Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3e203786-ae72-349a-a591-f0b6cb7f2c90.roa
File:                     3e203786-ae72-349a-a591-f0b6cb7f2c90.roa (raw, json)
Hash identifier:          0mVOyR5mDSdvNM2Emj7aKb57bwPUxhdqRqg5SLvyzCg=
Subject key identifier:   3D:99:81:16:54:87:D3:48:4F:95:A5:8A:AB:B7:7E:F6:4E:65:B6:18
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178EBFC1F0A6E599AFE2080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3e203786-ae72-349a-a591-f0b6cb7f2c90.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:2910::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:eb:fc:1f:0a:6e:59:9a:fe:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=e8ebdc90-5484-4a6d-8348-9b59e6317e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:87:b9:f9:b8:aa:eb:8b:0d:c5:88:0c:7c:41:
                    82:44:84:d6:16:fe:f5:55:a7:9a:7a:51:d8:85:00:
                    56:df:6b:c8:c3:01:35:d3:91:6a:31:91:b7:9a:46:
                    a9:69:a4:02:93:e1:0d:dd:d1:85:65:e9:c7:1a:8f:
                    ec:8f:a7:8a:f9:22:96:e7:5e:d9:db:e2:c9:c0:a6:
                    38:21:dd:f8:0b:d0:4c:48:66:d2:3e:d6:06:64:f7:
                    c2:0e:34:e8:cd:f4:ca:ae:98:b5:52:ac:a5:8c:af:
                    5a:70:2b:6e:b8:4d:95:b8:b0:1f:d0:2f:9d:3e:c2:
                    c6:31:f7:a1:48:ba:df:ba:cc:ea:86:ab:fb:d6:84:
                    b1:e7:b9:a7:25:4a:69:85:22:1e:6a:e3:8f:06:24:
                    23:94:33:7d:9a:68:cd:7e:35:36:b2:61:f3:d1:86:
                    25:33:99:12:9d:d4:db:36:dd:39:8e:df:93:3c:6e:
                    04:7c:67:47:e6:46:4e:1c:c5:a2:70:c5:ad:ae:ad:
                    11:c2:88:31:3e:78:46:d7:4f:19:2c:11:cb:56:d9:
                    31:27:84:28:da:2e:b8:ed:e9:16:58:06:9e:6c:04:
                    98:55:87:ff:d4:79:20:e6:a9:ff:1e:b2:28:fb:5b:
                    09:13:9e:39:da:ba:ee:90:4c:8e:6d:c1:6e:e9:15:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:99:81:16:54:87:D3:48:4F:95:A5:8A:AB:B7:7E:F6:4E:65:B6:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3e203786-ae72-349a-a591-f0b6cb7f2c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2910::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f6:e1:ad:a7:79:ef:3e:a3:b5:06:b4:05:c1:0d:8e:d6:69:
         4e:fa:fa:fd:9b:16:c2:b1:98:e0:a8:a9:9a:2e:16:66:8d:04:
         c3:7c:f0:c7:39:dc:7c:ed:4f:ad:77:e3:9d:0f:67:6a:59:71:
         6f:c7:b0:c6:db:8f:f0:8e:e2:3f:ad:51:6c:27:51:28:b4:9d:
         42:fd:76:db:d6:5f:27:18:13:ea:ab:73:99:52:e2:fa:34:2d:
         80:96:b8:64:a4:8b:b7:b9:39:b1:11:cc:94:b3:ee:07:cb:88:
         cc:4a:c5:cf:5d:fe:2d:8e:aa:48:eb:42:70:b1:45:57:a9:58:
         e8:96:90:3a:4a:d3:8f:73:62:15:09:53:20:06:bc:8a:d3:85:
         db:da:ab:6a:62:6e:0c:38:28:47:bf:1c:78:15:69:93:2c:c9:
         de:bb:ae:e2:89:3f:d5:25:41:cd:df:fe:f3:77:12:07:c6:ca:
         12:41:5a:d1:05:c3:7c:3e:23:24:59:9c:50:e6:9a:7c:7d:17:
         a4:cc:c9:d1:fd:d7:86:ed:97:88:9a:c6:6f:3b:24:e6:77:e0:
         b4:ec:95:e8:90:23:44:eb:52:1b:d2:fe:87:3f:10:e5:11:a6:
         c4:81:2e:c8:e0:49:e0:fb:7a:09:78:31:3c:20:a2:63:9f:29:
         04:b2:ad:31
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXBeOv8HwpuWZr+IIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk
ZThlYmRjOTAtNTQ4NC00YTZkLTgzNDgtOWI1OWU2MzE3ZTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIe5+biq64sNxYgMfEGCRITWFv71VaeaelHY
hQBW32vIwwE105FqMZG3mkapaaQCk+EN3dGFZenHGo/sj6eK+SKW517Z2+LJwKY4
Id34C9BMSGbSPtYGZPfCDjTozfTKrpi1UqyljK9acCtuuE2VuLAf0C+dPsLGMfeh
SLrfuszqhqv71oSx57mnJUpphSIeauOPBiQjlDN9mmjNfjU2smHz0YYlM5kSndTb
Nt05jt+TPG4EfGdH5kZOHMWicMWtrq0RwogxPnhG108ZLBHLVtkxJ4Qo2i647ekW
WAaebASYVYf/1Hkg5qn/HrIo+1sJE5452rrukEyObcFu6RXjzwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD2ZgRZUh9NIT5Wliqu3fvZOZbYYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvM2UyMDM3ODYtYWU3Mi0z
NDlhLWE1OTEtZjBiNmNiN2YyYzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQCkQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGj24a2nee8+o7UGtAXBDY7WaU76+v2bFsKxmOCoqZouFmaNBMN8
8Mc53HztT613450PZ2pZcW/HsMbbj/CO4j+tUWwnUSi0nUL9dtvWXycYE+qrc5lS
4vo0LYCWuGSki7e5ObERzJSz7gfLiMxKxc9d/i2OqkjrQnCxRVepWOiWkDpK049z
YhUJUyAGvIrThdvaq2pibgw4KEe/HHgVaZMsyd67ruKJP9UlQc3f/vN3EgfGyhJB
WtEFw3w+IyRZnFDmmnx9F6TMydH914btl4iaxm87JOZ34LTsleiQI0TrUhvS/oc/
EOURpsSBLsjgSeD7egl4MTwgomOfKQSyrTE=
-----END CERTIFICATE-----
Generated at Mon May 6 23:14:07 2024 by rpki-client on console-fra.rpki-client.org