Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/00c15f0e-e3f3-358b-8e0f-be38b919282a.roa
File:                     00c15f0e-e3f3-358b-8e0f-be38b919282a.roa (raw, json)
Hash identifier:          2TfMpTNK8e1+lKbDGbmMw46UMZar6lkjKQSWxzQTFG8=
Subject key identifier:   2F:A7:2B:E5:63:84:39:92:86:A8:6E:C0:C9:B3:BE:FC:3F:39:CD:6A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178DA5DD6802D210B223180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/00c15f0e-e3f3-358b-8e0f-be38b919282a.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3530::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:da:5d:d6:80:2d:21:0b:22:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=bb1bc5df-ddca-4513-807b-93644612d6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cb:38:4a:9a:4b:7f:d0:7a:cd:0d:7d:4a:f0:
                    52:94:9e:34:de:2f:0e:4a:00:56:ec:da:c1:37:26:
                    a0:2e:83:f2:81:3c:ed:36:32:b1:a8:81:7d:9e:00:
                    52:a3:4a:26:5a:ed:23:c6:5e:a8:7b:8b:f3:13:a3:
                    56:a2:ec:a5:eb:62:d0:46:cc:31:39:17:e2:8d:d6:
                    64:b8:ac:ab:3c:f4:ad:0a:7c:7e:5d:48:ff:e4:4a:
                    19:67:1b:33:57:5a:aa:7e:2b:a8:4e:f7:06:76:65:
                    c6:2f:69:89:00:32:90:35:da:1b:84:2e:12:59:f2:
                    00:a9:c0:d6:f6:f9:93:14:91:1c:dc:79:07:13:ca:
                    44:d9:f9:d8:33:e4:53:11:97:8d:72:74:21:5b:58:
                    a5:cc:71:ac:9f:10:ed:9a:a4:99:3d:05:c7:a5:d3:
                    66:25:2e:71:e6:cc:b6:7f:8d:24:ec:01:02:5e:a1:
                    54:ee:9c:34:7c:22:20:1d:d3:04:8c:85:84:3b:94:
                    f1:82:e3:90:ef:0f:18:0a:79:db:db:50:0d:e2:a3:
                    cd:c4:2a:c7:e6:e4:f6:7b:be:91:a7:94:17:7b:cb:
                    16:0e:90:e1:bf:41:79:f5:d5:bd:7c:ce:84:96:db:
                    96:12:e5:6b:43:1d:06:dd:0f:a6:99:2e:d7:55:ca:
                    68:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A7:2B:E5:63:84:39:92:86:A8:6E:C0:C9:B3:BE:FC:3F:39:CD:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/00c15f0e-e3f3-358b-8e0f-be38b919282a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3530::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:aa:ce:8a:b3:28:de:3e:88:d9:a8:be:2c:64:14:28:93:54:
         5e:59:08:a0:14:c8:ce:7f:61:07:f5:f8:56:73:ee:54:92:15:
         50:bd:a2:3f:7c:bb:ee:a9:46:3d:12:2a:94:27:b9:0e:82:31:
         9b:fe:ab:02:5f:9a:49:2c:d6:b1:21:9f:e6:da:ce:69:a2:2c:
         e9:cf:dd:d7:21:0a:78:df:34:a1:79:da:ac:45:51:7c:34:90:
         0b:06:11:ec:60:fa:49:59:9b:92:83:5d:f6:17:31:11:47:79:
         12:9c:55:b9:75:fa:ed:5c:92:ed:c0:fa:8d:9d:ea:51:c4:db:
         b9:ae:bb:b7:b3:33:ee:bb:98:bb:5d:26:3d:e5:cc:28:ff:47:
         17:2d:3e:46:38:07:19:8e:50:8b:92:f4:a7:50:23:2b:6e:68:
         08:e6:b9:d1:da:a8:9e:9f:48:ea:19:22:90:94:62:3a:ba:e1:
         d0:c5:d4:92:e9:0c:88:db:05:76:93:67:53:45:3d:f9:98:67:
         9e:80:db:82:35:12:e8:e7:0c:85:ea:1c:c4:1d:a8:0e:3a:c4:
         2e:d7:92:3a:78:cc:93:b7:fc:24:5f:3a:e1:50:a1:50:9b:55:
         e2:da:5e:0f:3f:c9:ec:d7:08:13:84:b6:e8:39:ba:35:c5:37:
         66:7f:85:fe
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXBeNpd1oAtIQsiMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk
YmIxYmM1ZGYtZGRjYS00NTEzLTgwN2ItOTM2NDQ2MTJkNmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkss4SppLf9B6zQ19SvBSlJ403i8OSgBW7NrB
NyagLoPygTztNjKxqIF9ngBSo0omWu0jxl6oe4vzE6NWouyl62LQRswxORfijdZk
uKyrPPStCnx+XUj/5EoZZxszV1qqfiuoTvcGdmXGL2mJADKQNdobhC4SWfIAqcDW
9vmTFJEc3HkHE8pE2fnYM+RTEZeNcnQhW1ilzHGsnxDtmqSZPQXHpdNmJS5x5sy2
f40k7AECXqFU7pw0fCIgHdMEjIWEO5TxguOQ7w8YCnnb21AN4qPNxCrH5uT2e76R
p5QXe8sWDpDhv0F59dW9fM6EltuWEuVrQx0G3Q+mmS7XVcpoSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC+nK+VjhDmShqhuwMmzvvw/Oc1qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDBjMTVmMGUtZTNmMy0z
NThiLThlMGYtYmUzOGI5MTkyODJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQDUw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGqqzoqzKN4+iNmovixkFCiTVF5ZCKAUyM5/YQf1+FZz7lSSFVC9
oj98u+6pRj0SKpQnuQ6CMZv+qwJfmkks1rEhn+bazmmiLOnP3dchCnjfNKF52qxF
UXw0kAsGEexg+klZm5KDXfYXMRFHeRKcVbl1+u1cku3A+o2d6lHE27muu7ezM+67
mLtdJj3lzCj/RxctPkY4BxmOUIuS9KdQIytuaAjmudHaqJ6fSOoZIpCUYjq64dDF
1JLpDIjbBXaTZ1NFPfmYZ56A24I1EujnDIXqHMQdqA46xC7Xkjp4zJO3/CRfOuFQ
oVCbVeLaXg8/yezXCBOEtug5ujXFN2Z/hf4=
-----END CERTIFICATE-----
Generated at Tue May 7 21:37:35 2024 by rpki-client on console-ams.rpki-client.org