Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2ee8a7b9-4e85-3578-910a-9e56ccaeba63.roa
File:                     2ee8a7b9-4e85-3578-910a-9e56ccaeba63.roa (raw, json)
Hash identifier:          jj4gKMjy6d6IFupWgrEFSSZPtw7V/dEpjLDNsKl9zwU=
Subject key identifier:   15:C8:22:63:3F:59:63:78:97:44:9F:22:F7:39:9F:47:76:FA:BD:AD
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C1790734CF03703723E02E68
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2ee8a7b9-4e85-3578-910a-9e56ccaeba63.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:2870::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:07:34:cf:03:70:37:23:e0:2e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=4a70778a-ff8b-4e8d-a2ec-3113c9a8e945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:98:ce:c1:a3:f2:c0:41:77:e2:8a:0f:be:50:
                    f6:d4:50:47:0e:dc:1f:b3:26:99:b0:5c:f3:59:ca:
                    38:00:2f:d0:21:6c:d3:0c:75:06:9c:61:23:83:19:
                    32:c5:ab:de:f4:c7:9f:30:5e:e5:47:94:41:83:f7:
                    5a:2d:55:ee:7f:1e:86:a1:7e:c7:f8:c1:8b:af:a0:
                    39:0e:86:23:f7:24:20:d1:b1:b6:60:05:0c:49:34:
                    44:f8:d4:02:5f:83:06:1f:9c:a8:43:4f:f8:2d:f8:
                    1a:20:15:91:18:e1:9b:b1:71:14:c4:8f:62:28:62:
                    a5:08:d9:a6:7f:e1:2f:75:c1:b7:0d:62:55:f6:b9:
                    86:9a:eb:5a:b2:13:3b:d9:9c:30:36:2b:98:28:c8:
                    ca:e5:5d:aa:8a:42:43:93:2e:7c:81:d4:2b:94:b2:
                    5e:65:ee:9b:a4:47:24:5a:0d:b7:d5:59:58:d6:9f:
                    36:35:6f:4c:10:8d:76:62:d4:aa:04:72:9b:ac:87:
                    13:50:ee:7b:81:e2:8d:5c:9a:b9:1e:94:2c:fb:ed:
                    35:8e:c4:4c:32:2c:31:dc:33:d5:94:d8:6c:eb:a2:
                    52:75:3b:7d:27:3f:07:93:22:4c:d6:e6:c2:e7:e7:
                    76:da:1d:0c:33:a5:fc:a5:1e:c0:95:e3:fe:fd:1e:
                    1b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C8:22:63:3F:59:63:78:97:44:9F:22:F7:39:9F:47:76:FA:BD:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2ee8a7b9-4e85-3578-910a-9e56ccaeba63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2870::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:40:e4:33:1b:c0:2d:93:6e:09:53:58:d7:2c:da:e1:1c:d0:
         f8:0c:ec:b3:42:15:39:b0:d5:2b:7e:6c:b7:63:8b:d4:bc:a3:
         fd:90:3e:fb:38:92:f9:d4:54:79:e8:92:ac:f2:1e:a4:21:a2:
         e0:38:18:05:92:63:d7:0c:45:81:85:71:67:c5:86:2d:2d:55:
         e9:76:21:38:0c:34:c7:4c:b0:a7:12:b9:b8:7f:0b:ef:f1:e0:
         b9:f9:d6:aa:27:7f:7a:06:d5:ef:be:13:fe:5e:78:4b:f5:0e:
         68:86:c5:fb:ce:26:d4:fd:98:70:46:e2:67:30:73:33:ed:e2:
         1e:ec:45:f6:0c:f3:55:af:76:7e:be:4f:9d:4b:54:08:fb:5b:
         39:02:fc:ac:62:a6:41:d9:d8:d5:81:ca:25:f3:a3:4f:6c:e8:
         65:72:a3:ca:a7:ab:9e:b3:0a:1f:c5:ac:95:5d:09:32:31:06:
         76:45:9d:71:97:f5:54:b0:27:16:06:0f:b0:f6:20:d4:fc:c1:
         a4:0d:e1:16:b3:e6:e0:ae:43:6a:9c:dc:f8:20:c4:90:77:c3:
         f6:e1:c2:7a:ff:a0:bf:d9:03:8c:ac:93:f8:68:e9:d7:87:d8:
         da:c5:9d:5b:32:89:19:51:89:51:a0:4f:02:e3:97:e6:aa:e8:
         cd:59:e7:6b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXBeQc0zwNwNyPgLmgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk
NGE3MDc3OGEtZmY4Yi00ZThkLWEyZWMtMzExM2M5YThlOTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZjOwaPywEF34ooPvlD21FBHDtwfsyaZsFzz
Wco4AC/QIWzTDHUGnGEjgxkyxave9MefMF7lR5RBg/daLVXufx6GoX7H+MGLr6A5
DoYj9yQg0bG2YAUMSTRE+NQCX4MGH5yoQ0/4LfgaIBWRGOGbsXEUxI9iKGKlCNmm
f+EvdcG3DWJV9rmGmutashM72ZwwNiuYKMjK5V2qikJDky58gdQrlLJeZe6bpEck
Wg231VlY1p82NW9MEI12YtSqBHKbrIcTUO57geKNXJq5HpQs++01jsRMMiwx3DPV
lNhs66JSdTt9Jz8HkyJM1ubC5+d22h0MM6X8pR7AleP+/R4b8wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBXIImM/WWN4l0SfIvc5n0d2+r2tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmVlOGE3YjktNGU4NS0z
NTc4LTkxMGEtOWU1NmNjYWViYTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQChw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABtA5DMbwC2TbglTWNcs2uEc0PgM7LNCFTmw1St+bLdji9S8o/2Q
Pvs4kvnUVHnokqzyHqQhouA4GAWSY9cMRYGFcWfFhi0tVel2ITgMNMdMsKcSubh/
C+/x4Ln51qonf3oG1e++E/5eeEv1DmiGxfvOJtT9mHBG4mcwczPt4h7sRfYM81Wv
dn6+T51LVAj7WzkC/KxipkHZ2NWByiXzo09s6GVyo8qnq56zCh/FrJVdCTIxBnZF
nXGX9VSwJxYGD7D2INT8waQN4Raz5uCuQ2qc3PggxJB3w/bhwnr/oL/ZA4ysk/ho
6deH2NrFnVsyiRlRiVGgTwLjl+aq6M1Z52s=
-----END CERTIFICATE-----
Generated at Tue May 7 15:23:19 2024 by rpki-client on console-fra.rpki-client.org