Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/46fa5c92-ef5c-3986-bc57-b7984a3b442c.roa
File:                     46fa5c92-ef5c-3986-bc57-b7984a3b442c.roa (raw, json)
Hash identifier:          XgC6QDHHHHJHpJBat1yt47tWo/cwsOS3aVH/yRQDrRo=
Subject key identifier:   2A:27:85:8B:D2:C3:CD:50:A4:0C:6F:C1:87:CF:73:8E:6B:44:71:AA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178EA0AFF680C45E961C9B0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/46fa5c92-ef5c-3986-bc57-b7984a3b442c.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3410::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:ea:0a:ff:68:0c:45:e9:61:c9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=ebd730cc-65e9-4ded-9a17-95c573da53e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:18:2e:13:80:3e:d0:6d:ae:49:86:21:ed:
                    5d:59:fe:da:64:e5:52:63:73:b3:67:53:69:89:54:
                    83:bb:59:d1:74:7d:2d:89:cd:46:92:37:f9:64:6c:
                    58:8a:f0:0f:64:af:c3:aa:7b:14:36:f7:de:ba:44:
                    bd:6a:c1:07:5b:64:71:8b:dc:ca:c1:fd:ba:47:5c:
                    2b:6d:d8:78:2a:fa:52:17:41:d4:c1:81:3c:01:c9:
                    8b:4e:22:db:9d:e8:3f:0c:3a:73:93:53:13:2d:16:
                    5c:d4:5e:7a:0f:e4:8c:93:44:32:d3:1b:3e:cc:0c:
                    1d:41:5e:7f:2b:5c:c7:5e:28:17:a6:b2:af:d6:e6:
                    e2:16:08:38:c8:f3:61:a2:c0:b1:db:fe:80:c3:a2:
                    cb:ec:00:ac:2c:4f:65:6f:51:12:eb:06:f8:16:7f:
                    8f:8d:df:da:66:ea:4b:18:8a:e0:e3:57:48:e5:57:
                    6b:d4:65:e6:b2:04:c9:9b:6a:62:43:3b:c4:62:f2:
                    52:66:dd:c0:3d:3b:6d:b0:7f:df:68:ba:f8:ff:42:
                    bd:76:b5:66:19:c9:59:f1:0b:96:fb:33:2f:f0:4d:
                    1d:c0:2b:0e:58:0d:c3:94:ef:a3:63:26:ba:ad:b8:
                    cc:61:42:58:7a:76:2d:df:98:3f:47:c1:33:46:b3:
                    3c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:27:85:8B:D2:C3:CD:50:A4:0C:6F:C1:87:CF:73:8E:6B:44:71:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/46fa5c92-ef5c-3986-bc57-b7984a3b442c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3410::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:5d:52:ce:2d:89:17:81:f1:b1:e8:c9:51:59:30:55:3c:32:
         d8:36:97:0a:4b:d5:74:ad:d2:ba:fc:6c:4c:26:d5:53:0f:2e:
         08:57:17:60:09:47:fe:df:e7:85:13:a1:55:d6:24:2b:b1:64:
         66:3d:ce:ec:52:b3:44:4a:6a:6a:e1:2d:f9:10:20:9c:75:da:
         ca:00:8b:24:ae:ea:e1:e5:c7:23:cb:52:93:47:e2:04:84:42:
         a1:f3:ce:a7:3a:9b:0c:4e:93:5e:fe:ab:0f:51:56:d7:88:18:
         7d:6c:9f:55:83:03:f9:19:4c:41:57:f3:ba:da:a7:43:d8:30:
         7c:33:5b:bf:8a:da:f2:fa:d8:f0:34:23:c6:87:40:4e:0c:c0:
         84:9c:d7:e7:ff:63:49:6d:d7:9c:6d:a5:d1:c4:1b:15:96:da:
         16:39:c0:ec:2e:6d:d3:47:5c:a7:07:8f:72:5f:62:03:a9:1c:
         6a:a2:61:8c:61:5d:34:cc:d0:0e:0f:02:9e:9e:12:46:9f:eb:
         5a:a8:9e:40:2c:14:c5:57:71:c4:83:49:98:81:ed:9e:7e:f7:
         1d:e6:ea:ca:99:20:70:8e:a9:56:9a:68:a1:3e:68:d1:4b:e8:
         7f:22:40:e4:d5:0f:ce:9c:47:d7:0b:cb:06:7d:05:3a:c9:46:
         67:c6:f2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:14:08 2024 by rpki-client on console-fra.rpki-client.org