Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2141635a-af5e-3f1b-b3d9-3e8b0f866e4f.roa
File:                     2141635a-af5e-3f1b-b3d9-3e8b0f866e4f.roa (raw, json)
Hash identifier:          VOFwDrZ/NwpE2oc0HetbUtVxKxQbcnmLtduBye+bzlc=
Subject key identifier:   D7:E8:6B:AE:68:26:09:4D:4B:5E:EC:8D:4F:D3:D6:8F:33:FF:11:A7
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780268E5A6C846651E1802840
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2141635a-af5e-3f1b-b3d9-3e8b0f866e4f.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:4820::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:8e:5a:6c:84:66:51:e1:80:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=0b82f216-8630-4ef5-a835-dcd8e7b40653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:58:05:a2:16:36:9b:db:3b:ba:30:9f:49:a7:
                    ee:50:cf:1d:fb:06:a5:62:ea:df:4b:54:25:d7:e7:
                    a7:c9:d2:6d:3d:34:51:0f:86:ae:96:5b:17:7d:71:
                    b4:14:d3:82:47:0f:3a:6a:1e:84:56:cd:f2:d2:4c:
                    43:cc:c1:35:de:9f:4e:17:9b:7f:ea:a2:79:5e:45:
                    be:18:9e:f5:51:f4:e4:5a:ef:1e:41:e5:d5:2e:c2:
                    9e:ac:36:dc:ad:ab:6c:38:c9:f3:cc:24:bd:85:1e:
                    20:6e:63:e4:ec:a0:ec:33:b3:6a:3d:fc:8b:d8:10:
                    ed:bf:5a:95:08:21:54:12:ac:5a:2c:58:3b:33:41:
                    a6:76:5b:e9:e7:8b:3d:12:43:b8:b4:fd:04:ab:4c:
                    eb:10:af:12:4b:93:9a:de:ae:dd:a7:3e:40:ac:41:
                    1a:9f:00:be:3e:9b:c1:13:5e:7f:3e:2f:1f:a1:cd:
                    57:1a:65:78:6b:15:fb:6c:f9:3a:54:55:f2:57:91:
                    15:9f:32:82:32:34:a9:55:79:b3:7a:7f:50:1a:15:
                    d1:34:3a:90:27:16:fc:02:fc:f2:a3:a8:46:b6:3e:
                    9d:5e:0f:af:ec:7e:f8:10:4c:35:c7:03:da:99:c4:
                    6c:7d:b0:b0:43:ae:b0:0f:23:2a:2c:3d:19:f7:eb:
                    ce:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E8:6B:AE:68:26:09:4D:4B:5E:EC:8D:4F:D3:D6:8F:33:FF:11:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2141635a-af5e-3f1b-b3d9-3e8b0f866e4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4820::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:17:08:b9:a8:6b:4d:27:de:d3:b4:5b:77:03:71:19:29:40:
         76:c7:81:68:c5:3a:f1:43:d3:4d:fc:9e:05:d4:f5:0a:43:cc:
         59:2d:c6:79:d4:9f:a0:d4:f1:5e:2d:18:7e:2e:b9:8d:25:21:
         eb:1c:4f:ea:84:02:34:16:90:ee:53:c3:71:14:44:cc:dc:bf:
         c4:b4:8c:3d:66:25:bf:0f:8e:26:ad:2b:f2:9a:bb:2b:09:81:
         d0:83:bf:93:ad:2d:a3:30:6a:c3:eb:87:c9:c1:79:90:43:2c:
         53:dd:85:b9:aa:75:46:1c:93:86:5b:23:d6:81:b9:50:da:cc:
         15:54:b4:ce:2c:fe:ab:53:14:47:6f:72:65:0c:69:b0:28:f7:
         17:d6:4c:70:9f:73:4b:d3:59:58:f1:15:5e:d6:a4:e8:db:75:
         b9:54:aa:48:0a:5e:50:08:f0:b7:2c:c3:29:90:ac:ea:0d:47:
         8e:df:87:ad:2b:b2:e3:15:22:d2:67:bf:99:6f:7b:ba:1c:dc:
         d2:16:d0:2a:92:f4:30:54:aa:73:55:6c:86:7d:2d:91:93:60:
         c7:68:5f:68:41:92:dd:2e:11:04:f9:10:d2:aa:bb:4d:1f:f6:
         3d:f2:ba:54:83:30:89:1c:19:7f:c5:5b:c7:19:5e:a2:43:07:
         b2:3f:df:d2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJo5abIRmUeGAKEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
MGI4MmYyMTYtODYzMC00ZWY1LWE4MzUtZGNkOGU3YjQwNjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1gFohY2m9s7ujCfSafuUM8d+walYurfS1Ql
1+enydJtPTRRD4aullsXfXG0FNOCRw86ah6EVs3y0kxDzME13p9OF5t/6qJ5XkW+
GJ71UfTkWu8eQeXVLsKerDbcratsOMnzzCS9hR4gbmPk7KDsM7NqPfyL2BDtv1qV
CCFUEqxaLFg7M0Gmdlvp54s9EkO4tP0Eq0zrEK8SS5Oa3q7dpz5ArEEanwC+PpvB
E15/Pi8foc1XGmV4axX7bPk6VFXyV5EVnzKCMjSpVXmzen9QGhXRNDqQJxb8Avzy
o6hGtj6dXg+v7H74EEw1xwPamcRsfbCwQ66wDyMqLD0Z9+vOfwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNfoa65oJglNS17sjU/T1o8z/xGnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjE0MTYzNWEtYWY1ZS0z
ZjFiLWIzZDktM2U4YjBmODY2ZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEgg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIsXCLmoa00n3tO0W3cDcRkpQHbHgWjFOvFD0038ngXU9QpDzFkt
xnnUn6DU8V4tGH4uuY0lIescT+qEAjQWkO5Tw3EURMzcv8S0jD1mJb8PjiatK/Ka
uysJgdCDv5OtLaMwasPrh8nBeZBDLFPdhbmqdUYck4ZbI9aBuVDazBVUtM4s/qtT
FEdvcmUMabAo9xfWTHCfc0vTWVjxFV7WpOjbdblUqkgKXlAI8LcswymQrOoNR47f
h60rsuMVItJnv5lve7oc3NIW0CqS9DBUqnNVbIZ9LZGTYMdoX2hBkt0uEQT5ENKq
u00f9j3yulSDMIkcGX/FW8cZXqJDB7I/39I=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:46 2024 by rpki-client on console-fra.rpki-client.org