Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/67e5d910-866d-393b-9cb8-2b27012a9d38.roa
File:                     67e5d910-866d-393b-9cb8-2b27012a9d38.roa (raw, json)
Hash identifier:          zIASipykBUPhCIOABKYeC8lkwACKFpSzv7XBQNxuzkU=
Subject key identifier:   B6:A8:29:C9:AF:64:5F:3F:64:1E:5B:B9:00:41:C9:07:20:98:42:59
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178F8D47D945AEF35830F40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/67e5d910-866d-393b-9cb8-2b27012a9d38.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:2a60::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:f8:d4:7d:94:5a:ef:35:83:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=92f96fb1-15b6-451f-a0ea-844547fbaa90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2c:3c:54:b6:b9:9a:48:bf:7e:f0:ef:29:f0:
                    96:d3:60:e4:73:ea:0e:71:2d:a4:bf:d2:de:63:17:
                    b2:bc:02:d1:b3:77:96:f3:a8:43:65:5b:ad:73:ac:
                    92:08:53:82:43:1d:d9:3a:dd:c1:d1:ec:28:dc:9c:
                    e5:c6:5e:f6:71:9d:7d:bb:c9:00:33:6b:df:ff:58:
                    92:18:0a:f2:c1:a6:16:88:79:2a:ee:0d:4a:f5:87:
                    16:dc:5d:0d:c6:45:d3:c4:21:df:19:86:dd:c4:2c:
                    dc:e5:31:4d:7e:65:82:f2:a6:c8:2f:93:2a:f8:9b:
                    08:6b:e1:59:14:78:a4:d9:62:92:4d:e0:c8:68:12:
                    47:e3:32:c5:a1:22:8f:43:3f:4d:b8:77:34:2e:3e:
                    24:4b:6f:76:4d:a6:e6:82:cf:e5:0a:5e:ea:f0:d6:
                    29:8e:69:d2:bb:fd:d6:ad:f8:25:0b:68:22:c3:02:
                    43:46:f9:95:1e:ad:b8:f7:7c:ac:b5:4e:bd:f9:a4:
                    23:17:b5:aa:16:46:97:c1:18:38:c4:0a:76:31:1d:
                    23:de:8f:5c:5b:b5:7e:5d:a1:06:7f:e4:05:ed:24:
                    49:c7:08:a0:b3:ed:40:18:f6:54:65:84:86:c0:56:
                    f4:44:61:b8:d5:7b:1d:d8:2f:84:a1:a5:de:70:24:
                    e8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A8:29:C9:AF:64:5F:3F:64:1E:5B:B9:00:41:C9:07:20:98:42:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/67e5d910-866d-393b-9cb8-2b27012a9d38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2a60::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:23:0c:37:9a:65:92:5a:23:95:4f:11:32:f9:b4:29:fd:b4:
         c8:9f:03:fd:eb:4a:40:91:de:db:87:92:5c:54:76:b9:d9:c6:
         6e:93:d1:fa:ed:aa:27:c4:20:46:62:88:49:fb:cb:44:4d:10:
         40:62:14:df:c7:31:92:d0:6a:a6:84:bc:76:ec:d8:88:c2:6e:
         35:b7:f0:0e:03:ba:ff:53:8c:c8:9b:25:d6:55:01:7f:93:07:
         0e:bf:e2:ec:a7:76:f7:7f:b8:0a:1e:dc:cd:6e:f7:d7:aa:01:
         d9:7a:5e:5e:04:b9:34:97:6a:7d:58:b0:67:f3:d5:33:9a:85:
         44:fe:2e:07:ec:05:33:a8:6b:c6:a9:45:ba:99:68:a8:31:ee:
         9a:e0:1a:29:5f:b1:ab:d8:29:f9:cb:94:38:6a:d9:ab:2b:02:
         02:c5:aa:c6:c0:8b:56:e5:e5:61:b6:1d:f2:46:4d:85:8e:9b:
         f1:ae:a1:fa:23:08:55:aa:38:b1:6a:69:56:a4:42:f4:c1:45:
         64:c9:1d:9a:92:a4:d5:75:bd:7d:ef:d9:5b:ef:71:be:e0:6e:
         fb:39:4b:6a:a9:f0:4d:b7:4d:65:93:eb:3d:d3:18:77:85:9b:
         6e:ab:94:c9:cd:81:66:a8:69:44:c6:93:35:1f:68:c6:9f:61:
         9f:2c:f1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:25:42 2024 by rpki-client on console-fra.rpki-client.org