Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/65e5bf26-9c49-3fc5-bd04-87aef21e05ce.roa
File:                     65e5bf26-9c49-3fc5-bd04-87aef21e05ce.roa (raw, json)
Hash identifier:          DKdQKxLawAQQRgTAbLCFnQ5IxnK0Fo0x4gZMWIjKYJU=
Subject key identifier:   DB:99:58:33:EF:4B:94:C6:7F:1E:54:F4:AB:5D:5F:9D:D1:F7:0F:3C
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802660A49CE01474C5C064C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/65e5bf26-9c49-3fc5-bd04-87aef21e05ce.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:21d0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:60:a4:9c:e0:14:74:c5:c0:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=bffdfaa6-3682-4d03-a01a-33cc3b4f647e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:69:34:9d:33:43:eb:47:e3:02:f5:0f:29:21:
                    9c:65:91:37:cc:bd:94:b1:ff:98:38:d9:fb:22:0c:
                    32:50:e9:c3:bc:7f:5f:62:e6:e4:a1:f9:50:71:6a:
                    94:53:01:aa:1c:5a:b8:9f:e6:7e:f7:ea:3f:19:1c:
                    30:59:87:2a:4d:f5:67:4f:9b:d2:0a:99:0e:47:b4:
                    2b:62:44:21:a1:9d:1c:eb:d0:93:c7:0f:cf:e1:0c:
                    ec:ae:22:6e:1b:34:d8:98:13:3d:3f:d8:5b:af:83:
                    42:16:82:b7:d1:ba:6f:4a:86:4d:a8:15:59:25:7a:
                    0f:b9:52:2b:eb:8b:6a:94:b3:64:18:4d:ac:34:6a:
                    29:7e:51:5c:a7:61:30:07:d5:4a:03:dc:84:19:29:
                    ef:cd:17:a3:4a:9b:f3:a7:ab:58:95:99:23:91:6e:
                    61:6e:43:86:1b:b2:d8:13:06:3a:d3:6b:85:73:70:
                    14:61:bd:e6:a2:13:a2:9e:44:bb:c2:fe:d7:c2:48:
                    3c:a4:d7:68:4c:a7:21:c6:60:00:bf:4f:79:e9:6b:
                    19:e0:92:cb:5f:d5:6b:b5:01:94:c0:df:38:21:90:
                    fa:ee:5d:34:30:13:fd:c8:67:e9:7f:79:1b:20:e8:
                    20:5d:04:e9:1b:09:bd:ef:96:83:05:6c:ea:d7:59:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:99:58:33:EF:4B:94:C6:7F:1E:54:F4:AB:5D:5F:9D:D1:F7:0F:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/65e5bf26-9c49-3fc5-bd04-87aef21e05ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:21d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:7d:e7:06:ab:45:8e:42:1c:10:1a:52:62:7b:55:ac:f5:99:
         5b:74:d3:2f:bd:77:c3:80:7b:8d:49:f2:8f:0a:09:0f:26:66:
         fe:7b:1d:84:09:4f:91:d8:28:e5:d4:47:57:ae:0c:38:c7:08:
         4b:df:c7:58:bb:46:c4:c9:9c:da:bf:da:2c:eb:c9:68:b3:ee:
         4a:6f:17:d8:4a:f9:14:eb:f7:f6:96:23:78:04:10:aa:cc:a8:
         1b:f8:6d:d9:29:42:2d:75:2b:34:1a:f8:6b:cf:df:03:e7:72:
         d9:b5:f8:f5:e7:5b:eb:97:f9:92:fc:ee:5c:34:39:4d:a5:6a:
         36:53:74:5c:ec:75:d1:40:d8:41:fb:cb:52:73:dc:44:78:7c:
         ab:92:ff:99:8d:d3:b4:c7:82:af:bb:f6:4e:e2:e0:e6:d3:9d:
         2b:75:d0:c1:47:41:34:32:ac:db:9c:3d:31:5a:b5:6a:39:3d:
         10:73:5a:9f:ca:0e:8c:d1:10:2a:ce:ee:7e:9e:7c:0b:ee:e7:
         01:5e:11:00:70:76:a9:21:d4:72:5f:90:67:d3:01:a3:13:72:
         dc:e2:31:6d:26:82:5f:1f:3e:ae:a3:c5:75:de:6b:1e:fd:05:
         1f:61:5c:ad:69:c3:ab:80:55:4a:45:82:6e:62:2b:8e:e5:fe:
         81:06:ce:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:48 2024 by rpki-client on console-fra.rpki-client.org