Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0a847ae-2440-31d4-9ab1-dacd3b4c4f68.roa
File:                     d0a847ae-2440-31d4-9ab1-dacd3b4c4f68.roa (raw, json)
Hash identifier:          iQthrkYdZl9J+CyTtK+61Pi68PoYNUQrfnjgUBJJJmY=
Subject key identifier:   9D:77:A3:0C:5C:80:A9:95:D2:44:1C:FB:05:D5:59:A9:48:2B:08:D1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780266F2692B4AA9C5FC77B00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0a847ae-2440-31d4-9ab1-dacd3b4c4f68.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:5410::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:6f:26:92:b4:aa:9c:5f:c7:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=4cd1cab1-1a72-4aa0-8842-59610d765e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5a:a0:68:44:59:e8:3a:9c:3b:79:08:79:eb:
                    36:2b:4c:e5:d6:02:be:ed:be:1d:67:a7:30:67:e7:
                    fe:02:7f:a3:64:69:f4:19:de:0f:d5:70:11:0d:57:
                    bf:19:bf:e2:b9:92:08:2d:a9:f1:b8:6b:49:85:0d:
                    d3:1d:f9:d2:ad:ad:7e:d7:c6:ca:74:b4:6e:31:7f:
                    c1:a4:9a:76:43:53:f3:1e:25:91:d8:81:db:18:5c:
                    cd:b1:db:fe:64:49:ab:48:89:6f:a9:36:cd:92:0d:
                    4c:c0:0e:55:9b:0a:32:16:7a:c8:e8:7b:6f:cc:ca:
                    90:58:b5:fd:ae:b8:ad:99:c5:9a:6a:3d:e3:a9:d9:
                    8f:93:e7:54:a6:5c:43:38:da:ce:7c:5b:57:d5:11:
                    a7:78:48:37:ee:32:09:fe:61:01:45:55:c2:6f:1a:
                    f3:32:44:ad:b0:4a:4a:51:34:11:6c:0d:2e:a7:cd:
                    b7:de:aa:20:b3:67:4a:3d:a9:08:4e:b1:af:68:3b:
                    49:87:ca:d8:50:c4:b8:6d:42:c9:e6:33:d1:b1:2f:
                    25:31:ef:8c:87:fc:88:5c:80:07:54:8a:fd:93:61:
                    0d:bb:23:0f:1e:a3:9b:20:ef:d1:78:04:c1:78:d9:
                    d2:4e:13:af:f8:7c:e7:07:08:b0:fb:27:be:d7:9f:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:77:A3:0C:5C:80:A9:95:D2:44:1C:FB:05:D5:59:A9:48:2B:08:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0a847ae-2440-31d4-9ab1-dacd3b4c4f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5410::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:0c:b7:59:0e:cb:59:99:33:32:52:ce:24:51:90:09:fc:83:
         e3:c3:bb:cb:4c:fb:a1:ae:8e:c9:75:53:83:8d:cc:50:9f:60:
         c7:d8:63:a6:fd:1d:6e:43:32:3d:09:bc:d0:df:f8:54:c6:5a:
         68:ba:b4:8d:41:18:9d:1c:8b:6a:01:07:78:de:a2:6a:c9:67:
         75:3e:ec:ae:a3:bd:61:bc:ae:89:3b:f1:5a:6c:1a:68:6e:7f:
         0f:e5:e4:c4:d7:f7:db:d5:f9:a4:40:7e:d3:60:2a:7a:41:b1:
         6a:05:53:f3:0c:a7:e0:55:a5:0b:dd:ea:de:60:d4:40:83:ee:
         37:78:1a:a5:fa:b9:5c:be:a5:68:d0:39:a1:cf:74:c2:8a:b6:
         1f:e1:c1:a4:e3:7f:d0:ae:fd:18:00:78:41:24:e0:2a:39:41:
         ae:a9:3f:38:8f:bf:44:cb:db:bb:4a:d8:cf:e8:99:c7:80:db:
         90:92:40:fc:26:b3:d1:29:38:f9:5f:07:ec:85:e7:2c:14:bd:
         ea:0c:33:7a:be:ec:d5:dd:1b:50:25:5c:df:1b:a3:cf:4e:88:
         4b:d8:7c:da:93:c6:ba:d3:8c:7f:b2:e1:d8:f3:f0:86:ac:42:
         7e:44:9a:aa:b3:40:bf:ea:41:ef:7b:ad:43:7f:48:c8:37:04:
         fc:c1:0e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:27 2024 by rpki-client on console-ams.rpki-client.org