Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/43970bdb-c5e3-3665-b8f5-5c9018e914f0.roa
File:                     43970bdb-c5e3-3665-b8f5-5c9018e914f0.roa (raw, json)
Hash identifier:          cAS1vx9LcTF17RzFxW1KI4EwHj+jlQfgFcyiKthq7H0=
Subject key identifier:   65:62:AC:3B:5C:26:F3:31:2A:A0:11:64:A2:EC:24:10:F6:E3:FC:79
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178D255A87CB2B39DF24F00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/43970bdb-c5e3-3665-b8f5-5c9018e914f0.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3790::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:d2:55:a8:7c:b2:b3:9d:f2:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=bc885aaf-2088-4b39-96cd-614fcfedad47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:30:a6:18:26:28:18:44:13:f0:0c:7e:98:d6:
                    4e:92:4a:0c:29:61:c0:4f:32:30:48:ff:e4:c7:a4:
                    e3:75:1c:4e:4c:4a:e4:f4:8d:9d:4c:63:de:b6:ec:
                    b7:3e:3c:c9:f8:43:09:a9:64:18:b3:94:d3:2f:04:
                    09:1a:95:7d:20:44:f3:d4:f9:45:b3:c5:dc:76:00:
                    b3:e7:39:87:c2:80:33:f2:1d:07:58:38:30:59:6c:
                    01:12:3b:25:51:44:03:61:15:af:5d:8c:63:05:8c:
                    11:46:58:5f:cc:35:7e:f2:9f:a0:25:3c:c4:ad:44:
                    c8:31:21:71:83:41:19:a2:e3:73:d6:10:fd:12:13:
                    9c:87:66:45:23:ac:6d:49:45:72:80:5f:dc:6e:52:
                    22:4f:db:5d:cb:37:ea:f7:5a:bd:5a:f5:03:61:1d:
                    d6:8c:5b:1f:42:5a:ce:f5:aa:2a:81:b3:0f:51:82:
                    83:40:1f:76:e0:c9:85:36:43:02:02:4b:d4:ff:ee:
                    d6:b0:5c:25:01:e4:55:c9:5b:af:8c:59:f6:3b:36:
                    d0:00:47:47:c5:fe:ea:82:09:84:fe:6f:f1:16:9d:
                    70:2d:a6:32:4e:43:66:1f:ee:ad:a0:de:35:e9:61:
                    f5:57:dd:cb:7a:32:3c:6f:3b:34:7a:9c:cc:70:fc:
                    68:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:62:AC:3B:5C:26:F3:31:2A:A0:11:64:A2:EC:24:10:F6:E3:FC:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/43970bdb-c5e3-3665-b8f5-5c9018e914f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3790::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:75:99:29:5b:24:13:5a:81:00:ea:1e:b2:09:77:4e:98:e4:
         72:6e:b0:f2:3a:59:96:91:b6:60:d1:11:2f:14:29:45:e1:2e:
         8c:48:94:59:87:e1:2d:d5:7e:c6:39:8b:db:0d:3a:7e:b7:34:
         73:e6:7c:17:95:54:f9:74:43:9d:90:40:d1:52:26:05:86:e4:
         2d:64:39:c3:e5:b9:6d:d9:3d:3e:fd:1d:03:ae:c4:b0:a1:58:
         e9:9d:10:b3:48:2f:bd:71:09:10:70:a4:d4:e0:ec:d7:d1:71:
         50:c1:66:02:bf:06:af:6b:17:e5:e4:38:2a:6b:8f:a5:32:ac:
         09:ca:9a:1b:d6:04:94:49:84:2e:00:e0:2d:e3:9e:15:04:fe:
         da:7d:c2:99:f7:97:7e:af:ea:14:6b:e1:22:18:77:50:6c:13:
         23:6c:8c:51:49:74:0e:8f:32:ba:e8:c7:df:3a:c2:ed:c1:23:
         c0:20:62:08:a0:1a:82:c0:00:aa:a4:1b:8d:45:db:80:53:ec:
         cc:5c:3b:fb:e8:65:cd:50:96:3e:9f:ab:21:ce:e7:3a:d8:6f:
         a7:73:ce:b8:3c:d7:d0:bd:12:f7:77:cf:90:54:c9:76:8a:f8:
         62:96:93:a0:b0:52:39:ea:50:14:74:a4:e7:52:04:37:ad:a9:
         82:5d:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:17:07 2024 by rpki-client on console-ams.rpki-client.org