Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/17d412c6-b0f7-34bb-b150-87f437c573af.roa
File:                     17d412c6-b0f7-34bb-b150-87f437c573af.roa (raw, json)
Hash identifier:          wGWbvQCcA1VVlpdb6LyqQb3Ah3dNQ+VNHVTXsTfwr50=
Subject key identifier:   37:63:B8:86:83:0C:B6:7E:5E:50:10:93:04:0B:33:F3:64:B2:B7:57
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178D088E3AE32CE421B9E80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/17d412c6-b0f7-34bb-b150-87f437c573af.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:31c0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:d0:88:e3:ae:32:ce:42:1b:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=f7130bbc-0685-4663-8096-cca2d9694504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:92:38:9a:77:a6:e5:e6:0f:a6:4b:f6:ef:81:
                    94:d3:24:16:c1:b3:8a:e4:4a:f8:b5:20:53:18:59:
                    65:02:c1:d2:06:ce:3d:ce:31:ab:96:06:35:68:e0:
                    23:35:6c:32:13:5b:b6:ac:3b:1e:6a:27:5e:c2:e4:
                    c0:2a:96:95:5e:ef:ff:c3:92:e1:5a:68:44:00:4f:
                    b9:73:01:10:e2:9d:3a:b4:84:a7:a9:44:b8:c8:c7:
                    ca:c9:1d:ee:18:3d:12:b9:56:b9:d0:5f:7f:32:88:
                    89:12:da:73:10:4f:ae:e6:5f:62:a1:fe:d3:13:9c:
                    4d:db:13:e8:66:65:65:42:b1:b1:44:ef:bd:da:eb:
                    46:1b:59:82:2d:44:00:9a:5c:93:7d:f1:95:0a:d4:
                    16:c0:4f:e7:63:86:84:36:31:db:a7:7d:0a:0a:d3:
                    da:03:8c:b1:56:7f:c9:12:c0:b5:4d:9b:d7:c5:3f:
                    ca:24:a0:7a:09:61:19:45:30:6e:24:6c:bd:1b:3a:
                    50:bf:c4:9f:19:51:76:2f:15:f2:62:15:02:47:cf:
                    30:60:12:69:52:6a:3d:83:e0:69:5f:90:10:af:18:
                    1f:fe:bf:a3:3b:52:58:f6:5b:9e:bd:4d:63:e0:28:
                    38:cf:e2:ca:1c:c9:0b:c0:46:57:e7:c5:84:2b:f6:
                    9f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:63:B8:86:83:0C:B6:7E:5E:50:10:93:04:0B:33:F3:64:B2:B7:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/17d412c6-b0f7-34bb-b150-87f437c573af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:31c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:30:ef:da:2a:be:55:9c:34:78:d7:ca:05:a4:e8:39:da:e1:
         da:d6:96:23:3d:52:88:3a:f4:6e:da:89:61:d8:49:56:73:c0:
         f0:89:c2:ca:e0:24:f3:e7:77:db:ea:65:ab:b7:f1:db:3f:c3:
         78:65:b5:3c:4a:87:51:63:e4:b6:b0:66:02:a6:37:9b:ff:d3:
         a1:5f:9e:8a:5d:76:7f:9d:14:43:de:2e:8b:c4:95:a7:36:e7:
         24:d4:49:15:84:06:a8:8e:b0:3a:3f:d6:c9:57:13:4c:bf:c0:
         99:29:e6:ac:64:af:19:c8:8c:c2:cb:7c:5a:ca:ab:2c:9b:13:
         d2:c2:da:82:df:bf:81:9e:ea:70:dd:bf:ac:b1:08:aa:ad:e1:
         5f:d8:b7:24:53:c8:bc:44:a0:9c:a8:fd:ea:4c:b2:81:df:76:
         f4:fc:f1:bc:f5:e4:a6:38:64:b9:45:ae:55:c9:70:d9:36:e4:
         0d:f0:d0:41:22:4c:96:68:f5:62:fd:14:19:80:c4:05:01:22:
         01:16:69:dd:2c:40:20:40:c3:42:06:3b:db:9a:c6:4f:d5:19:
         71:e7:29:fd:38:70:be:ed:67:52:1d:01:bb:ef:4b:42:bd:53:
         98:6e:c6:54:4b:0b:de:ab:df:ce:ba:ee:7e:89:cf:dd:11:eb:
         2c:d5:d7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:56:45 2024 by rpki-client on console-ams.rpki-client.org