Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/44274b22-cd91-366d-8ab5-c38647510417.roa
File:                     44274b22-cd91-366d-8ab5-c38647510417.roa (raw, json)
Hash identifier:          DkVxneiZtrMWmFj++egQPVlxcsukiLEJPPDhybWF/RE=
Subject key identifier:   92:29:70:8E:EC:DE:42:D9:3B:02:10:78:CD:7A:38:00:06:5F:54:1B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178FDF717EC5C20DF911C40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/44274b22-cd91-366d-8ab5-c38647510417.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:4490::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:fd:f7:17:ec:5c:20:df:91:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=99d2a64b-d3c5-457b-a0c8-6f5c8d363db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:36:7f:49:45:4b:8e:04:e7:3f:6f:e7:3a:37:
                    68:47:c0:47:07:26:83:17:55:b5:dd:08:c6:bb:9b:
                    11:6c:5f:16:2f:c3:70:bb:b0:74:df:ff:e5:92:78:
                    64:9c:a5:1e:f7:10:ff:3e:2f:76:26:d5:8d:3c:6e:
                    ce:8f:61:0e:cd:f2:e8:c0:9d:57:27:db:db:62:9f:
                    8e:94:d5:ef:3c:5e:29:54:a9:03:85:22:ed:d4:dd:
                    76:93:b5:5f:ab:1d:a4:36:87:9b:a0:da:e3:bb:ce:
                    13:aa:67:fd:ad:45:e4:c2:ae:9b:a7:a0:91:54:d3:
                    55:ec:cc:40:5d:7e:f1:e2:47:07:84:90:94:9f:10:
                    0d:38:97:0a:a2:21:48:a7:81:29:6f:37:07:e4:7a:
                    b6:ac:f7:d9:30:ea:66:42:53:30:b6:b6:99:c1:4d:
                    54:77:f0:37:50:c2:2b:46:f3:0d:80:37:20:b1:e2:
                    0d:1a:5c:98:3b:ac:bd:47:d5:57:6e:d2:b6:d4:64:
                    2c:32:3d:e4:a8:ae:73:92:17:88:d6:81:06:ba:22:
                    06:0e:c7:04:e8:2b:05:ef:e6:ef:44:da:7b:46:c7:
                    cb:13:29:9a:0d:5a:8e:2e:46:aa:a6:a3:de:65:dc:
                    07:e9:4e:11:a6:2d:f9:ca:34:88:20:34:3c:97:3d:
                    5c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:29:70:8E:EC:DE:42:D9:3B:02:10:78:CD:7A:38:00:06:5F:54:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/44274b22-cd91-366d-8ab5-c38647510417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4490::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:65:b9:3b:1a:15:55:3e:f5:75:23:e3:43:17:a4:3e:ef:49:
         16:e1:7a:4e:71:ea:f8:69:fc:16:10:f0:35:61:65:0b:24:4d:
         a9:7a:37:23:94:d9:ff:90:03:de:97:a4:41:99:cd:2a:62:ff:
         fc:42:ca:bf:c1:31:20:18:bb:d8:ab:14:3c:da:25:f9:66:1f:
         42:e6:34:66:f0:c7:29:17:fc:a4:5a:bd:a8:c3:4a:ca:38:b2:
         3f:bd:b1:c3:da:49:99:c2:c6:94:85:3e:a3:6a:b7:89:11:60:
         47:56:a0:b2:a0:e1:1d:27:21:24:ef:fe:88:31:bd:ef:31:97:
         2e:ea:4b:55:5b:c9:64:ef:88:83:8e:de:a5:30:e5:d0:22:47:
         64:d6:0a:96:91:e3:a4:1e:b8:ff:b2:45:c8:1c:b1:c5:cf:f1:
         e8:91:9d:b8:84:33:6b:f8:54:ca:10:52:ca:45:f3:d8:17:b8:
         dd:85:d4:78:7f:84:ef:94:67:6a:74:77:c6:f0:05:f1:88:45:
         fe:05:00:b1:72:5c:08:85:af:d5:5f:86:10:97:60:1b:f5:f4:
         89:95:56:28:fc:48:ef:ee:44:a4:82:0c:e5:fd:fc:b3:73:62:
         ea:15:7c:2a:d4:84:ef:cf:2c:e7:17:dc:a2:cd:35:57:92:f2:
         6f:a0:92:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 22:42:56 2024 by rpki-client on console-fra.rpki-client.org