Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/257b5d72-2332-3239-b687-d4eb0bbc5d80.roa
File:                     257b5d72-2332-3239-b687-d4eb0bbc5d80.roa (raw, json)
Hash identifier:          bfJN0P122wPzLWmlB1We12LEVDZ6e5ppyO/M5NW0K5o=
Subject key identifier:   9E:71:A4:E1:F7:56:CC:25:EC:63:8E:A7:B1:89:F2:52:63:5C:AE:4D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178D0D067C3ED0E9550CDF0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/257b5d72-2332-3239-b687-d4eb0bbc5d80.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3580::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:d0:d0:67:c3:ed:0e:95:50:cd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=dc38a79e-1308-45d6-9be9-ac4b96a5742e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:eb:24:ae:e2:27:d6:27:64:3b:09:b6:08:d6:
                    cf:68:fb:50:04:6b:c6:29:4d:db:0c:a6:c0:f4:70:
                    6d:f5:41:6c:d1:7d:2c:83:91:23:63:f2:7d:81:f9:
                    6a:b3:5d:ef:bb:13:55:45:f4:c0:2a:4f:fa:0d:62:
                    59:dd:8d:34:65:2f:fa:91:e4:25:e3:e4:38:be:de:
                    89:53:f9:b1:ac:89:e7:ab:c9:70:cd:f7:02:c3:60:
                    26:d5:9d:ca:ed:97:2e:4f:56:5b:5b:eb:e1:94:53:
                    f1:10:56:72:98:20:d4:a7:4a:b6:dc:72:3a:0b:f4:
                    8b:97:6a:6b:f7:70:05:57:f8:4f:1e:8a:4f:21:06:
                    20:3c:ce:3e:81:8d:64:78:1b:83:b1:4e:0c:0d:51:
                    52:d8:bd:d9:21:5c:3a:76:03:a6:fd:45:be:fb:24:
                    f5:5f:a4:d4:b2:d3:47:4c:d5:3c:3d:7f:51:f6:98:
                    e3:ad:55:ce:b5:23:a1:2d:32:a5:c5:27:57:77:9c:
                    94:8b:b8:6e:b5:bc:62:9e:39:39:74:dd:b5:dd:bc:
                    32:06:78:b6:58:67:6b:9a:65:e1:67:d9:36:67:c8:
                    73:85:64:72:69:1e:7d:67:be:22:82:f5:73:75:70:
                    60:38:12:14:48:8f:e0:2a:46:b6:0c:bc:44:4a:34:
                    c9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:71:A4:E1:F7:56:CC:25:EC:63:8E:A7:B1:89:F2:52:63:5C:AE:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/257b5d72-2332-3239-b687-d4eb0bbc5d80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3580::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:f3:10:4e:df:57:1d:64:22:df:cf:fc:cf:7b:71:96:73:8c:
         a1:dc:34:34:4b:b0:86:d8:fa:d3:c9:c2:9d:f6:96:23:06:52:
         bd:92:b2:b9:cd:be:fd:9c:9e:70:8a:1f:8e:e2:ab:09:5c:95:
         44:53:39:bf:75:ec:ff:20:51:db:b5:28:8d:a0:7b:cb:2d:c2:
         44:87:ef:56:e5:66:44:3f:75:68:5e:85:fd:6a:7b:88:04:09:
         f5:d0:59:95:24:77:13:84:72:20:1d:40:a7:5f:b1:8e:a1:b9:
         c7:7c:7d:2c:22:d6:29:c7:88:30:35:32:18:33:30:da:ea:16:
         06:62:1e:5a:04:b1:6c:84:c4:cd:37:8a:0e:e0:49:9c:c4:10:
         bc:a7:a7:75:1a:c9:ea:5a:b5:54:32:d2:aa:cd:d9:c3:44:ba:
         d2:d6:e4:52:b6:6c:16:48:4c:95:37:3e:3e:b2:73:86:c1:63:
         d0:96:d0:5c:2f:2c:b2:18:7d:5a:66:b5:0f:9d:d7:cf:1f:4d:
         fa:8d:f4:7d:2b:dc:36:d3:1a:c8:92:0b:a7:4f:23:7a:6a:8e:
         36:2f:17:f8:fd:b4:ef:2a:5d:0e:aa:20:6b:73:73:af:e0:ea:
         41:fd:b6:d4:c7:c4:6e:2b:ea:af:18:81:66:2b:b6:3c:3d:b9:
         6e:44:96:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:25:40 2024 by rpki-client on console-fra.rpki-client.org