Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fedee95d-60df-34e7-a5fd-e3fee4ce1031.roa
File:                     fedee95d-60df-34e7-a5fd-e3fee4ce1031.roa (raw, json)
Hash identifier:          3Fj0L62Yd8GDBZmfs7X/Ba00zB12jvWaB5sUwJfmCvY=
Subject key identifier:   A8:96:84:13:80:FE:67:02:E0:DE:3F:9F:BC:4C:DE:CC:BF:39:27:12
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858478026909DE9D18406EE505B40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fedee95d-60df-34e7-a5fd-e3fee4ce1031.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:4920::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:90:9d:e9:d1:84:06:ee:50:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=3ee64991-ea32-440d-95a3-8f0f09b374c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:13:43:1f:33:31:34:e2:b6:a9:a4:18:31:4c:
                    68:f9:b0:7e:c7:fd:45:fa:dd:49:98:d8:04:dd:46:
                    1d:38:6d:4e:63:24:8e:62:03:02:27:bf:a8:fd:dc:
                    d5:39:5e:80:75:ac:7a:51:f0:9f:19:cc:68:86:9c:
                    8a:8d:4a:ef:bc:62:83:c1:25:1e:f2:61:7f:23:0d:
                    35:89:86:1a:c6:bb:3e:60:e0:7e:72:3a:02:92:6c:
                    40:25:e7:21:1b:f9:9c:5c:8c:05:f1:23:74:e2:31:
                    ad:d5:61:73:3f:63:f6:60:6b:83:dc:39:74:13:ff:
                    e4:e9:b0:8c:bc:06:66:7a:3f:4a:09:74:f8:b7:81:
                    af:9a:cf:a1:05:67:a8:1f:40:35:a0:6c:9a:e1:da:
                    f6:7e:19:3f:5f:89:d8:54:ee:77:3d:8a:1c:2c:8f:
                    87:de:bb:a5:de:e0:3a:71:5b:df:7e:d6:fd:bf:66:
                    e1:09:01:17:6e:17:4d:87:94:14:02:bd:b4:dd:55:
                    39:cf:1c:89:09:89:78:e8:3e:39:8b:89:5b:2f:5d:
                    53:7c:ec:b3:d8:72:e7:e8:49:c3:0a:fa:57:a1:af:
                    6e:74:33:81:20:81:89:e0:36:f0:21:2f:21:0b:8a:
                    ec:2c:60:91:93:f5:df:72:1f:96:aa:d4:49:ce:51:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:96:84:13:80:FE:67:02:E0:DE:3F:9F:BC:4C:DE:CC:BF:39:27:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fedee95d-60df-34e7-a5fd-e3fee4ce1031.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4920::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:8c:64:fd:b3:ac:dd:13:53:1a:eb:6c:8a:fa:d6:86:7f:91:
         bd:77:a5:6b:f8:03:31:66:e7:b5:ba:04:24:b4:df:1c:ac:91:
         3b:c8:10:80:0a:3c:e7:c0:ad:46:81:74:e3:ba:d7:a6:8b:f3:
         52:2f:86:0f:ef:1e:13:c6:d9:0f:c8:3e:a3:21:c0:30:04:4f:
         90:fd:29:6f:97:05:e4:0c:17:5e:17:9d:97:c0:c3:26:63:d3:
         da:0d:c3:84:97:7a:ef:6c:a8:e6:64:bc:35:9b:a3:38:53:52:
         e7:95:0c:f2:55:56:2f:98:b5:a1:a6:a8:81:d4:1f:d6:f6:86:
         ab:9b:32:a7:50:e4:47:e8:5c:5d:b3:7d:0c:94:b6:b2:25:31:
         61:17:ad:63:10:92:66:c2:8e:70:02:9b:2e:8f:64:de:52:ae:
         58:9d:df:e9:78:35:d8:8e:e2:e7:4c:fd:1a:04:4a:2f:7e:0c:
         db:cc:6d:fc:c9:39:39:9f:aa:ed:d7:fa:f4:c4:75:62:39:0f:
         b6:96:95:ba:bd:b4:07:a5:c9:bb:9a:75:09:19:41:58:d5:10:
         17:08:7b:88:22:15:93:00:75:64:7b:61:e8:14:5d:cb:f7:1e:
         49:94:6b:2a:84:c2:89:b5:bc:00:35:59:99:9f:9d:be:5b:de:
         b8:f3:72:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:51 2024 by rpki-client on console-fra.rpki-client.org