Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f5579bfb-1b8a-3c33-b313-cd33e94a151e.roa
File:                     f5579bfb-1b8a-3c33-b313-cd33e94a151e.roa (raw, json)
Hash identifier:          CPXDUqgS0GnT0ock4nyqQQ2C0p0f1YArAVBZGTC+E+s=
Subject key identifier:   A1:F2:03:A0:8E:35:57:20:94:89:C7:78:7E:23:3C:10:C4:0D:61:1C
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9AF4926BA22DCAA47E0540
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f5579bfb-1b8a-3c33-b313-cd33e94a151e.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5bd0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:f4:92:6b:a2:2d:ca:a4:7e:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=1ce0a4bf-22c1-4612-bb54-a5aa4565426a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:43:7b:57:ef:44:64:b9:a3:5e:28:7f:c1:1b:
                    18:a4:b3:10:87:90:01:c5:22:dc:91:d7:6f:a6:54:
                    58:4b:d2:ec:5b:bd:ab:18:f5:fa:1a:cc:d4:0b:9e:
                    90:d7:06:92:96:3f:b8:e4:8d:84:20:9b:12:6c:40:
                    0b:6a:89:1c:30:2f:e0:6b:af:d2:aa:2b:65:3d:08:
                    55:5d:17:56:26:a5:e0:8f:c0:6e:17:9f:e5:4f:85:
                    ae:bc:74:3e:50:19:e8:9d:16:7a:2d:30:ba:9b:26:
                    c5:da:70:13:51:92:ac:0d:b8:d6:f8:5f:7d:28:0a:
                    72:b1:d4:f1:01:54:94:a8:38:67:7c:a4:70:3c:21:
                    60:50:cf:ef:0a:a4:04:4c:8f:1d:a0:bc:c4:ae:a6:
                    bd:28:27:1a:45:a6:c2:72:15:24:55:84:47:a7:ff:
                    d2:97:6d:c0:37:89:7c:b2:0b:9d:85:ea:c8:01:0b:
                    94:11:a6:9d:87:aa:4e:6d:f9:9e:e3:28:57:57:9b:
                    fc:9f:35:71:79:a3:61:72:09:df:96:5c:ff:60:b1:
                    af:61:35:ad:a5:95:64:c2:14:c5:59:2d:d8:84:91:
                    ac:c8:b4:61:cf:a2:65:23:cc:15:a1:85:aa:60:47:
                    2e:c0:8f:45:34:d8:31:3b:75:2a:eb:d8:13:b8:19:
                    c6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F2:03:A0:8E:35:57:20:94:89:C7:78:7E:23:3C:10:C4:0D:61:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f5579bfb-1b8a-3c33-b313-cd33e94a151e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5bd0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f8:e6:19:a8:cf:9e:b8:74:be:bc:91:0d:cc:89:45:62:f7:
         6e:cc:ff:b4:c8:7a:ef:32:8f:64:a6:a9:93:c8:c7:02:57:80:
         56:78:eb:3d:84:0a:a6:05:7f:e0:45:31:1a:22:d6:d2:ee:5f:
         19:b8:95:8c:3d:f5:2e:c4:e8:17:e0:e5:94:c5:d7:08:17:2b:
         ee:ee:8c:e3:38:77:bb:95:f7:8b:c7:91:d7:88:70:6f:30:54:
         69:6e:8f:ae:60:55:8f:93:69:7f:9f:3d:57:70:1c:ec:67:61:
         24:86:b8:69:fb:b5:27:f8:aa:f6:fb:70:59:be:68:f5:e6:dd:
         62:d2:4e:44:09:f1:b0:59:be:14:67:27:b4:ab:8c:63:1d:f5:
         66:e6:40:70:5c:89:17:ff:2e:7f:3a:66:e5:b5:97:86:00:ee:
         a3:cb:0d:8d:95:66:e1:6f:c7:dd:e3:20:49:f2:b6:23:1e:8b:
         c9:f6:25:f8:51:4e:bd:42:b8:66:ac:2f:a1:1a:66:34:79:39:
         af:89:28:9e:3b:f3:8d:94:33:aa:43:5d:42:09:c1:98:5a:75:
         62:9c:da:81:48:f5:4b:eb:b1:76:04:a8:e9:e0:49:ee:1e:fa:
         df:26:43:96:a3:88:c4:30:41:be:6d:e5:6c:f9:2a:38:b6:df:
         6e:3b:5c:a3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmvSSa6ItyqR+BUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
MWNlMGE0YmYtMjJjMS00NjEyLWJiNTQtYTVhYTQ1NjU0MjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUN7V+9EZLmjXih/wRsYpLMQh5ABxSLckddv
plRYS9LsW72rGPX6GszUC56Q1waSlj+45I2EIJsSbEALaokcMC/ga6/SqitlPQhV
XRdWJqXgj8BuF5/lT4WuvHQ+UBnonRZ6LTC6mybF2nATUZKsDbjW+F99KApysdTx
AVSUqDhnfKRwPCFgUM/vCqQETI8doLzErqa9KCcaRabCchUkVYRHp//Sl23AN4l8
sgudherIAQuUEaadh6pObfme4yhXV5v8nzVxeaNhcgnfllz/YLGvYTWtpZVkwhTF
WS3YhJGsyLRhz6JlI8wVoYWqYEcuwI9FNNgxO3Uq69gTuBnGjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKHyA6CONVcglInHeH4jPBDEDWEcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjU1NzliZmItMWI4YS0z
YzMzLWIzMTMtY2QzM2U5NGExNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFvQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFT45hmoz564dL68kQ3MiUVi927M/7TIeu8yj2SmqZPIxwJXgFZ4
6z2ECqYFf+BFMRoi1tLuXxm4lYw99S7E6Bfg5ZTF1wgXK+7ujOM4d7uV94vHkdeI
cG8wVGluj65gVY+TaX+fPVdwHOxnYSSGuGn7tSf4qvb7cFm+aPXm3WLSTkQJ8bBZ
vhRnJ7SrjGMd9WbmQHBciRf/Ln86ZuW1l4YA7qPLDY2VZuFvx93jIEnytiMei8n2
JfhRTr1CuGasL6EaZjR5Oa+JKJ47842UM6pDXUIJwZhadWKc2oFI9UvrsXYEqOng
Se4e+t8mQ5ajiMQwQb5t5Wz5Kji23247XKM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:12 2025 by rpki-client