Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1240db4f-bd75-3af2-8e27-5b63ba7e0a61.roa
File:                     1240db4f-bd75-3af2-8e27-5b63ba7e0a61.roa (raw, json)
Hash identifier:          aP4bnQ0SFWc3L4DqYxGPsjF29fh69lz9wHB3jvUA6cc=
Subject key identifier:   B6:4F:38:58:0D:17:37:56:6F:14:94:48:7F:2C:FF:77:24:90:C1:AC
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178DD3B49BE154D782B7D80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1240db4f-bd75-3af2-8e27-5b63ba7e0a61.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:39b0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:dd:3b:49:be:15:4d:78:2b:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=6bd5f384-d1d6-4e68-a471-dc0928cd7fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:31:71:25:3c:72:c8:6f:e5:31:41:b2:fa:
                    13:75:53:92:1b:42:a2:65:60:29:72:6b:ec:ef:19:
                    7d:27:be:63:21:01:31:16:e3:1e:40:8b:74:dc:8d:
                    4c:96:e7:3b:86:58:78:64:40:ee:a2:63:ea:ce:e3:
                    b2:90:58:37:09:f5:6e:e8:36:6a:c0:55:1e:2b:0e:
                    c7:c8:2f:56:75:33:d5:ce:05:e9:9c:60:fb:7c:ea:
                    14:e5:2a:5f:bd:e6:db:08:94:eb:cd:92:0a:1c:03:
                    a8:4f:a2:7a:9d:13:6c:69:ce:da:8f:a5:9a:2a:6e:
                    78:78:96:67:fa:3c:eb:7d:34:5f:ee:14:24:e6:37:
                    ca:a9:81:85:56:bb:97:6c:6e:09:b3:a3:d7:c0:d8:
                    20:ec:e7:f3:f6:b5:7c:85:88:ef:48:4a:a0:d4:f2:
                    41:8e:8e:eb:af:18:be:cb:46:b2:85:80:d7:a4:fc:
                    d9:69:da:e7:3a:f5:65:ae:dc:49:99:c2:dd:c1:92:
                    23:ec:2c:d6:dd:ae:1a:a5:25:df:5e:7e:ac:29:d7:
                    59:2f:f5:f3:19:a0:e3:cb:c4:bf:73:ab:7b:37:61:
                    9e:d2:01:5a:9c:73:21:df:29:9d:00:71:f2:9d:58:
                    11:c1:dd:a6:c7:25:01:01:da:80:3b:2d:22:07:2a:
                    b5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4F:38:58:0D:17:37:56:6F:14:94:48:7F:2C:FF:77:24:90:C1:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1240db4f-bd75-3af2-8e27-5b63ba7e0a61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:39b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:5d:e6:c9:8a:14:5e:82:a0:2f:97:07:c2:01:dc:01:09:4b:
         28:39:23:ba:f0:36:1e:82:09:ab:05:a5:86:d9:98:c3:73:7c:
         9b:48:07:db:8b:0b:ac:c7:69:83:2d:a9:5f:e9:3b:ba:b2:00:
         93:b8:f9:55:98:cd:c4:57:ea:e4:fe:2e:81:28:2c:a7:b1:0f:
         40:d7:11:f3:ac:01:06:88:19:46:40:f1:c4:67:ea:7c:82:6c:
         15:ca:81:bd:ba:fe:4b:b3:99:d3:58:67:5e:da:53:f9:4c:23:
         7c:98:36:ac:2e:cf:08:87:9a:4c:ce:1f:e4:4c:40:7e:ef:05:
         56:2a:75:a4:fa:7e:95:39:0f:d0:26:66:59:47:93:52:c0:b3:
         4f:c7:0d:67:fb:99:60:56:24:56:2a:f2:40:79:19:b3:7b:42:
         8d:04:76:c4:bf:f0:12:b6:db:e8:2b:d7:0b:7f:3b:a9:f1:7d:
         6e:00:ac:6d:a3:d1:bf:cc:68:06:e3:18:95:c6:cb:2b:a2:0a:
         a6:c6:8e:c5:82:ab:f2:bb:7c:cf:2c:05:c0:4d:97:66:86:60:
         90:79:56:e1:00:21:b8:72:c2:30:38:6a:41:7d:8e:f1:32:25:
         62:4b:77:3f:0e:c2:c0:38:d5:d4:f4:77:a8:47:a4:bc:81:0e:
         34:53:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:56:45 2024 by rpki-client on console-ams.rpki-client.org