Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/56bedf46-d9b8-311e-99e9-892b873f27d7.roa
File:                     56bedf46-d9b8-311e-99e9-892b873f27d7.roa (raw, json)
Hash identifier:          87HiW9h+LH95zO6yNR9iGU/oh6DnjtZlCAqukEnh/Qo=
Subject key identifier:   C0:C5:B9:D5:DD:BE:C9:A2:3A:64:E6:41:D4:D2:20:DC:68:E2:61:64
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802685244208E8EFF25E7E90
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/56bedf46-d9b8-311e-99e9-892b873f27d7.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:3910::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:85:24:42:08:e8:ef:f2:5e:7e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=035de298-58e9-45b7-af4a-f81f5bb81a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:8c:6d:61:d1:8a:75:65:30:0f:3a:bb:fa:
                    7b:b3:dd:35:67:40:ce:94:a0:c3:34:35:10:b9:d0:
                    c7:7d:ed:58:ed:f9:31:eb:f2:fa:1b:68:10:92:95:
                    b3:c2:e2:65:b7:e7:13:ff:f3:b7:03:88:79:c7:b2:
                    e7:38:c6:57:39:e8:d4:81:1d:1e:67:aa:6f:bd:38:
                    f9:d0:b0:54:df:00:47:35:b5:2c:17:32:3b:47:0b:
                    50:e6:91:28:f5:70:3a:c4:57:ff:2d:6d:e9:dc:20:
                    45:62:7c:f5:45:72:44:7b:7e:b9:10:24:80:99:82:
                    99:ba:01:f3:8e:42:5a:c9:48:87:82:14:75:9c:b3:
                    cf:d8:11:44:1a:d5:ec:58:9d:20:9b:b9:b9:e4:56:
                    b7:5a:f2:38:eb:3a:ea:8c:90:7b:11:6c:1f:72:f4:
                    57:fe:47:1f:c6:f8:e1:59:39:0f:f9:03:16:f9:fc:
                    fb:0a:72:8d:02:aa:6e:59:49:07:e1:38:54:11:99:
                    63:c7:2b:75:c7:23:03:99:40:11:21:24:32:5c:63:
                    fb:8d:61:6f:1b:ac:4a:71:ae:95:3a:3b:b6:f0:5b:
                    97:c8:e0:2f:f9:e6:b4:9b:32:84:8b:65:22:32:9e:
                    0f:d9:97:bb:bf:6e:53:e7:ed:03:64:cb:18:75:3a:
                    40:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C5:B9:D5:DD:BE:C9:A2:3A:64:E6:41:D4:D2:20:DC:68:E2:61:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/56bedf46-d9b8-311e-99e9-892b873f27d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3910::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:fe:89:c3:29:30:20:f9:12:43:b8:95:b8:85:b3:4e:5a:77:
         48:71:ce:5c:c7:8e:89:74:27:a5:4d:e3:8b:3c:b0:7a:e7:65:
         7f:81:a3:28:bf:89:0e:a5:83:4d:bc:30:b7:3a:56:da:8e:fd:
         a4:b1:2f:b5:34:bf:0f:10:22:6e:34:ae:90:08:ea:87:7e:98:
         fc:fa:ca:39:d5:df:0a:4a:ba:43:e9:89:95:45:7e:46:09:9c:
         04:c9:ff:ad:da:f6:ad:eb:a3:92:9f:9e:81:b4:c8:f3:ad:25:
         27:bd:f6:92:83:50:59:c6:fd:88:9b:c9:5e:f3:e5:5a:f2:13:
         ce:a9:b4:b6:fc:8a:9c:bd:b7:cf:a2:25:e6:dd:01:fe:3b:3c:
         6f:72:a6:90:40:4c:10:fc:7f:6d:7d:2e:47:5b:90:c5:fd:f0:
         c1:6c:40:f1:b3:21:8c:7a:58:a9:db:d2:2c:a8:5e:e6:ee:07:
         e7:10:8e:91:81:53:11:c0:4e:99:69:59:23:55:ef:7e:6f:ca:
         77:20:40:ba:f0:ec:0b:93:c0:7b:a3:ed:a0:fb:6a:34:ed:cc:
         b3:ac:82:26:90:ba:54:3e:6a:81:7c:d2:19:f9:26:ef:55:6f:
         28:b6:bf:ba:9e:b0:76:b7:cb:0c:de:ab:9d:ec:3c:87:35:45:
         7f:b7:f0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:13 2024 by rpki-client on console-ams.rpki-client.org