Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3be852f7-6d11-3485-90ad-4d1309fe6efe.roa
File:                     3be852f7-6d11-3485-90ad-4d1309fe6efe.roa (raw, json)
Hash identifier:          YgVatzOQHrQHXnhIO8Zh6XZc0h9tNq8SIor2Iic+8N0=
Subject key identifier:   E0:B0:99:C0:9D:13:19:55:6D:3D:84:1A:A8:96:3D:91:F6:5D:F6:49
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C17900B14F47D9207815BDF0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3be852f7-6d11-3485-90ad-4d1309fe6efe.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:32b0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:00:b1:4f:47:d9:20:78:15:bd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=f7094598-f78d-4443-8ef1-d6c0529ac151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:25:14:68:dc:4d:6a:bb:59:c9:c6:29:1c:41:
                    89:b4:5f:e4:19:73:ad:ce:6a:af:ab:db:24:2f:28:
                    80:74:ef:7d:56:d7:c6:4b:ff:e8:64:f4:90:fd:1a:
                    d6:72:eb:d2:dc:b2:da:ad:a3:e8:12:6e:3a:dd:90:
                    22:b5:61:dd:64:8a:fe:f6:ef:2e:59:46:59:03:8d:
                    77:9f:18:9e:83:52:ef:08:4e:86:e8:37:1a:cc:77:
                    4f:fc:d5:e4:66:41:0f:7a:38:8d:a6:14:0b:7a:53:
                    a5:65:af:c2:a3:20:2e:2f:e6:c1:4a:49:c2:ff:c7:
                    00:34:0d:3d:f3:15:34:33:86:5c:d1:04:fa:ef:de:
                    48:60:15:31:48:b5:a7:bb:ba:d4:b5:1c:28:c8:8b:
                    f9:e9:c0:dd:2b:83:1a:ef:e6:d3:3c:2e:86:73:e7:
                    d3:ef:b5:21:a2:fb:79:5a:4b:8e:45:3e:00:43:3c:
                    5d:71:1e:22:53:8a:4c:34:fb:b5:38:c9:4b:b4:b7:
                    ef:1b:01:ed:a9:2b:b8:0b:f5:78:ff:9c:02:be:4f:
                    8a:d7:df:5c:ed:e0:d3:e3:55:dc:32:e5:20:3e:6c:
                    0c:d9:fe:1b:52:9b:37:1f:c1:25:4f:d6:ad:08:42:
                    5f:d8:47:82:79:88:91:c3:79:69:92:f3:7b:7d:f0:
                    a1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B0:99:C0:9D:13:19:55:6D:3D:84:1A:A8:96:3D:91:F6:5D:F6:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3be852f7-6d11-3485-90ad-4d1309fe6efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:32b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:63:bf:3d:83:9a:8d:a0:13:59:ee:7d:bc:c7:7d:3f:ad:2f:
         29:b6:2c:b2:bf:42:af:37:44:3f:93:f8:18:a9:80:c6:a5:bc:
         6d:fc:e3:60:07:f3:9b:81:cd:0f:df:5c:8b:f4:e8:60:92:80:
         0b:8b:36:e4:f1:d5:01:69:6b:4e:45:46:ad:44:9f:06:0c:2e:
         cb:39:00:34:8c:b8:16:27:e9:59:1e:6f:a9:d0:f2:31:ca:96:
         1c:9d:a1:01:ac:78:0e:72:d6:a3:3e:e9:ef:f8:6f:a6:e8:b8:
         70:21:94:9f:cd:c2:45:9a:2b:94:b5:69:cf:bc:df:eb:d6:36:
         10:d7:03:01:6a:b7:1a:ef:da:64:ef:b2:f7:51:49:80:ef:f5:
         d3:7b:17:c3:1d:48:3b:78:17:bf:ed:ed:ed:f4:ab:82:d7:aa:
         bb:f9:3d:14:0e:d3:2c:b1:ef:28:77:b3:a1:b9:7d:22:c9:cd:
         0e:b6:10:0d:66:be:de:0d:46:1c:66:b5:28:50:90:ef:41:94:
         48:c3:8b:eb:ca:b4:f2:f7:8d:14:88:57:9f:4e:69:67:a7:c8:
         64:c5:6f:b7:a3:1f:33:c6:10:be:03:d9:10:44:5e:06:9c:2f:
         7a:d6:23:f6:a8:9b:10:db:a8:90:93:3f:73:8e:2c:ee:19:f3:
         f0:04:b1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:23:20 2024 by rpki-client on console-fra.rpki-client.org