Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fab01803-205a-31ea-af6a-519ef952033a.roa
File:                     fab01803-205a-31ea-af6a-519ef952033a.roa (raw, json)
Hash identifier:          pl3JgHbuDvn2J2tOJSypY3JBt08GWcI148Wxr3PR8S4=
Subject key identifier:   D1:EB:3A:1A:C5:BE:EE:8F:EC:43:15:9A:FA:8E:1C:70:A3:EF:C5:90
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780268CE57805311FE44C3100
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fab01803-205a-31ea-af6a-519ef952033a.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:48a0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:8c:e5:78:05:31:1f:e4:4c:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=4804a1f0-d4c5-44f8-b344-39a59f03a6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:08:5b:6d:f7:eb:2c:c1:87:45:85:cb:f3:98:
                    bc:54:0b:28:bf:0c:de:bf:23:b2:34:c7:34:54:31:
                    00:ff:97:9c:d8:8f:0b:7d:6f:7a:5b:a0:d8:cb:8a:
                    7a:af:fe:e8:36:00:d8:43:fb:ee:57:fc:4a:81:88:
                    85:f7:ce:bc:3c:d2:ea:00:f5:e4:1a:98:ef:47:0d:
                    65:32:55:1c:25:87:99:9a:c1:e6:3b:db:e8:19:67:
                    24:33:b2:2f:26:99:1b:d0:90:c9:2e:99:bb:4f:15:
                    43:17:c2:f6:08:59:3a:3d:3b:41:52:12:3a:db:b9:
                    c6:c2:de:7a:8a:25:94:d7:86:4b:08:c2:b8:81:a5:
                    c0:97:13:79:f8:a5:8e:02:2e:8c:d2:0e:7e:d1:86:
                    9b:2c:68:0e:b2:39:c8:ed:1d:ad:8f:8c:a7:54:c0:
                    58:f0:83:d5:6b:6e:c9:3f:21:14:50:be:e3:98:13:
                    e4:3a:b3:ca:98:da:19:48:af:a7:39:1e:5e:c6:b4:
                    f9:8a:34:52:47:e6:e8:13:cc:3e:73:d7:a7:a4:4a:
                    fd:1f:33:82:c2:97:08:76:05:07:5b:4f:61:35:41:
                    14:89:27:bc:75:ac:a8:1f:fb:1d:ae:4f:25:b4:63:
                    ff:59:21:13:68:7e:91:cc:47:db:c7:ad:59:64:7f:
                    b6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EB:3A:1A:C5:BE:EE:8F:EC:43:15:9A:FA:8E:1C:70:A3:EF:C5:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fab01803-205a-31ea-af6a-519ef952033a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:48a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:2d:4b:a6:00:a8:04:b9:8b:f5:21:00:14:9c:f3:8f:10:d9:
         06:e0:0d:9c:b8:92:3f:c5:e2:0e:7b:fe:62:1c:2a:b5:25:cb:
         99:be:4e:cd:38:57:62:9f:7c:30:bb:be:9d:be:53:ff:51:65:
         e5:64:5c:a7:3f:62:f6:c3:0d:9f:d9:9a:b9:4b:c3:79:3d:77:
         ea:42:2f:47:a3:af:91:7c:c1:ff:6c:d5:3c:b1:69:95:80:9f:
         06:a8:76:95:12:52:2a:47:68:a9:4b:44:95:9b:c7:b3:7e:8e:
         f2:29:9e:d7:c0:19:15:63:cc:cb:fe:e3:65:f2:a1:c9:85:06:
         c7:61:82:fb:4e:8e:4b:b9:97:61:33:3a:be:1b:49:79:9f:c2:
         f9:a6:d8:8f:85:2b:3d:9d:cc:bf:d9:85:95:fd:73:a6:e8:d7:
         23:b3:c5:86:63:76:8c:fd:fe:5e:df:b7:e4:f5:5f:4c:09:3d:
         ba:3a:2d:0c:0a:91:cb:6b:1b:8f:74:78:99:ab:87:98:65:2a:
         6c:b2:43:8e:d9:f1:ac:ac:fc:ed:48:d4:e4:f9:41:b5:38:a3:
         d4:ae:f1:45:5a:db:a4:9a:a8:35:94:99:a8:6f:4a:fb:a2:94:
         f2:58:ef:10:98:db:16:72:4c:3f:9e:bc:55:5f:fc:38:5b:e8:
         1b:3f:ea:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:51 2024 by rpki-client on console-fra.rpki-client.org