Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/26248d76-2e5c-3f62-bcf1-5fb466deadee.roa
File:                     26248d76-2e5c-3f62-bcf1-5fb466deadee.roa (raw, json)
Hash identifier:          xVJpCKEf4lQKQG2ATvdD8bW+JAra9aPk5K6N3fmh3nU=
Subject key identifier:   FB:48:70:41:AB:22:67:EC:B6:E1:09:07:95:21:3C:7A:23:2A:A2:EF
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178FB82D29DE312F12B7D80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/26248d76-2e5c-3f62-bcf1-5fb466deadee.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:38d0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:fb:82:d2:9d:e3:12:f1:2b:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=017963a3-9fa6-4885-8d31-06a6e0b505dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e7:a2:75:c9:c7:b9:f5:fc:a3:ef:7e:b9:5b:
                    d9:ff:dd:0f:ca:de:8e:a4:7a:78:33:2a:ab:f8:18:
                    3c:a7:b6:78:fb:5d:4a:51:8a:02:3d:d7:41:4e:09:
                    87:5a:c7:62:c6:77:cb:6e:b9:0c:3c:87:16:30:a2:
                    0d:b7:e2:d1:e5:d7:73:8d:87:be:a7:2c:bb:b2:0a:
                    bf:cf:e6:86:f5:a8:3a:53:4a:9b:f1:2d:c6:cd:01:
                    a4:84:73:d2:82:b5:41:67:02:21:6c:63:08:ea:9c:
                    cb:26:91:e4:42:59:a4:c8:c3:37:bb:08:04:5a:87:
                    ef:ad:03:1c:a1:e8:76:7a:43:88:39:41:b4:9c:50:
                    1a:18:47:4f:65:89:04:c4:1e:b1:77:d9:da:11:e0:
                    df:86:5c:4b:46:35:6f:39:00:17:ac:ff:4a:9c:eb:
                    0f:f6:76:39:71:53:be:3d:83:58:f5:b1:6f:f0:f9:
                    72:4c:66:ec:ee:66:bd:e7:64:13:6c:e2:97:b0:6c:
                    22:5d:ca:19:3b:69:ef:05:43:2a:9b:40:84:d1:3b:
                    3e:16:ad:d6:af:d2:02:55:39:21:7b:e4:74:c1:58:
                    3e:0e:ff:6a:ba:02:26:87:7e:ce:76:4e:1c:81:69:
                    b5:85:09:67:d0:49:41:01:19:01:19:d5:5e:71:20:
                    39:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:48:70:41:AB:22:67:EC:B6:E1:09:07:95:21:3C:7A:23:2A:A2:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/26248d76-2e5c-3f62-bcf1-5fb466deadee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:38d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:45:9c:c7:66:9c:a8:9e:05:fd:4e:57:8a:a7:05:d3:90:37:
         42:3f:38:5c:fc:ac:57:32:61:a3:95:ce:f7:9b:e3:13:2a:6e:
         e9:5e:66:98:94:f3:44:60:b6:e5:34:f1:38:f0:21:6b:86:b5:
         69:dd:b1:64:b3:af:3b:05:5c:e5:07:4c:6b:c2:71:b8:5a:57:
         fc:aa:18:c4:4e:1c:7f:ba:83:81:13:91:ec:ac:a5:d0:7b:4e:
         87:5d:47:5a:42:a5:23:4d:6d:b9:2f:e2:30:1b:f2:ea:bb:f8:
         89:84:34:f8:69:84:3b:10:b4:a6:f8:c4:fb:3f:2a:85:78:fd:
         79:77:65:f9:27:92:8f:13:77:19:87:23:1c:19:66:6e:ea:79:
         aa:e1:6b:df:0d:5d:7f:aa:9e:d4:bb:de:53:aa:73:1c:ba:bd:
         1f:85:ef:9c:1d:cd:3b:07:bb:06:da:13:d9:2f:b2:92:da:60:
         7a:36:6d:49:df:3a:b3:c1:91:a6:d8:12:63:72:f9:dd:53:f5:
         27:2e:74:cf:c7:32:1b:51:fd:9a:82:a8:1f:19:a7:12:77:19:
         77:97:f7:d1:38:15:e6:17:c9:91:57:63:a2:87:a7:6c:71:50:
         f0:d4:b1:e5:79:45:1b:1a:90:3d:fb:70:56:ad:c9:70:1c:11:
         ca:1b:5b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:14:06 2024 by rpki-client on console-fra.rpki-client.org