Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/03d013b2-e227-36c1-9640-bf39d69d8e6d.roa
File:                     03d013b2-e227-36c1-9640-bf39d69d8e6d.roa (raw, json)
Hash identifier:          yJTLVCYTjm5FGzYUeVMq+qm0djb3Qob1H2BgrNTXZyo=
Subject key identifier:   4A:4B:37:3B:5B:ED:CC:01:C8:2C:E7:FB:00:63:87:A8:FA:4B:FE:21
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858478026663209EAFADF3FE15E00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/03d013b2-e227-36c1-9640-bf39d69d8e6d.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:2fd0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:66:32:09:ea:fa:df:3f:e1:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=b793b6b8-e75c-450f-a3f0-2075bbdf3c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:77:58:04:1b:6f:c5:17:e5:58:2e:8f:26:
                    03:8c:46:81:84:64:d3:b2:ae:37:57:cc:c2:08:fa:
                    6a:01:23:e4:9f:c3:dc:2d:0b:1b:f4:3d:a0:36:40:
                    89:18:a5:c3:48:63:dd:b8:36:e7:2e:0e:cf:9f:50:
                    5a:01:64:6e:8c:16:63:6a:78:d5:5b:22:7c:d4:9b:
                    5c:d4:b6:36:dc:09:c0:f1:5f:34:20:3f:de:27:61:
                    9b:a9:cb:25:3a:ff:7e:09:a3:5c:4d:a1:d7:6d:1f:
                    71:8e:33:0c:29:b6:77:70:e9:7a:cf:f5:d4:34:dc:
                    0f:5d:42:5f:8b:35:35:1e:30:85:ce:62:70:e7:35:
                    45:07:fd:92:e0:76:15:b7:cb:89:fd:e5:f7:87:9b:
                    6e:c1:be:c5:40:c3:1b:76:f3:a2:50:66:69:a4:af:
                    dd:56:89:52:a4:37:c9:63:6e:b7:19:aa:b1:8a:82:
                    61:bf:7a:a4:66:df:1c:7d:89:f0:87:a9:31:21:03:
                    23:a7:1e:96:57:10:34:d5:74:1d:84:1d:c2:66:52:
                    e1:e8:11:ab:f1:a7:86:ff:2b:4b:0b:9e:a6:17:4c:
                    4e:17:22:70:5e:f4:df:8c:57:84:59:73:a1:10:36:
                    6b:e0:f6:08:02:5e:79:2b:ad:54:d3:36:c6:9d:86:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4B:37:3B:5B:ED:CC:01:C8:2C:E7:FB:00:63:87:A8:FA:4B:FE:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/03d013b2-e227-36c1-9640-bf39d69d8e6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2fd0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:56:fa:57:49:3d:d4:2f:b7:42:4c:6f:a0:3d:92:be:bb:1c:
         26:10:5a:28:89:6e:08:1c:e7:20:f4:0a:45:7d:33:d5:58:c4:
         a4:00:e6:1b:ea:4c:c8:72:73:dc:7a:8c:2b:b9:75:52:05:f1:
         a5:75:25:c2:f0:1d:52:15:3f:74:ad:32:4e:a4:98:46:f9:70:
         25:53:c1:7d:5a:d1:99:63:51:84:ad:91:26:ee:9b:54:fa:64:
         4f:65:2b:37:5d:7d:6c:5f:ec:65:cb:58:9b:eb:91:29:b5:ae:
         57:6b:04:dd:98:d7:f8:80:9e:84:f1:bb:c2:90:a9:7f:f0:dc:
         05:ab:02:c2:4b:7d:fd:7e:eb:b8:07:73:e7:09:56:32:68:61:
         68:df:82:c1:f4:aa:e9:16:7e:ea:14:74:5d:50:b9:e4:d3:30:
         14:e5:93:fe:64:81:66:60:fc:64:ef:72:f4:84:55:68:7d:55:
         ff:fa:9c:d2:6e:e8:55:47:97:04:91:a9:f9:e6:7a:1b:2f:f5:
         93:f7:bb:80:c0:81:83:5c:84:14:e6:e7:0d:a6:1a:e7:c2:51:
         27:37:16:54:a6:85:5a:ab:d4:a4:7b:5d:92:df:e7:ae:ba:6f:
         c5:3f:f6:94:7a:69:02:e0:d2:44:50:ff:89:19:a6:c6:98:87:
         bf:44:24:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:45 2024 by rpki-client on console-fra.rpki-client.org