Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/756562ab-34e6-3a79-a88c-2ce009ac2b6e.roa
File:                     756562ab-34e6-3a79-a88c-2ce009ac2b6e.roa (raw, json)
Hash identifier:          uE6mUri4IXMXLc7IjQj/qipaOWMJFf3yamBKBkONdhc=
Subject key identifier:   A6:34:DA:B7:C8:4B:3A:11:DC:38:E1:E3:06:66:CD:D0:AD:86:5A:32
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802662061AB9546459C61C00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/756562ab-34e6-3a79-a88c-2ce009ac2b6e.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:2dd0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:62:06:1a:b9:54:64:59:c6:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=a01def20-47c1-46d9-8835-b17fce34545e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:c5:f3:de:0f:1f:d8:5d:35:d6:26:06:42:
                    f0:c4:21:49:e1:f0:66:7f:ef:1e:68:f1:20:84:42:
                    f4:b8:a9:5e:5c:76:1e:1b:e9:07:8c:65:ae:4e:e2:
                    74:2a:f3:8a:51:9f:89:02:29:fa:e9:b7:2f:73:27:
                    5c:5d:f4:cc:71:cd:43:00:69:8d:34:7f:13:d3:2a:
                    d6:a2:d2:32:cf:8f:42:d5:bd:90:57:49:6f:c6:f0:
                    3c:fc:b8:ba:a9:27:73:de:0b:b5:69:51:00:b3:72:
                    c4:7f:70:9a:e7:5f:09:86:01:2d:12:59:e2:3a:ae:
                    0c:0e:1b:b6:8d:8f:94:dc:09:5c:83:4d:49:ff:e9:
                    47:ed:79:de:3f:19:55:01:b0:5d:9a:d6:5c:0c:5b:
                    1c:40:7c:20:28:39:07:e0:e3:3c:e3:c1:e6:73:fd:
                    85:a8:52:e7:d6:b9:bd:ba:0d:81:36:c1:44:77:bf:
                    09:2f:1d:37:05:44:f9:82:47:4f:ae:84:99:1f:a7:
                    61:50:a6:80:bd:e2:a2:c4:c2:24:d9:08:72:99:6e:
                    08:c0:53:14:48:77:80:f6:88:76:a9:15:32:7e:d0:
                    cb:26:5d:51:b6:b4:3f:fa:75:c6:ff:94:64:d2:a3:
                    70:d2:1c:65:75:50:21:db:b0:45:42:30:a5:d4:51:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:34:DA:B7:C8:4B:3A:11:DC:38:E1:E3:06:66:CD:D0:AD:86:5A:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/756562ab-34e6-3a79-a88c-2ce009ac2b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2dd0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:d0:49:b3:cb:34:8a:63:e5:28:26:8b:89:1e:2f:76:44:4e:
         fb:b3:f7:96:2b:b5:58:e8:d4:d3:82:76:94:19:81:4f:25:28:
         e9:d8:e0:11:c7:a4:76:80:34:4c:1d:47:56:88:aa:75:be:cb:
         7d:cf:8e:16:89:41:cc:90:29:7d:9d:66:29:b8:ca:77:27:6d:
         96:31:08:7c:70:a4:3d:1d:b4:d1:1d:b6:7c:1b:ae:91:b3:4c:
         ed:74:73:e8:00:84:56:9a:2f:07:59:5e:d0:0a:62:ad:5e:51:
         a9:32:33:3b:99:fa:d9:67:94:e6:c3:0f:f2:e8:bd:50:18:e4:
         16:65:85:bb:6a:d3:14:44:f0:61:e8:a3:48:26:95:b0:bf:50:
         f5:75:0b:1e:6c:7d:90:31:73:39:98:34:04:e6:d7:96:4a:06:
         a5:c2:0c:2b:4b:01:e6:b1:0e:5c:92:39:9c:13:7e:f9:d5:21:
         7a:86:f6:d6:55:1a:14:ac:e8:10:cc:5c:58:c1:c0:de:28:aa:
         ea:0c:12:63:38:f3:5d:2a:f7:f3:b4:45:36:b2:e5:cb:41:98:
         41:2e:cf:7a:06:48:dc:a6:01:7b:7d:ac:27:cc:c6:dc:2e:b1:
         04:55:59:7b:b9:b6:64:44:e6:44:ec:67:9b:fc:43:77:8c:c8:
         16:28:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:48 2024 by rpki-client on console-fra.rpki-client.org