Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6ee90efe-7757-3a09-8fa5-67e446cbc75d.roa
File:                     6ee90efe-7757-3a09-8fa5-67e446cbc75d.roa (raw, json)
Hash identifier:          WD4hRFOqxD88lkC/S9t8r95aiucAyaJJNib9OPxtonk=
Subject key identifier:   DA:9B:07:3B:89:E2:14:E2:4A:5A:41:E5:35:DE:A1:AB:38:4D:BE:41
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178E6C8B6F9348FC4536500
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6ee90efe-7757-3a09-8fa5-67e446cbc75d.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:2d20::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:e6:c8:b6:f9:34:8f:c4:53:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=6dae12b0-4c4f-421d-9abc-8b5fa116fb3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:a0:d5:b6:42:ed:60:c5:69:10:be:da:5f:
                    f3:99:25:ae:96:e1:59:34:09:9a:d8:79:b7:64:ec:
                    52:9a:d1:61:22:d7:14:96:7a:4b:ba:4b:ec:98:c1:
                    5e:e3:91:4c:c0:00:ee:d5:b4:66:40:2b:cc:3f:bb:
                    a7:34:fe:ff:a3:0c:2f:f7:bf:5e:1a:17:39:c3:a6:
                    80:fc:df:c4:36:d4:97:0a:35:65:3c:43:32:37:c4:
                    7e:b6:18:d9:ff:ad:b6:a3:8f:e0:bc:2c:ce:98:39:
                    c2:a4:ff:2e:f7:ad:e3:3e:9e:af:af:0b:b6:a8:30:
                    c7:52:0b:9b:f7:66:43:17:87:af:7c:f5:08:b1:6c:
                    89:0d:94:70:23:14:b6:1c:0a:d2:25:1a:47:6a:06:
                    9d:d7:ea:cd:24:9e:d2:bf:ca:cc:a9:6f:c2:6f:52:
                    d9:85:8d:18:72:85:2f:fe:53:4b:2b:6f:19:7c:14:
                    16:1a:f9:70:bc:51:eb:ce:26:bd:00:04:4e:81:2c:
                    79:10:b1:fd:7b:c9:98:53:93:d4:cd:51:9d:98:5f:
                    e5:48:95:32:68:a3:55:fa:5e:19:08:bc:5d:cb:51:
                    11:5e:34:0b:33:11:47:72:a1:c9:f5:12:58:16:99:
                    81:bb:c5:d6:4b:d3:48:0d:ed:f0:0b:31:2a:d8:77:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9B:07:3B:89:E2:14:E2:4A:5A:41:E5:35:DE:A1:AB:38:4D:BE:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6ee90efe-7757-3a09-8fa5-67e446cbc75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2d20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ea:e7:ca:4e:ea:d9:d0:16:fc:8a:f9:c1:30:49:2e:eb:9a:
         16:4b:18:ed:89:70:85:4b:b9:b3:34:b4:29:31:1b:d4:49:52:
         9d:92:14:27:c6:ee:3f:7c:aa:3f:ba:6c:b0:50:97:a2:99:76:
         ec:68:b0:79:f0:d3:9f:da:89:bb:b5:9c:86:da:6c:26:6b:37:
         fa:0b:31:83:b2:32:29:14:9c:e5:9e:89:98:6e:aa:f6:c0:55:
         68:39:0c:43:ce:09:fd:56:6f:c6:ec:08:4e:98:77:18:bd:cb:
         57:ab:c8:c6:5b:0f:8a:17:02:c8:77:dd:5f:7d:e6:6f:f9:a7:
         13:d7:a7:0d:6b:7d:65:71:20:b5:5c:96:b1:e1:5f:4b:c5:ab:
         93:67:24:f7:a6:a3:bc:b9:a4:e5:b8:43:c2:29:c4:4b:e7:d2:
         5e:a5:43:3a:64:97:5c:1a:3f:80:4f:ba:7e:65:f1:f1:7c:ab:
         0b:7b:19:06:12:d0:7e:f0:9d:cd:34:7e:3f:5d:54:4b:a3:32:
         0e:91:d0:56:83:f2:cc:ed:23:ce:18:20:84:9b:65:cb:80:7e:
         a5:66:9a:21:11:24:5a:60:06:f7:be:2a:28:7a:21:2f:97:4e:
         66:69:b0:dc:fd:a1:a3:51:e9:e6:2c:dd:57:42:cd:ab:1f:08:
         a2:78:4a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:14:11 2024 by rpki-client on console-fra.rpki-client.org