Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6f301f44-23a2-38c4-9f18-d4f06b08f614.roa
File:                     6f301f44-23a2-38c4-9f18-d4f06b08f614.roa (raw, json)
Hash identifier:          00aCLfnpVwRnjGLU82Ta6EyzqD2QamrbqoRilHqAoE4=
Subject key identifier:   66:4F:15:7D:CA:4F:E6:B4:08:F6:4C:4A:E8:38:9E:0A:1A:3E:BA:A9
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178DA89329497D82D146B20
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6f301f44-23a2-38c4-9f18-d4f06b08f614.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:2950::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:da:89:32:94:97:d8:2d:14:6b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=00f1e406-b4e2-4183-b935-3c455f5482b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:50:55:32:cb:ec:f4:01:f4:b2:ec:a8:f6:
                    5a:cc:35:a1:3e:71:7e:61:ce:26:af:81:30:d2:3c:
                    b0:7b:50:cc:39:fc:2d:d4:d3:7f:b2:f4:20:74:79:
                    dc:cd:78:e1:7b:5e:7c:99:c1:8a:2b:28:10:99:ff:
                    8f:b1:62:ff:9c:5c:c0:4a:d9:f0:55:fb:a4:fc:59:
                    a4:93:10:19:6c:aa:a9:b1:f7:5a:5a:09:23:cd:06:
                    c7:c1:bf:73:ec:10:81:29:6e:14:bf:b0:70:71:21:
                    aa:9d:8b:c4:d8:0e:91:93:3e:9a:b3:70:77:0b:1d:
                    ff:17:38:48:90:8f:cf:a7:bb:e5:68:7c:6d:21:2e:
                    d0:63:73:e7:8b:b4:06:ec:fc:81:db:e8:12:bb:3e:
                    4e:8f:1c:0e:ed:93:cd:d0:6e:bf:14:12:72:b3:22:
                    05:29:c0:25:cc:c4:6c:17:a2:d9:3a:11:21:2b:f5:
                    4b:b9:aa:56:e5:54:31:ca:07:67:79:56:8e:b1:7e:
                    80:ae:28:06:b9:32:16:b1:0f:25:d6:ed:18:c9:da:
                    d2:41:cc:4d:bf:67:89:d7:9b:8e:13:15:ee:e2:03:
                    17:b3:f9:0b:db:8b:da:e0:9d:dd:2a:8c:a5:a9:a4:
                    e6:00:3f:de:0c:ff:4c:17:9b:c8:4f:c3:95:ad:d5:
                    16:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4F:15:7D:CA:4F:E6:B4:08:F6:4C:4A:E8:38:9E:0A:1A:3E:BA:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6f301f44-23a2-38c4-9f18-d4f06b08f614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2950::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:b2:e5:5d:9c:a2:31:14:99:5c:99:5c:da:3b:69:13:b9:d8:
         85:b7:5a:9f:d7:23:55:6e:6f:d5:bb:0f:87:74:a4:8b:db:af:
         23:1c:95:6d:29:ec:fd:b9:ea:5b:55:97:fa:3f:c3:22:06:f1:
         c7:fc:23:c5:e3:8f:97:d7:a0:cd:9c:24:19:88:dd:a2:c7:c5:
         a7:84:a1:70:30:27:11:0c:ae:70:de:c2:df:14:30:13:73:bd:
         3d:42:a3:ad:27:03:68:20:41:51:83:df:41:fa:b2:c4:95:8b:
         61:48:5d:19:57:b9:ea:95:9e:4d:63:6f:6d:e1:6c:27:a7:39:
         d2:55:17:cd:d2:d0:4b:44:23:32:ef:fe:1a:a9:64:16:2e:50:
         98:a0:9b:62:d7:07:b2:b4:33:cd:e2:ed:2a:b1:19:20:ae:05:
         7e:de:23:27:5b:ad:f6:92:9d:12:dc:90:1f:a6:e2:b5:56:62:
         b6:60:df:f7:55:d1:9e:56:8f:a0:0d:ea:5a:44:4f:a9:82:38:
         67:8e:99:ba:c7:98:bf:2d:bd:fd:e7:fb:6a:63:83:af:de:43:
         a3:81:67:6b:1d:d2:03:43:de:92:a6:a9:fb:d5:ed:da:5f:fa:
         a6:fd:6b:37:61:d8:3b:75:99:8b:fc:27:26:31:ab:25:de:20:
         15:ab:43:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:12:08 2024 by rpki-client on console-fra.rpki-client.org