Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40d11d89-9022-3c13-ab02-4d286fb7a11d.roa
File:                     40d11d89-9022-3c13-ab02-4d286fb7a11d.roa (raw, json)
Hash identifier:          BvE1GPO/OgQT+FIBZX/MzObo85aF1/kqjweoznJI3nc=
Subject key identifier:   8F:29:AB:B7:42:19:85:48:06:36:E9:BB:77:B8:9C:04:DB:DC:30:0D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178D690354F8D04F37ECCA0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40d11d89-9022-3c13-ab02-4d286fb7a11d.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:5840::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:d6:90:35:4f:8d:04:f3:7e:cc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=87ba2cef-cfb4-4dd7-8d9e-cfa457441edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5b:60:0e:13:e6:8b:e8:df:39:16:e2:38:6a:
                    b1:54:28:7e:3a:c8:c9:ab:16:fc:91:ba:c7:2e:82:
                    21:53:21:2f:15:d7:73:0c:65:94:e6:a9:78:2c:3b:
                    e5:a6:09:a5:43:3d:94:cf:db:bb:d3:64:14:2d:9d:
                    19:38:60:62:e8:27:35:f3:5f:2a:31:02:e9:69:b7:
                    98:d0:f0:fd:b5:ad:05:0f:25:59:2a:1f:07:95:0c:
                    3b:4b:7e:f7:92:71:62:ba:eb:00:85:ea:35:aa:e0:
                    29:56:60:38:53:dc:43:2d:c2:de:83:53:55:81:86:
                    5c:7e:d3:c7:f0:d4:fb:50:37:95:e8:e5:ba:d8:db:
                    0c:36:79:bb:7a:ff:83:d0:c6:a5:26:52:80:e4:33:
                    40:7d:4f:67:33:40:11:1f:8a:64:89:0f:99:94:bf:
                    d5:71:6f:54:1e:96:5f:13:e8:af:db:05:d6:8d:02:
                    25:e9:3c:a0:9c:09:5e:bd:38:62:b5:9b:a7:1f:6d:
                    b5:44:23:98:bb:2f:7f:a9:61:87:22:e3:9c:55:95:
                    28:0a:09:7f:67:7b:21:0f:1c:d3:7e:fb:40:ed:93:
                    ef:d6:4f:4a:51:73:1d:78:e1:35:e7:19:be:57:47:
                    27:2d:5c:55:c4:61:79:a7:34:d1:cf:81:d0:da:f3:
                    ac:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:29:AB:B7:42:19:85:48:06:36:E9:BB:77:B8:9C:04:DB:DC:30:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40d11d89-9022-3c13-ab02-4d286fb7a11d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5840::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9a:83:5c:cc:ee:a7:d0:14:cc:37:71:5f:06:24:08:66:a6:
         c9:6d:b3:a4:db:12:6e:53:48:d0:64:c9:7e:8d:b9:e2:89:79:
         33:81:e9:06:a0:90:0a:ad:37:9f:89:e1:63:0e:4e:50:85:f1:
         8a:d4:e8:13:ee:b6:f2:9f:cf:95:2b:28:52:12:9f:91:53:46:
         c9:77:4f:43:59:dd:d8:61:1a:2a:38:2f:b3:c3:d8:ac:76:5c:
         8d:87:23:33:64:50:be:38:8d:57:7c:25:68:4f:2a:8a:fa:34:
         c0:6c:31:21:f2:dd:9d:f6:91:18:17:43:a4:b1:a1:e3:d8:3e:
         8f:33:8f:a3:8f:d3:a5:38:64:63:2f:2f:4a:7b:c0:dc:a7:eb:
         68:63:e4:0f:db:dc:a8:eb:b7:16:f8:04:bc:d4:02:a7:d3:b5:
         2f:f8:2d:80:fd:4d:86:9e:44:d0:c3:ab:aa:dd:ac:4c:4f:38:
         e3:b5:aa:21:42:c0:37:19:7e:ee:45:8a:d3:49:3e:ee:cd:12:
         d6:c5:1c:e2:58:09:82:19:3e:7a:0a:bb:9b:6a:7b:47:9d:4b:
         48:45:5e:ee:ea:fa:7b:ec:89:16:30:18:99:e7:6b:9f:a8:65:
         79:16:a3:ec:e8:e5:3a:01:c2:80:7d:2d:6d:55:04:dc:ce:00:
         81:9d:53:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 16:04:15 2024 by rpki-client on console-fra.rpki-client.org