Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3a4a3439-41a2-3911-a5aa-8355af88db74.roa
File:                     3a4a3439-41a2-3911-a5aa-8355af88db74.roa (raw, json)
Hash identifier:          xbkmfwbWxBiK5z+oGa/XLpvCV+QN/vaVx8o8YJ5CaEc=
Subject key identifier:   96:D5:91:01:C5:C2:7B:C9:7B:7C:DF:40:5A:11:7B:C2:32:8C:39:44
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178F2EF4CD36619CEA2A900
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3a4a3439-41a2-3911-a5aa-8355af88db74.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:25c0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:f2:ef:4c:d3:66:19:ce:a2:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=67219081-f14c-499a-9023-c80828f5235f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:2b:82:dc:db:dd:42:b5:27:a7:de:b9:6c:
                    58:f0:2f:7d:a6:54:bb:98:b7:b0:22:34:57:c7:2d:
                    9b:8e:16:85:d0:28:d0:5e:92:4b:c8:18:12:6c:a9:
                    10:45:1c:2e:7f:51:44:5f:5b:e1:97:f6:2a:6e:4d:
                    1b:cf:3c:06:a1:39:24:20:52:a8:2f:72:ec:34:9d:
                    6f:a3:1a:f6:eb:f7:21:da:49:a0:0a:c5:57:ac:b5:
                    32:b0:9d:a3:86:5d:f6:e6:d9:6e:b1:c2:b0:12:42:
                    5c:2d:a3:03:07:c8:d4:6c:d3:21:e0:fc:c8:a7:c0:
                    a7:71:40:28:fb:aa:69:64:6d:3c:cd:91:d1:4b:ff:
                    18:05:bd:3d:b5:8c:21:37:0b:f6:4e:70:dd:c4:30:
                    85:0e:a0:1a:c0:bd:04:8d:29:0d:b5:05:91:38:b6:
                    fc:ee:1d:8a:a8:4a:1f:a9:f6:c4:2a:b1:be:2c:e0:
                    59:bd:dc:1d:5b:a2:90:06:b8:fc:f0:1e:0b:99:7a:
                    25:31:7d:35:85:fd:2e:1a:eb:96:7a:94:fc:8a:b1:
                    66:ae:69:e5:ba:df:ee:79:9f:84:92:e7:61:c0:e1:
                    96:59:24:63:7f:1d:f7:6d:60:b1:74:c9:00:e1:b4:
                    74:e6:05:58:98:ce:9f:2f:1a:e2:6f:49:b5:19:7a:
                    bf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D5:91:01:C5:C2:7B:C9:7B:7C:DF:40:5A:11:7B:C2:32:8C:39:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3a4a3439-41a2-3911-a5aa-8355af88db74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:25c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:99:ab:12:a6:b3:46:f6:91:8c:ae:dc:ad:11:b2:83:2d:49:
         bd:aa:47:1b:f8:9c:97:96:09:60:d3:55:3a:da:94:a8:84:a2:
         7e:9a:b9:f1:84:37:b1:13:1b:6d:cf:d2:16:5f:e6:aa:5f:84:
         3e:c1:a2:e3:ea:f8:0f:51:e8:8c:33:6d:0e:1a:39:3b:dc:ad:
         75:29:65:38:a6:54:46:e1:c5:f3:b0:bd:4b:4a:df:e5:ef:4b:
         87:f3:12:8a:64:e1:d5:89:46:7e:0e:06:19:8f:4a:d1:f1:e5:
         e2:f5:e1:db:45:0c:db:14:8e:6f:bb:bb:c2:93:f7:65:19:1a:
         35:2b:6b:63:b1:f0:d4:08:6d:2f:1c:e2:17:7b:30:0d:95:38:
         a5:d8:29:18:3d:b8:40:03:71:4e:65:4a:06:24:97:ab:47:a8:
         27:5a:7c:70:a3:03:71:2b:9f:37:bf:a6:80:4f:ea:e3:ae:ee:
         da:a5:14:88:11:5c:a8:4f:b8:7d:f4:8d:9a:da:b2:17:fe:90:
         b9:65:b8:2d:27:36:63:72:32:cc:17:6f:46:cc:f7:98:b1:52:
         0b:41:f9:37:36:2d:89:2f:ec:e2:2a:c9:de:21:0d:9e:68:c2:
         af:6f:00:b7:92:6a:94:90:46:b9:16:92:cd:96:44:65:ae:83:
         62:bd:0d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:17:07 2024 by rpki-client on console-ams.rpki-client.org