Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6914cf27-cafe-366d-b36c-58a40d58b1e2.roa
File:                     6914cf27-cafe-366d-b36c-58a40d58b1e2.roa (raw, json)
Hash identifier:          UjY8c7Gg5Al8Iy2YvvRVQAyDuTXE6dyUyBR+qWJnFDo=
Subject key identifier:   FE:86:1E:60:26:38:91:07:32:6A:7F:E3:53:25:E5:02:6E:C4:82:1D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178F976099446B1DCF60B20
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6914cf27-cafe-366d-b36c-58a40d58b1e2.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3a20::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:f9:76:09:94:46:b1:dc:f6:0b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=2660eda2-5504-4ac1-af77-04389747d00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:3e:94:97:b1:95:2a:a0:1a:62:ad:da:a9:
                    94:8e:9b:de:0f:f8:71:da:06:30:0b:5b:36:3f:2c:
                    0a:cc:f9:1b:b9:da:ab:c4:fc:f6:66:c8:3d:fb:0c:
                    bb:93:21:2c:a0:05:21:87:c3:ee:00:79:ac:96:38:
                    ee:e6:0f:18:3d:78:d4:c8:e4:d0:3d:6c:5a:7b:60:
                    38:7d:dc:6d:a8:cd:d4:e2:8d:5c:fc:6b:2b:50:4f:
                    ac:2d:e7:87:b9:ac:89:b4:42:46:d6:31:b8:09:ee:
                    7b:b9:ce:ff:b9:88:b2:39:83:48:e9:88:e1:0f:ac:
                    88:87:e3:8f:a7:f1:ad:99:14:37:eb:6d:52:38:34:
                    29:a1:c4:0a:9b:7e:33:77:ae:84:4e:cd:1e:e2:09:
                    07:5a:c5:b2:a1:e6:74:e8:78:05:55:2f:13:80:3b:
                    e7:e4:af:ae:a2:bd:2e:13:2d:b5:3c:5c:44:99:22:
                    1d:97:b3:59:50:ed:b8:27:2f:42:4c:44:88:d6:88:
                    b1:21:a3:ca:58:dd:f9:87:38:9c:b4:b0:ee:50:29:
                    de:b0:3c:93:96:1d:19:70:6f:1f:96:30:59:7e:8e:
                    c3:d8:5a:4c:97:33:40:95:08:39:2d:ab:9a:f2:97:
                    ee:eb:af:73:dd:b8:ef:7a:b7:f9:bf:31:71:44:bd:
                    bb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:86:1E:60:26:38:91:07:32:6A:7F:E3:53:25:E5:02:6E:C4:82:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6914cf27-cafe-366d-b36c-58a40d58b1e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3a20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e1:49:50:89:0a:ee:e4:e3:83:58:9e:9a:18:ae:f4:ec:f4:
         b3:f8:f9:a6:ab:08:aa:6f:e3:d4:c2:31:65:90:fe:ed:9c:e3:
         ae:ab:e9:47:63:7a:04:2a:22:70:4b:74:b0:be:23:72:9b:60:
         4f:04:e8:35:a7:d4:50:ca:87:a7:db:b5:2b:60:4f:3e:83:ff:
         8e:6a:55:9f:a3:92:1d:87:0e:59:74:8d:45:7c:48:fd:e4:7b:
         5c:8c:89:ac:ab:7a:41:46:a1:d0:1a:81:5e:d6:53:30:15:5e:
         98:67:b4:ab:5f:97:85:4e:d0:bd:b4:88:60:4b:d0:a1:99:44:
         ee:6f:9f:93:f0:dc:4f:38:da:fa:bc:bf:7a:bf:88:bf:a8:4c:
         f8:89:ba:10:03:f4:20:cb:ed:bd:f1:19:6c:31:12:26:cd:da:
         dc:5d:3e:1a:8e:cb:3b:f5:2a:7a:5a:fa:f1:84:0c:43:36:3b:
         3a:cd:99:2e:e6:98:7b:f5:70:57:e0:14:80:55:a3:b1:15:13:
         b3:d7:14:00:b5:a5:39:a9:71:65:7e:01:17:19:c3:d0:b8:0f:
         5b:eb:c7:67:08:92:be:1d:35:4f:2a:cd:28:4e:41:61:4f:7f:
         36:a4:6e:d4:7a:07:68:1c:77:11:6c:d1:0a:cb:f5:5e:8c:d4:
         a8:be:e6:64
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXBePl2CZRGsdz2CyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk
MjY2MGVkYTItNTUwNC00YWMxLWFmNzctMDQzODk3NDdkMDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdU+lJexlSqgGmKt2qmUjpveD/hx2gYwC1s2
PywKzPkbudqrxPz2Zsg9+wy7kyEsoAUhh8PuAHmsljju5g8YPXjUyOTQPWxae2A4
fdxtqM3U4o1c/GsrUE+sLeeHuayJtEJG1jG4Ce57uc7/uYiyOYNI6YjhD6yIh+OP
p/GtmRQ3621SODQpocQKm34zd66ETs0e4gkHWsWyoeZ06HgFVS8TgDvn5K+uor0u
Ey21PFxEmSIdl7NZUO24Jy9CTESI1oixIaPKWN35hzictLDuUCnesDyTlh0ZcG8f
ljBZfo7D2FpMlzNAlQg5Laua8pfu669z3bjverf5vzFxRL278wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP6GHmAmOJEHMmp/41Ml5QJuxIIdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjkxNGNmMjctY2FmZS0z
NjZkLWIzNmMtNThhNDBkNThiMWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQDog
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHXhSVCJCu7k44NYnpoYrvTs9LP4+aarCKpv49TCMWWQ/u2c466r
6UdjegQqInBLdLC+I3KbYE8E6DWn1FDKh6fbtStgTz6D/45qVZ+jkh2HDll0jUV8
SP3ke1yMiayrekFGodAagV7WUzAVXphntKtfl4VO0L20iGBL0KGZRO5vn5Pw3E84
2vq8v3q/iL+oTPiJuhAD9CDL7b3xGWwxEibN2txdPhqOyzv1Knpa+vGEDEM2OzrN
mS7mmHv1cFfgFIBVo7EVE7PXFAC1pTmpcWV+ARcZw9C4D1vrx2cIkr4dNU8qzShO
QWFPfzakbtR6B2gcdxFs0QrL9V6M1Ki+5mQ=
-----END CERTIFICATE-----
Generated at Tue May 7 16:56:53 2024 by rpki-client on console-ams.rpki-client.org