Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/38b3e8c7-a8fd-34c2-82f5-947303d04a71.roa
File:                     38b3e8c7-a8fd-34c2-82f5-947303d04a71.roa (raw, json)
Hash identifier:          MoF6lxgTBVXzIFUdK81O/P8Q6yrPjAlVmmZgTjCGdDU=
Subject key identifier:   83:30:8C:EF:F2:AE:84:85:A2:0D:16:8B:54:93:57:C8:7B:54:08:F3
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178D0B89010637181942BC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/38b3e8c7-a8fd-34c2-82f5-947303d04a71.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:2bf0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:d0:b8:90:10:63:71:81:94:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=66f20be8-4fe4-4222-8179-26f15edf8976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:05:25:e3:42:43:72:f6:67:4f:ae:71:13:cd:
                    a4:51:d2:95:dc:5d:6b:03:87:4c:4e:65:e6:ee:ef:
                    56:17:70:33:b7:37:11:e6:7e:27:16:bd:ee:c4:15:
                    90:6d:cd:ec:1a:fd:71:ee:81:7b:1b:19:c1:25:2d:
                    77:3e:34:25:e0:f7:07:5d:09:58:18:01:d2:02:e1:
                    97:cb:2a:4b:ea:d3:b5:be:45:7f:5d:04:45:02:b7:
                    84:d0:68:03:73:57:d8:92:2b:2a:bb:84:cd:22:e7:
                    bb:74:29:a7:6a:98:90:db:56:ef:4b:23:56:be:9e:
                    d7:42:29:79:7a:95:2d:78:d0:92:51:b3:b1:6c:fa:
                    82:3e:08:a7:2c:91:67:a8:19:24:87:a6:4e:6f:5e:
                    99:d7:d4:d6:7b:1c:b1:73:9e:53:36:28:80:6b:58:
                    6a:9e:49:5e:e0:eb:7c:83:49:6b:2c:f3:ba:38:8a:
                    e9:47:7d:d8:12:17:1a:97:b9:88:bb:11:46:e3:0a:
                    85:ab:93:af:6b:c2:80:22:62:df:34:ee:f6:42:d2:
                    88:4a:86:4e:d3:fd:b9:2a:dc:76:a7:79:8b:c9:e5:
                    db:13:f3:0f:b1:37:0c:ef:06:93:bf:ee:3f:6d:b5:
                    6e:d6:e9:6f:d5:3a:5e:be:c1:92:5b:dd:33:a9:28:
                    39:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:30:8C:EF:F2:AE:84:85:A2:0D:16:8B:54:93:57:C8:7B:54:08:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/38b3e8c7-a8fd-34c2-82f5-947303d04a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2bf0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:a5:6d:1f:93:ab:d0:0a:fd:4e:e9:9c:dc:ca:00:27:d1:2f:
         46:02:ca:16:dc:41:b4:48:23:76:f3:bb:18:91:ba:4f:a5:50:
         68:56:7c:34:2e:4c:46:de:06:05:58:22:39:eb:06:12:c1:49:
         ed:53:70:ee:75:bd:2e:87:43:b0:d1:c4:a7:b4:c3:af:3a:65:
         d4:7d:26:19:ad:6c:33:80:8b:9b:0b:9d:8c:21:d1:ab:b6:9a:
         48:ef:bc:0c:98:ec:5c:aa:14:af:4c:e1:6a:20:9e:6d:5d:da:
         42:2d:e2:16:0b:87:da:92:eb:3b:71:43:77:af:2b:a4:6a:03:
         14:6e:c7:1d:4e:9f:be:22:f2:a4:f5:db:46:06:48:e6:07:37:
         59:c9:ef:c9:52:e7:9a:16:4f:1b:8c:fb:1b:44:c5:57:fe:df:
         2c:97:1c:c0:6d:ef:f2:12:d2:09:b1:2d:3e:cb:0e:a2:35:9d:
         ba:20:d1:97:42:4c:83:a2:f3:c1:51:66:bd:59:7c:ab:8d:f2:
         91:8f:84:0b:0c:03:f6:e1:a3:9f:14:e3:08:f8:a1:8a:2b:27:
         b9:93:b7:61:25:ff:dd:6c:03:fe:45:25:b7:ba:06:5d:4b:c7:
         7d:46:62:ef:de:cd:3a:c0:20:1b:9c:31:da:f4:1d:e6:c8:84:
         db:7e:61:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:32:40 2024 by rpki-client on console-fra.rpki-client.org