Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fa9878a6-8cd8-3941-9bb5-dc3476a84b92.roa
File:                     fa9878a6-8cd8-3941-9bb5-dc3476a84b92.roa (raw, json)
Hash identifier:          I7MU7W91ttzaF6Ev9zSFoPHtooUFEjJiFUCjpoCSLcE=
Subject key identifier:   B4:38:FF:5B:CD:FC:9D:28:4F:4C:FA:29:91:13:81:47:93:A4:A7:BD
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178DC24A583E412A23886C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fa9878a6-8cd8-3941-9bb5-dc3476a84b92.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:2f20::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:dc:24:a5:83:e4:12:a2:38:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=5df246c5-2c1d-48cc-8219-5b740ee134d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:c1:e5:ea:dc:04:e7:f5:17:c3:bb:f0:a9:
                    30:db:3a:8b:fd:a8:2b:0f:2b:c6:e2:9a:5e:4d:1a:
                    58:1c:fb:c8:47:4e:c8:bb:9c:4c:82:59:1a:55:48:
                    4f:e8:ce:28:7b:e8:d2:26:7f:45:65:d5:20:40:13:
                    f7:f5:26:80:54:da:b5:54:68:e6:94:4d:c2:7c:26:
                    b7:48:af:30:10:00:d6:60:9b:42:24:51:6e:5f:71:
                    43:ea:59:fe:da:7a:f2:60:86:26:31:ab:e3:df:6b:
                    d5:60:f1:a0:71:c3:b9:c4:f3:62:f4:97:48:93:ba:
                    96:e3:3c:c9:86:1e:5d:52:bb:e5:30:dc:93:f9:6b:
                    9d:f8:8f:9d:e7:81:f9:6a:da:57:4f:cc:b7:17:51:
                    8a:67:38:46:81:a7:42:3c:a2:0b:5e:f8:dc:dd:e7:
                    27:6f:d2:37:75:03:ec:14:56:2c:f1:f0:8e:03:6d:
                    8d:8c:f6:71:09:71:ea:84:44:89:80:e1:bc:db:84:
                    94:71:57:c4:64:71:26:37:69:18:f2:60:47:ea:36:
                    ba:48:d2:79:69:b9:83:ba:f0:bf:bd:49:e1:d6:b0:
                    97:ae:39:6d:5a:d8:2c:37:2c:97:39:d6:b3:dd:50:
                    d2:63:e1:b0:17:6f:db:be:ba:e2:fd:37:46:e1:1a:
                    74:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:38:FF:5B:CD:FC:9D:28:4F:4C:FA:29:91:13:81:47:93:A4:A7:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fa9878a6-8cd8-3941-9bb5-dc3476a84b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2f20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f3:69:59:c5:44:5a:6a:ca:88:91:47:cf:92:3b:92:45:70:
         70:25:41:61:f6:1f:70:9b:2e:a5:72:ea:2c:42:0c:14:24:7b:
         56:8d:b0:1d:11:b7:e2:63:7b:86:19:ac:5f:4e:ff:3f:25:4d:
         cf:32:b7:4a:10:df:1e:1d:26:55:ea:c3:82:09:ea:e2:5d:6f:
         7d:21:d5:7e:0e:fe:64:0f:66:47:7c:e7:96:9c:34:51:d1:c3:
         60:a9:f3:ef:1f:5b:3b:0d:f1:14:7a:f5:8a:0a:31:04:be:68:
         d7:c7:a4:89:7f:26:4a:dc:12:2a:a3:19:fc:e1:6b:36:d2:1c:
         a2:fe:cf:55:23:09:45:17:2a:db:29:53:78:25:9b:8b:a6:bb:
         42:9d:9a:b3:1b:33:e6:2c:fd:c3:0e:9f:2d:8b:43:5a:44:4f:
         52:74:e0:e6:0a:fc:f0:ac:ff:2b:01:2e:ac:96:3f:6c:3f:f0:
         78:1d:e8:c3:b0:0a:4b:e8:cb:e2:a3:78:9e:35:1f:d2:7b:c4:
         55:bb:e1:e3:32:46:1e:0b:38:ed:bf:99:f4:f2:bc:10:3a:0f:
         03:c4:24:95:3c:5e:bd:d5:22:3a:f1:fc:9a:6c:d8:dc:eb:bc:
         38:6e:7a:08:51:4f:e4:59:09:23:0d:dd:4b:c9:b4:70:5f:02:
         2d:f2:47:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:32:49 2024 by rpki-client on console-fra.rpki-client.org