Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e4188a48-5ac2-38eb-a0a7-97672fba4748.roa
File:                     e4188a48-5ac2-38eb-a0a7-97672fba4748.roa (raw, json)
Hash identifier:          o9qn1eysti3nQbtQcvCOW8h7UoZzem2807mvkB4Eo9o=
Subject key identifier:   D0:6B:6A:09:98:F7:D7:C2:40:36:0C:F0:06:35:43:35:47:6D:8C:8E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802686AA0739AD0A9AB8C570
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e4188a48-5ac2-38eb-a0a7-97672fba4748.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:5e00::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:86:aa:07:39:ad:0a:9a:b8:c5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=1683e06d-c33b-4e76-81c4-f9a7914f39f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:5b:f6:c9:e6:d8:3f:3f:f4:40:b0:cb:f0:
                    fd:02:9b:6c:0e:ce:48:6b:78:19:c3:b4:09:8f:0f:
                    f4:80:da:2d:17:4d:97:ed:5d:e3:12:79:9b:89:4f:
                    74:53:01:11:59:80:78:05:fe:25:7d:a3:18:5a:47:
                    aa:79:e0:ff:29:23:a8:a1:67:8a:cb:bc:a1:df:04:
                    91:51:88:1d:72:a6:87:4d:a0:47:2f:f5:66:2b:09:
                    7b:2d:b5:aa:70:22:11:a0:e7:fc:2a:db:54:52:fb:
                    74:fc:58:82:6b:6f:25:77:41:df:19:51:93:8e:ce:
                    89:c3:24:5a:bb:ee:b8:d9:da:82:9f:b7:34:e6:ca:
                    89:b7:81:f7:38:14:84:09:8f:07:23:2b:9c:e2:1b:
                    3c:bc:63:38:59:19:36:2f:8e:ce:9b:a2:00:b5:b7:
                    74:dc:c3:04:a4:fb:86:f8:cd:d8:c2:fd:f2:50:97:
                    c8:1c:c9:c2:85:c2:06:b3:8a:54:07:6b:8c:2d:ed:
                    90:38:a7:23:c1:c2:5e:5e:59:50:54:8b:b1:01:b7:
                    af:9d:04:bb:d5:9d:f4:09:b0:5d:33:c1:aa:13:4b:
                    a5:b3:13:f9:8e:86:2b:a0:bd:a5:65:db:91:c1:60:
                    8f:36:07:48:d7:a0:5e:a2:4e:5b:e0:51:b1:dd:91:
                    2c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6B:6A:09:98:F7:D7:C2:40:36:0C:F0:06:35:43:35:47:6D:8C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e4188a48-5ac2-38eb-a0a7-97672fba4748.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5e00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:20:87:98:8d:a4:bf:c7:82:76:75:57:ac:f5:0a:15:a1:0f:
         c8:de:00:b0:a0:62:d5:22:8a:24:bf:ec:9c:fd:27:4b:d7:ec:
         c2:20:38:57:55:6f:a1:97:18:41:9e:77:58:89:a7:65:a5:b1:
         c1:0f:e0:34:09:48:46:92:ce:60:a5:3c:14:a0:3f:1a:ab:bd:
         76:ef:aa:43:d1:64:8e:6a:e8:d1:ab:0e:1e:67:01:84:c5:74:
         6e:f4:97:7f:ed:1f:f6:c1:8d:67:b4:55:f6:ea:0a:16:30:25:
         a0:8c:71:e8:ef:b9:d3:70:28:0d:b3:41:1c:f7:27:6f:9c:27:
         99:f8:98:25:6f:cb:40:7f:a3:60:de:6d:89:e6:c7:ab:65:6a:
         a1:5b:00:a1:e1:0d:e7:5f:28:1c:79:6f:00:b7:cf:96:dd:ef:
         51:db:44:e4:45:7a:f6:61:12:05:6c:07:f9:47:f0:a5:a7:31:
         db:a3:5b:9d:94:ec:1c:14:f4:9b:39:34:4c:58:ce:73:1a:dd:
         ea:92:27:1c:26:39:5d:41:91:12:02:1c:fe:c5:a9:d0:5c:31:
         ff:38:f5:b1:0d:c8:88:6b:d0:66:9e:a7:e0:95:b6:e6:38:ed:
         15:68:42:a3:d0:30:11:8a:6c:e2:24:29:39:77:04:16:15:ff:
         35:1f:05:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:16 2024 by rpki-client on console-ams.rpki-client.org