Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/55d642b5-1c90-34ed-9a1c-bac62ff78833.roa
File:                     55d642b5-1c90-34ed-9a1c-bac62ff78833.roa (raw, json)
Hash identifier:          1C8gyy3c5djxifubNiTASXE57FQ0C6LPhDZCPUzeRLY=
Subject key identifier:   FB:4C:CF:DE:7C:FE:54:74:75:C7:E8:44:D4:F4:7E:59:2A:A5:C6:F7
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780267881020D03D6A43DDB80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/55d642b5-1c90-34ed-9a1c-bac62ff78833.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:3840::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:78:81:02:0d:03:d6:a4:3d:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=f1c99c18-880d-4d47-9a1e-446b74cc8d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c7:e8:ea:33:3b:8b:92:b1:df:ba:33:09:f7:
                    77:f6:81:c1:4a:19:20:f8:f8:a1:99:b9:50:c8:94:
                    32:45:d4:a1:05:23:3a:b6:2c:47:45:97:59:1c:de:
                    85:81:f1:2e:a5:3e:35:c3:b7:fc:b3:55:f8:c6:d3:
                    2e:c3:15:3d:27:84:62:81:33:f5:cd:6b:71:9f:2e:
                    d8:aa:db:cd:f0:cb:03:b8:01:1c:48:09:13:0c:83:
                    8d:5c:9b:49:b7:26:aa:ea:6e:78:d1:bc:76:65:e3:
                    bd:26:1b:a5:ca:20:91:4a:ec:c5:29:fd:ce:70:b4:
                    46:a9:fb:ce:a8:e5:3f:ba:09:1c:3d:84:bd:3d:f1:
                    ca:12:d7:76:45:83:40:55:e1:ef:09:03:84:92:11:
                    e4:9e:5d:0c:c1:dd:07:e6:83:83:2d:4c:d2:f9:f8:
                    40:2f:31:8d:a8:dd:34:e5:7f:32:56:dd:8f:be:11:
                    2c:f9:44:92:e9:a7:7f:4a:2c:0c:7b:18:e1:89:64:
                    52:38:02:fd:b9:60:a7:64:87:ed:d3:a3:fd:f1:26:
                    ab:a3:80:ed:13:dc:93:f8:d6:54:0e:5f:9d:f5:1b:
                    37:73:a3:f8:21:f3:d6:f0:ea:0e:a0:b1:44:75:40:
                    93:ca:d2:a5:26:80:b1:63:33:6f:23:7c:98:78:ea:
                    6a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4C:CF:DE:7C:FE:54:74:75:C7:E8:44:D4:F4:7E:59:2A:A5:C6:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/55d642b5-1c90-34ed-9a1c-bac62ff78833.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3840::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:13:d8:91:83:37:ba:2e:7d:58:1b:36:37:74:47:21:bd:96:
         91:07:a5:db:d8:79:2c:d6:df:51:95:6b:7b:a6:f0:dc:97:4a:
         e8:6f:24:28:a2:60:35:98:62:e5:41:bc:04:a3:9c:11:75:e7:
         46:5b:e5:05:0e:b5:a4:ed:5c:32:01:1c:4a:43:53:0d:26:9d:
         ad:d8:37:43:76:54:66:85:bf:be:bf:76:d5:e7:2e:87:1d:11:
         ed:08:0e:a3:5d:0e:04:48:71:7e:e4:ff:3e:64:9c:95:44:ac:
         5b:b0:96:54:c0:c6:3a:1f:70:c3:a6:b4:d2:2b:6a:48:fc:64:
         bd:c3:67:3c:9e:b3:36:65:2c:31:fa:1a:40:7b:09:82:a9:92:
         18:1c:02:b5:99:2a:b4:ff:b6:9a:e7:0f:62:17:cf:d3:26:09:
         52:41:0c:db:84:1c:3a:95:bf:28:97:59:c4:09:41:f4:ff:18:
         2d:53:67:3b:03:e0:36:0a:d9:56:a2:87:9c:ca:ae:ba:73:72:
         35:38:e8:9a:e0:a2:68:79:89:88:38:c4:7a:41:b8:a1:cf:43:
         b9:a8:31:39:04:9e:9f:52:c6:67:e5:e5:be:02:04:19:44:c4:
         9d:3a:ef:82:c1:38:42:7b:e7:2b:e2:31:b0:87:5d:fb:3a:b7:
         30:f5:17:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:13 2024 by rpki-client on console-ams.rpki-client.org