Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/eeba115b-1e93-3b3c-8be4-f0590c2f8070.roa
File:                     eeba115b-1e93-3b3c-8be4-f0590c2f8070.roa (raw, json)
Hash identifier:          9Oy2K5MdhStg3PawjkVzTzwDqB1PvmTJAmq7uZUkuAI=
Subject key identifier:   DD:9F:75:0A:1F:93:D1:8C:1E:10:84:D2:97:16:20:8D:CA:F2:F4:42
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9B04766068C2BA539B2500
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/eeba115b-1e93-3b3c-8be4-f0590c2f8070.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4170::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9b:04:76:60:68:c2:ba:53:9b:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=5e095615-5fe4-4c2c-aa95-6f09904a385c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d4:81:31:29:1c:98:30:ef:1a:e4:d9:33:09:
                    24:66:59:c5:11:e2:41:0c:44:8c:fb:af:6f:ba:c4:
                    c8:4d:79:d2:ac:87:52:a6:eb:62:68:58:5e:a0:d7:
                    64:45:9f:a7:0d:b1:e7:ee:48:81:56:fa:82:c8:6b:
                    1c:d5:1d:a0:5a:20:d0:b1:c5:f3:c4:3f:63:fd:00:
                    59:ec:49:23:ee:47:6d:c5:b1:23:5d:88:f3:da:66:
                    06:01:79:1d:9a:74:b3:44:fb:7e:ff:cf:b3:d0:67:
                    48:91:7c:e7:e7:98:4b:89:cf:b7:b5:48:37:d2:db:
                    3b:70:df:25:df:5e:20:bf:e3:71:7a:9d:cf:a4:de:
                    c9:8a:e2:bd:e5:e8:0b:00:ae:e0:d6:e9:e3:c8:eb:
                    1a:57:36:14:92:45:06:ba:49:84:02:38:a1:45:79:
                    cf:c6:c4:62:59:1b:8e:7e:b5:d6:72:bf:37:e0:bf:
                    d3:90:01:8f:c9:1f:e8:e5:d2:9e:c7:27:26:13:77:
                    fc:45:5b:59:fd:54:79:10:47:34:ce:a5:1c:f0:e4:
                    34:5e:81:12:53:6c:ab:a7:42:20:66:0f:29:9f:8c:
                    1c:96:fd:26:6a:46:be:1a:e9:c1:fd:77:3c:ee:ff:
                    e8:8c:65:52:56:32:74:d2:8a:08:e6:27:41:6a:66:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9F:75:0A:1F:93:D1:8C:1E:10:84:D2:97:16:20:8D:CA:F2:F4:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/eeba115b-1e93-3b3c-8be4-f0590c2f8070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4170::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:41:e8:a9:78:02:0e:9e:d0:42:d3:54:9a:ef:bc:0c:7e:5c:
         67:3b:61:17:a2:ba:22:90:d0:74:5e:41:ba:1a:d5:da:72:23:
         c3:5d:13:23:f4:e1:a4:b3:9d:83:f5:5d:13:f2:1f:93:ce:40:
         75:96:ae:f0:39:21:8b:f4:31:fd:47:63:7c:e0:30:a4:32:36:
         71:d2:50:c6:fa:96:ed:1d:a2:86:e7:f8:c1:4b:03:7d:59:25:
         b3:29:85:a8:cb:3b:45:64:7f:b4:72:db:21:e8:ef:79:40:e6:
         f5:c7:3e:80:57:a5:56:44:6d:2e:b7:66:30:a6:b1:ac:e6:4c:
         0e:60:f4:ba:71:3f:d8:11:d5:e0:79:e9:56:b2:ef:5e:d0:97:
         e1:d5:b2:ae:4c:e0:5b:ae:08:15:b1:ad:dd:b5:8d:19:01:e1:
         d1:2a:82:90:a5:0d:f9:4f:b0:cd:0b:ca:4b:0a:c3:94:77:e2:
         57:8f:e2:c0:82:70:1d:d9:d2:e0:7d:b9:2e:86:44:b5:6e:a0:
         5a:27:90:5b:6e:5a:7c:cb:e5:71:b0:b9:be:c4:8e:a8:8d:f7:
         3c:fa:44:3d:87:62:13:8e:57:78:54:19:91:0c:73:c7:00:c4:
         74:b6:1e:c7:5f:93:58:e5:f3:7e:0c:74:41:3f:a4:22:f5:68:
         7e:1e:fa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:50 2025 by rpki-client