Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1a15442b-e182-368c-b12c-956e8154efba.roa
File:                     1a15442b-e182-368c-b12c-956e8154efba.roa (raw, json)
Hash identifier:          /43LaVj0sAYu3LoTfIqQgsGKp6sy5XV9CES5d6sJ8ZA=
Subject key identifier:   18:23:29:70:82:F7:12:F4:8D:AD:B3:40:C7:73:E3:80:1C:7A:76:99
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178D4A73BAEB6D81E721F60
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1a15442b-e182-368c-b12c-956e8154efba.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3960::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:d4:a7:3b:ae:b6:d8:1e:72:1f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=bd51a4b9-ff7e-45b0-a2b0-5453f1127115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:05:97:12:67:3f:91:e4:f1:a6:80:7e:ef:
                    aa:73:5d:5d:a4:80:d5:f7:c9:74:4a:54:d7:4c:28:
                    36:8a:74:e1:d5:99:2b:f5:95:67:65:9b:60:b3:06:
                    86:6b:8f:dd:d7:0f:a1:93:34:86:2d:ac:43:4e:7d:
                    24:31:07:94:94:5b:39:f1:8c:06:6d:cc:7a:7c:28:
                    bd:e6:c5:97:23:d0:2a:a8:ff:fd:30:23:31:76:cb:
                    1c:f3:73:21:9b:e0:6d:80:c7:7d:74:d9:03:4f:8d:
                    6b:8c:4a:e8:d5:28:ab:19:0a:9a:bc:19:d1:7e:66:
                    68:27:db:61:7d:b6:7b:e5:d9:16:47:43:d0:9b:d1:
                    1f:1e:c3:1b:a6:ab:28:04:b8:7a:52:8b:e8:fd:ec:
                    75:7c:5e:c0:8a:f8:b3:ff:26:d6:4e:3c:91:fc:f4:
                    ea:7c:6c:34:37:08:0c:f6:73:6e:8e:e8:84:94:8c:
                    a7:ac:6d:92:89:ae:1c:68:25:d4:ff:cf:64:a3:d0:
                    4a:4b:1e:f0:63:2c:59:22:0d:ff:f8:9b:cb:e3:8d:
                    46:a9:47:64:a6:4c:0c:73:8c:0f:f2:66:c9:3b:01:
                    9e:6b:94:02:72:3f:6f:71:11:9a:69:2a:39:5b:fd:
                    be:26:58:e1:77:f1:a2:79:72:9f:c9:a4:4b:5f:8c:
                    94:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:23:29:70:82:F7:12:F4:8D:AD:B3:40:C7:73:E3:80:1C:7A:76:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1a15442b-e182-368c-b12c-956e8154efba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3960::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:af:81:03:3d:8c:0d:8b:b1:76:58:be:ce:ea:a7:6f:85:90:
         7a:82:27:d8:ea:af:96:34:a7:a0:c5:f7:37:ce:31:45:01:77:
         b4:b7:e3:2c:8c:1a:a8:40:12:35:96:95:0b:4e:b2:a5:af:5d:
         21:e6:92:e0:9a:10:f9:b9:b8:fc:ac:b9:63:e5:a0:ca:e4:ee:
         7a:4c:5e:f7:62:26:46:50:cb:ff:c5:3d:1a:4b:90:e2:b4:54:
         e6:91:e5:5e:b3:83:90:39:b2:33:5d:ae:1a:c3:2f:4b:98:d1:
         3d:68:60:8d:95:53:22:44:ce:c4:ab:4d:df:10:60:a4:1e:44:
         ed:ce:5b:20:87:b8:4c:e8:22:3d:0d:a3:e8:07:76:4d:b9:63:
         6a:61:a0:4d:91:98:5d:c4:9e:ef:01:54:27:07:95:9e:63:5a:
         7f:d4:b3:40:82:17:70:b8:48:e0:3d:23:16:cd:30:d3:f4:1c:
         8e:fb:9a:34:19:5c:6e:9b:25:d8:27:c0:ac:a4:25:b0:6f:cd:
         71:13:82:b0:ce:09:b2:42:ce:de:50:63:bb:e2:5c:6e:3c:1a:
         2a:3c:99:02:1f:c2:c5:65:82:5c:07:07:44:60:b6:ce:d4:bc:
         a0:f1:34:e2:6e:55:2e:51:72:87:1f:1c:d4:92:19:5e:65:59:
         89:a5:ef:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:14:05 2024 by rpki-client on console-fra.rpki-client.org