Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7deebb88-cd97-3b7b-9bea-4c2457a50359.roa
File:                     7deebb88-cd97-3b7b-9bea-4c2457a50359.roa (raw, json)
Hash identifier:          /w1d5owwCxcJCZ8rAztvMXjA7j2jjNXYa2kMFHOEmdg=
Subject key identifier:   D1:BD:4E:F5:D5:AA:44:1F:A1:F1:37:B2:4E:77:38:95:E1:4A:B1:50
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780267CF8DD0A712E1BE24600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7deebb88-cd97-3b7b-9bea-4c2457a50359.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:33f0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:7c:f8:dd:0a:71:2e:1b:e2:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=d52d4e23-5d4f-4a77-a74b-e7cff23cfbf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:56:a7:84:77:0c:75:8f:10:d5:45:cf:c9:66:
                    11:f1:67:a6:fa:cf:64:de:3d:46:f8:51:90:87:c0:
                    27:83:33:31:db:83:c6:82:22:fa:cd:66:8a:be:b3:
                    f3:d7:31:41:a5:0e:40:69:a5:be:53:16:ce:a0:35:
                    07:ac:24:a9:87:16:f6:30:bf:70:03:39:99:b4:84:
                    c6:ab:b3:df:28:22:87:5a:35:31:f8:40:db:bd:00:
                    f0:d9:a3:3c:a7:4d:26:1c:7a:80:4c:91:91:c4:42:
                    41:db:ec:50:1a:2f:81:c7:aa:cd:76:6d:f6:35:85:
                    61:2e:35:17:fb:0e:df:f9:19:f6:e5:cd:09:05:9c:
                    91:44:f1:7e:d6:55:f8:47:cf:5c:4e:49:00:5e:d8:
                    66:47:aa:00:eb:35:31:e2:ed:62:7c:91:e3:84:fa:
                    10:f2:eb:f6:e3:a8:9a:81:cf:f5:d1:23:ad:07:4e:
                    ce:d4:e1:4d:1e:9b:9d:06:4f:57:08:17:f6:e2:23:
                    96:32:db:d3:67:8d:ed:92:8a:27:a1:54:7f:33:7c:
                    1e:29:8d:10:14:41:70:35:41:92:31:0b:d5:c5:d6:
                    f7:5c:15:ac:c9:2c:be:93:9c:b1:15:1c:cd:1a:2d:
                    bf:a7:ef:dc:05:1d:63:c7:c6:fb:f9:4f:ad:2a:a8:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BD:4E:F5:D5:AA:44:1F:A1:F1:37:B2:4E:77:38:95:E1:4A:B1:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7deebb88-cd97-3b7b-9bea-4c2457a50359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:33f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d9:de:81:66:38:a9:be:85:ec:a3:f3:94:ed:84:f9:0f:a1:
         f4:b0:30:ae:f4:6e:13:be:1d:fd:25:47:e8:bb:23:72:09:1a:
         e1:93:7e:f9:4d:8c:82:6a:5e:12:23:52:24:e7:a8:c4:c0:80:
         bc:d9:f0:00:10:4d:f5:63:9b:0c:a8:8d:e5:29:f0:a2:28:e4:
         d0:92:dd:59:ed:c3:1b:50:82:6d:c2:42:74:09:b4:95:b7:41:
         36:f9:9b:91:2a:20:47:1a:64:b3:c9:c9:7b:6f:fa:81:c6:b6:
         c1:2c:73:ce:d4:9c:26:62:f0:53:26:10:80:49:d6:7c:d7:e4:
         15:a9:d0:b0:24:11:35:83:de:ea:dd:98:48:f4:8f:38:69:2b:
         6b:55:85:13:ae:ae:25:4a:3e:06:06:9e:6d:86:30:b9:7c:89:
         4b:e4:c6:ee:a6:55:7d:4a:d7:99:46:d8:f7:fb:f3:6f:93:53:
         27:7d:b9:7e:13:f2:2a:aa:0c:aa:f4:96:b5:86:80:ac:19:c1:
         ad:c4:16:b2:4f:0d:a9:04:7a:8e:6b:7a:f1:b1:9e:c2:f2:99:
         f1:58:75:7b:c3:6f:e0:b4:01:67:bd:90:fe:f0:bd:ad:d9:17:
         24:fa:74:ff:8b:13:4e:a8:8b:4d:23:8d:36:53:28:f6:68:80:
         ad:e6:42:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:48 2024 by rpki-client on console-fra.rpki-client.org