Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/288059d2-bedc-3772-82f9-f4d3a7e6e17a.roa
File:                     288059d2-bedc-3772-82f9-f4d3a7e6e17a.roa (raw, json)
Hash identifier:          KkttqYjxe71+DCX9+HobbXj90oKIUgPJYicklqxOG/M=
Subject key identifier:   AC:30:12:4F:54:DF:FB:19:A7:09:BE:73:D9:89:97:CE:03:3C:0A:8D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178EE35E47A11812F610F80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/288059d2-bedc-3772-82f9-f4d3a7e6e17a.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3d50::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:ee:35:e4:7a:11:81:2f:61:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=7170664a-5bc3-47c7-a7b4-9b90bdd8296a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9b:94:45:56:73:82:b6:39:37:95:70:44:f2:
                    98:e3:1c:01:b0:ae:75:f5:ac:38:24:7b:1b:a5:d0:
                    a6:21:96:3f:86:f8:d6:8a:c8:85:3e:81:c9:18:58:
                    56:9c:e1:86:3a:32:19:71:3c:f4:54:1f:7f:33:b1:
                    32:9a:d0:2d:f2:27:82:84:d2:d7:c6:f3:e3:90:0c:
                    d8:e0:01:2e:4b:ef:a0:64:ed:fe:5d:ca:1d:c5:d2:
                    b3:e6:49:c7:80:b3:53:16:bf:13:81:0a:69:77:9f:
                    91:b1:cd:f6:d9:5c:59:f8:cc:d5:d4:ca:f9:af:5f:
                    fe:18:9f:f9:0c:d0:5c:40:72:73:30:ad:12:66:28:
                    c6:5d:b4:0c:e3:e6:02:88:7c:66:b1:42:0a:2c:ed:
                    4e:c2:9c:d5:81:ce:25:ee:0a:f7:1d:d0:2b:13:f9:
                    a7:7a:aa:60:75:81:61:79:2a:83:17:03:7e:0a:db:
                    4f:bb:9f:0d:86:e8:30:d6:c0:f6:96:e6:fd:cc:9f:
                    5a:fd:39:30:60:98:e3:50:9e:b4:9d:09:6d:43:51:
                    df:d8:c2:0d:cf:10:0c:2f:b4:07:35:8b:2d:7a:cd:
                    cc:09:cd:cb:f0:d9:71:64:1c:d9:95:79:31:d4:77:
                    b8:82:e5:33:d5:eb:59:82:e1:80:2f:d8:6b:c2:61:
                    32:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:30:12:4F:54:DF:FB:19:A7:09:BE:73:D9:89:97:CE:03:3C:0A:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/288059d2-bedc-3772-82f9-f4d3a7e6e17a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3d50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:10:3c:80:36:d2:9c:22:13:87:86:bb:0b:58:7b:cc:71:20:
         b1:29:dc:02:30:a3:27:99:bb:9a:aa:77:c8:96:90:59:28:6e:
         0b:c2:23:7d:e2:2f:c5:c1:ea:05:28:10:a8:ee:9e:e5:ac:59:
         63:45:5b:25:54:a9:56:fa:c9:e4:40:da:24:88:5b:7c:22:50:
         b9:92:d3:e4:33:ff:b1:d4:a1:58:08:7d:d8:d5:49:1f:e9:45:
         b5:1e:97:55:0e:c7:6c:66:d6:2f:e8:62:48:64:17:f4:93:5d:
         25:42:4e:24:e0:86:f8:34:a2:f7:04:5a:9e:36:22:75:2e:72:
         65:4c:65:3f:6a:ac:76:3c:50:d7:5a:b5:a7:a1:44:e6:fb:0a:
         7a:91:23:10:b2:1b:55:88:c8:81:72:98:73:2d:e5:c7:c4:e3:
         37:df:9d:fd:cf:07:bf:4f:46:79:f8:5d:32:d5:15:d6:cd:39:
         1e:6e:97:1e:c3:47:7a:c0:85:43:1b:21:96:8d:92:5d:a2:32:
         f9:b7:88:63:5f:ff:d3:ee:2f:3b:03:d8:2e:a4:02:67:45:d6:
         3c:60:f3:f7:a1:f1:11:c0:66:4e:3a:c7:34:c2:23:c8:9c:57:
         b8:34:81:25:a5:3c:94:c7:99:62:e3:40:d1:e6:5a:3f:ef:a0:
         f3:fe:c8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:32:40 2024 by rpki-client on console-fra.rpki-client.org