Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1b3e61d9-cf06-3186-a753-409742460763.roa
File:                     1b3e61d9-cf06-3186-a753-409742460763.roa (raw, json)
Hash identifier:          4YKP2kBUZOrlqUxdC4mrbKDR/9z8ErgMaAqu8dgIK2I=
Subject key identifier:   40:03:2F:E9:0C:77:BF:A9:65:18:12:7D:5B:F7:FB:5E:B0:6A:D5:A6
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178F3C451B345E2CE8B5D7C
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1b3e61d9-cf06-3186-a753-409742460763.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:f3:c4:51:b3:45:e2:ce:8b:5d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=f4c57ecf-9a4d-4665-a23d-2cfec24dbc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:4b:49:16:a0:f6:f6:dc:d8:7a:7e:9b:e3:
                    6c:a8:06:18:6a:9f:35:42:a4:ba:79:1b:b2:45:1b:
                    09:c2:99:43:b2:f2:eb:f1:ae:48:94:83:df:72:52:
                    2e:a8:a7:8b:22:9c:d8:a1:e4:85:68:ac:8d:05:36:
                    1d:4d:44:64:4e:76:97:b0:b4:d6:e4:77:bb:2e:a1:
                    09:69:62:b4:36:d1:8c:ea:49:24:a2:4e:c6:69:53:
                    d8:74:59:a6:44:c3:b0:a9:61:71:1f:e0:e0:f1:66:
                    68:4f:94:e6:a0:b7:15:40:ca:19:e1:74:dd:90:22:
                    9c:7c:07:ee:dc:74:97:76:41:0d:3d:52:05:aa:4e:
                    e8:a2:f9:db:a4:c5:f9:9e:3a:37:f3:bd:60:72:67:
                    b5:ce:a7:82:cb:6f:78:a5:2f:11:9a:e3:8b:5a:00:
                    9c:c1:2b:52:97:4f:3b:fc:8b:7b:15:f9:0b:58:4f:
                    12:26:2f:de:a2:4e:4a:da:12:76:82:f5:d8:82:0d:
                    0a:1f:98:d7:cc:86:2c:12:26:6d:74:88:44:f1:e9:
                    e9:a7:71:e7:ae:e0:b8:51:e2:24:ce:f2:a1:43:e1:
                    49:95:b2:e8:1c:1a:ee:4e:63:ab:ed:08:91:b8:38:
                    a1:de:9b:c7:70:3b:9d:a4:06:b8:c4:46:d8:e0:c1:
                    bb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:03:2F:E9:0C:77:BF:A9:65:18:12:7D:5B:F7:FB:5E:B0:6A:D5:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1b3e61d9-cf06-3186-a753-409742460763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:6d:41:cc:9c:d8:c4:78:32:e9:7f:1a:dd:24:fa:52:e0:bb:
         cc:fe:45:01:00:0e:ee:5c:23:5a:15:13:3a:81:19:be:9e:af:
         7c:e9:3e:ec:49:91:c2:be:2b:89:e4:14:4a:b2:39:41:fd:ae:
         6c:11:e2:81:70:5e:86:54:fc:ba:d7:f3:4a:2a:b5:16:11:d8:
         c6:15:a7:20:79:2f:ff:df:94:c5:c0:a7:ee:37:a9:68:e2:02:
         41:df:51:90:84:11:c7:7c:15:a3:18:66:9d:63:73:af:28:b5:
         70:c6:88:27:c9:66:d1:f6:b9:d1:d9:35:0c:4c:1e:27:28:5a:
         12:a7:8d:f5:a0:cd:1c:ce:58:bb:d9:9d:c2:57:0d:84:82:ed:
         34:01:ab:77:ef:ce:ea:ba:68:0f:5b:9d:07:06:ab:4c:be:ee:
         4d:65:fb:3e:73:41:56:81:e7:68:6f:de:74:5f:42:5f:2d:76:
         ad:07:60:31:7a:fa:7c:76:cb:db:7c:d1:ae:31:d4:08:26:81:
         b0:a7:ea:aa:12:c2:33:e6:cc:be:6a:94:45:61:f9:e0:d7:d5:
         16:38:cf:66:e9:4b:d8:18:c5:8d:4f:d3:b8:9a:64:fa:5f:63:
         e3:5c:85:1b:4c:c9:4c:ce:21:8a:1e:02:fd:0f:3b:eb:e5:1d:
         bc:7c:c4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:14:05 2024 by rpki-client on console-fra.rpki-client.org