Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/68c2598a-2cef-3687-9801-74732f7d7c0b.roa
File:                     68c2598a-2cef-3687-9801-74732f7d7c0b.roa (raw, json)
Hash identifier:          N4WpIJ8OiOpnqC5ntEbShc9uDzvxrhRirEgGmjLI38o=
Subject key identifier:   D4:A7:B6:02:A0:57:81:C1:3D:33:AF:08:7B:AD:AB:3E:68:60:74:01
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C17905126689E9BA0421DB00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/68c2598a-2cef-3687-9801-74732f7d7c0b.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:52b0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:05:12:66:89:e9:ba:04:21:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=ea6b13b1-aac2-4ff7-9fcb-1523d1c82e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:47:e2:9d:f5:2b:42:44:fd:4c:d7:a5:37:e5:
                    71:a2:fd:a0:32:40:61:05:84:b9:8d:18:06:50:c1:
                    3e:df:67:66:4b:84:a9:66:51:5a:91:e6:3c:68:47:
                    2d:67:06:c4:07:51:07:f2:86:89:74:42:a9:8a:43:
                    57:62:81:d0:25:49:30:c6:5d:97:3a:60:5d:a3:2a:
                    1a:f2:bc:49:49:0e:68:93:64:e2:ce:38:97:bd:f9:
                    01:e1:86:7d:0b:ee:8d:7a:1b:94:ba:16:5e:4a:92:
                    ac:6b:f0:ce:93:5b:f4:ec:4a:ad:02:db:1e:23:7b:
                    44:a6:2d:fb:4e:3d:f0:84:e7:26:57:ae:c0:ce:0e:
                    f7:70:26:b0:ac:50:9d:48:b1:5f:d5:7d:5a:5f:19:
                    4b:55:89:72:6a:86:49:b9:d9:b9:c2:de:d9:da:f7:
                    2b:06:44:05:00:34:c2:c7:71:9c:a5:37:27:08:f0:
                    27:e8:65:a6:ee:60:28:80:be:94:7a:fe:18:1b:2e:
                    0d:f0:4a:ab:d1:09:f8:b4:78:03:ea:55:8a:a8:d9:
                    74:6d:fb:e7:f7:5c:45:a7:84:ce:55:6b:f6:71:23:
                    5e:46:93:2b:af:ca:a9:01:4d:25:3c:22:8f:db:42:
                    e5:b3:50:95:ac:59:ba:f3:a6:57:f2:55:3b:5e:bc:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A7:B6:02:A0:57:81:C1:3D:33:AF:08:7B:AD:AB:3E:68:60:74:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/68c2598a-2cef-3687-9801-74732f7d7c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:52b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d6:f3:78:1c:5c:2a:36:61:0b:26:48:52:9e:93:7c:a7:27:
         c5:97:dc:90:fb:cc:95:53:37:64:59:53:32:63:23:2c:51:ba:
         9f:f2:47:10:bc:9e:30:c3:d7:18:3d:d1:40:38:f7:90:bf:a8:
         68:09:2c:fe:d0:28:e7:31:e9:4a:0d:4c:5e:0d:ea:72:d5:06:
         69:7c:a4:94:b3:33:32:99:a7:0a:5a:c2:72:e9:84:3c:d3:1e:
         e4:5b:3f:a5:e7:07:24:70:d9:c1:5e:c8:f9:97:1b:7d:55:4a:
         f4:02:ca:15:b2:b5:70:65:b4:0b:a4:93:4e:25:67:80:17:3c:
         96:cc:9d:68:bc:87:26:7d:2d:84:71:3c:86:3f:68:49:74:8b:
         48:8d:50:6f:55:cc:7a:1b:4c:1b:8b:f1:6e:a9:4d:71:f6:18:
         ab:5a:91:51:05:b2:84:31:e7:a9:c1:a8:f1:47:ff:92:16:10:
         98:1e:f6:f6:2b:4b:fd:f5:08:9d:4a:86:99:02:ab:c0:e4:e3:
         96:d5:8f:21:ab:fe:ff:13:7c:7e:b4:cc:ab:76:2f:1f:51:a8:
         7d:9b:74:90:6c:0e:12:4d:db:1a:ed:57:1a:79:47:01:31:a4:
         4f:50:43:89:ab:b4:87:2a:52:0e:19:24:0a:48:da:73:be:7d:
         85:77:97:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 00:15:52 2024 by rpki-client on console-ams.rpki-client.org