Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/49facd46-1346-3e24-b8fc-665aab88848b.roa
File:                     49facd46-1346-3e24-b8fc-665aab88848b.roa (raw, json)
Hash identifier:          YRIsGnCqIzwPsHiwGI+wtegTGd0/ZAzxgd3ky/3IQNg=
Subject key identifier:   E0:A2:FF:25:3C:D5:E9:EF:5C:3F:DC:08:60:6C:25:D9:B7:26:38:65
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C1790EFD0B5CFD1D08BE6EC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/49facd46-1346-3e24-b8fc-665aab88848b.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:2c50::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:0e:fd:0b:5c:fd:1d:08:be:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=607d773e-3da5-4c7a-991e-8e7e91c621e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:df:65:36:de:71:21:46:bc:a2:8f:ed:e4:c8:
                    0f:4b:7f:a0:b7:3c:f2:ba:55:7b:04:8c:a8:e3:85:
                    52:c1:f3:8d:e6:61:aa:ad:5c:df:61:e8:40:76:d6:
                    3b:6d:8c:69:53:39:8e:8b:67:a5:6a:a9:81:e1:77:
                    8a:83:82:e0:bb:53:d0:8e:ff:cd:2a:ab:6f:ed:9b:
                    3e:04:00:8a:71:e7:00:f8:15:54:8a:54:44:18:13:
                    45:53:45:c2:13:16:3a:24:5f:ca:57:8b:68:30:57:
                    77:58:09:f6:5e:c2:dc:12:a4:55:1a:6a:1a:05:af:
                    51:78:38:4a:f0:c6:f0:57:e0:81:04:ac:b8:40:70:
                    c5:d5:5b:0e:09:91:29:a0:27:bc:2b:5c:b4:96:eb:
                    cb:f2:b9:bc:1f:63:47:66:1a:c3:91:7c:19:b4:4e:
                    f7:51:54:ad:6b:21:c9:a1:26:ca:ec:a5:90:07:d6:
                    20:32:a5:77:8c:0f:ec:56:74:75:46:e9:fd:a6:9c:
                    55:79:70:fb:0c:e7:f3:c7:68:5a:48:b2:40:37:65:
                    41:05:73:d1:6b:9a:98:82:64:99:1e:e2:6d:30:28:
                    f2:07:a4:4a:ac:68:e8:98:3e:46:7a:ef:51:3d:58:
                    8d:ac:ac:bd:2b:cc:3f:13:54:68:a8:32:c3:72:a0:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A2:FF:25:3C:D5:E9:EF:5C:3F:DC:08:60:6C:25:D9:B7:26:38:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/49facd46-1346-3e24-b8fc-665aab88848b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2c50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:bd:7e:20:17:87:bd:89:cb:52:33:6f:05:f0:e9:ba:b4:de:
         1c:96:e8:ad:67:9a:1f:b5:c9:96:33:65:7b:00:7c:6d:17:98:
         1a:24:7d:0b:db:85:03:5e:db:c9:c6:fc:5b:7f:eb:d9:ef:4a:
         0e:ae:0a:6c:ec:a7:98:85:9b:ed:49:fb:37:e7:8c:9c:fd:91:
         31:bd:96:0e:99:90:97:9c:58:43:03:31:6e:5e:b3:82:3d:64:
         62:6e:4d:63:da:91:1e:19:c5:e0:fc:5d:c0:f3:2d:31:ce:2a:
         42:1a:38:28:d5:ed:91:56:0c:0e:44:b0:da:81:9f:e9:67:65:
         a7:45:c8:3d:7a:c8:3c:8b:a9:2c:e5:f7:dd:eb:50:3b:92:7d:
         43:22:37:9c:14:2b:2c:3d:7e:9c:27:ec:ac:c5:a5:de:a1:d6:
         36:13:4f:35:86:bf:1d:8c:0c:12:c0:83:4b:53:3f:42:2e:94:
         25:7e:e1:77:d6:11:a7:d6:ba:50:68:ba:0a:b5:4e:06:2b:76:
         f6:ed:47:03:a2:15:cb:ad:23:86:f2:e7:a2:db:7f:7f:6e:27:
         ae:73:c0:45:fe:d7:3e:1d:ba:3c:5f:e8:0d:9a:8e:14:09:f1:
         61:fc:4b:72:37:0e:94:6b:71:9a:34:07:76:2e:6b:56:d2:b3:
         41:89:62:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:56:46 2024 by rpki-client on console-ams.rpki-client.org