8d:9c:2d:36:d8:35:0f:35:01:ad:f0:11:80:ac:
         d2:8a:a3:77:7b:e6:81:64:fc:ca:e2:49:87:cc:9d:96:e6:20:
         ec:0c:5f:11:b4:b0:fd:73:72:90:b7:5d:c6:87:d6:6e:51:33:
         2c:68:74:c5:d5:b6:49:f6:c5:e8:94:da:7b:e7:f1:41:7a:77:
         90:c0:7c:f0:fb:55:22:14:d1:59:22:9c:38:45:26:28:be:31:
         34:2b:06:96:a8:a4:94:4d:7a:44:77:45:82:82:59:e9:71:d2:
         d9:fd:4d:66:34:8c:7d:a9:fe:3a:12:61:37:3d:6c:25:fa:e6:
         4f:84:d5:66:6a:70:d6:d7:3e:48:1f:e0:98:32:71:34:01:b0:
         4a:04:a9:b3:d3:c3:ed:b0:22:c7:85:30:8a:8e:b6:3d:9e:dd:
         10:ce:67:f5:ef:01:93:3f:96:01:fa:8b:9f:6a:de:b7:50:d7:
         87:43:ab:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:14:18 2024 by rpki-client on console-fra.rpki-client.org