Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f8a9d9bd-b3a7-3882-b14e-e9765f1e7694.roa
File:                     f8a9d9bd-b3a7-3882-b14e-e9765f1e7694.roa (raw, json)
Hash identifier:          vbkaN8/EopS1c7SPsI2MwZs645wYRs99E4DnC7SCucI=
Subject key identifier:   28:BF:48:28:FE:C3:05:E3:1D:75:C8:53:4E:B4:8A:BC:81:12:3E:F6
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780266039443B9B5F5B964A34
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f8a9d9bd-b3a7-3882-b14e-e9765f1e7694.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:5a00::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:60:39:44:3b:9b:5f:5b:96:4a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=3bf2e6d3-8fc4-4f83-8499-491c338bf674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bc:5d:ed:8d:2a:60:a8:86:38:76:12:eb:4a:
                    b6:fb:f2:9b:c1:0c:d4:93:84:db:d3:2f:78:c0:04:
                    75:7d:2f:34:dd:5a:3a:2c:94:ab:9e:50:80:df:dc:
                    0f:40:50:f2:c4:c2:bc:ea:17:47:bb:89:88:28:6f:
                    26:55:99:30:8f:fb:37:c6:3c:83:ec:12:7f:a5:ca:
                    36:b5:bd:87:f0:ab:68:10:2b:af:e5:0d:50:18:93:
                    17:3b:1d:31:cc:b8:4e:8c:61:6d:1e:ab:34:92:42:
                    50:0c:8b:63:5b:88:da:5f:39:74:be:f1:1c:27:6e:
                    4f:70:a0:f7:50:eb:3b:65:b6:7b:bc:8c:83:ae:17:
                    26:ff:97:ed:cd:c5:72:5f:d3:56:48:18:59:39:39:
                    6f:94:bf:f9:d5:e3:f4:7f:1d:5e:61:4c:13:ef:ca:
                    6a:fc:c8:c8:d6:1f:83:61:c6:d6:49:52:d4:b6:1a:
                    1b:24:b4:79:90:8d:54:d4:39:9f:be:e1:f6:bd:43:
                    bb:67:cf:e9:11:04:4f:b6:e7:75:1a:14:52:57:ab:
                    ff:09:ce:8e:19:85:f6:12:9c:d1:fd:25:44:70:67:
                    bf:bf:97:8a:91:4f:95:d8:f3:03:b4:fc:0f:90:bd:
                    5b:3f:a3:e3:aa:6c:42:0c:fb:6a:91:a0:ba:c4:99:
                    dd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BF:48:28:FE:C3:05:E3:1D:75:C8:53:4E:B4:8A:BC:81:12:3E:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f8a9d9bd-b3a7-3882-b14e-e9765f1e7694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5a00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:42:62:58:15:f8:6f:75:ee:71:b6:df:98:39:99:8a:80:
         dc:cc:98:91:b9:ae:c9:3f:37:62:3c:44:df:f2:df:de:95:a8:
         98:bc:19:b1:6f:77:53:c1:8b:a9:67:e8:94:f1:24:26:00:3d:
         51:f3:96:f8:96:7b:e6:88:4f:ba:2f:44:e5:d5:d1:bf:e2:8b:
         13:c4:f8:d3:04:4f:e7:50:f4:2d:49:c3:42:2f:2e:52:fb:eb:
         63:63:c0:43:83:53:c0:51:29:9a:a1:5e:3b:9c:3a:bb:6a:a2:
         98:16:4b:56:a1:b6:dc:60:f8:66:68:87:9a:d7:94:8d:6b:36:
         fe:06:0d:84:46:ad:91:10:82:56:03:77:e0:6d:b2:47:f4:d4:
         72:b5:c2:35:b1:94:37:22:19:0c:a5:af:f0:1a:fe:84:d4:7f:
         34:4d:1b:0a:b7:98:be:81:e4:02:d9:5b:2d:e5:70:80:5b:47:
         fa:0f:dc:e8:16:76:13:37:4a:9d:73:fc:ce:1c:74:0d:46:52:
         c7:1e:65:b9:92:22:ed:cb:27:df:a1:19:45:e4:a7:4a:9d:4b:
         5d:3b:4e:c0:ae:65:7c:fd:8b:d6:78:7a:50:0a:bf:06:c1:61:
         7e:d0:b6:71:c0:15:e4:02:b2:10:38:c9:77:d9:63:b8:b5:af:
         83:4b:5f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:16 2024 by rpki-client on console-ams.rpki-client.org