Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7e0b5f2a-2894-3400-b60b-1d756437ba1b.roa
File:                     7e0b5f2a-2894-3400-b60b-1d756437ba1b.roa (raw, json)
Hash identifier:          l90eM0Ixt8QXeee0TbozconhaS9pP1I7sr26GUYd+wk=
Subject key identifier:   59:2A:9C:FC:98:3D:D7:9F:86:A3:38:AB:FA:94:11:E6:6B:2F:37:64
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178D6B6323BA776A749D700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7e0b5f2a-2894-3400-b60b-1d756437ba1b.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3a00::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:d6:b6:32:3b:a7:76:a7:49:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=54e04bc2-e419-452b-b145-82dc517f21d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:54:08:6f:69:60:46:e0:2c:89:ef:82:af:
                    ca:84:e5:0d:15:62:3c:90:da:db:b1:8f:86:79:80:
                    5b:f0:27:80:cd:f8:16:39:13:b5:05:fa:33:cf:30:
                    0b:40:03:4d:dc:3e:68:8b:1a:fd:0f:20:5e:70:90:
                    21:aa:8e:7f:6d:b6:91:66:c3:f2:da:98:22:34:52:
                    7f:b1:5c:71:b1:73:a2:cb:cc:21:99:c4:e7:2b:ce:
                    bc:2e:dc:30:6d:9f:9a:56:9b:d5:2f:2c:a3:65:e5:
                    f2:82:0d:ab:29:f1:c4:39:0a:b8:31:11:31:0e:b8:
                    e7:c6:96:5b:b7:80:be:28:2f:a7:79:1e:91:3a:49:
                    c0:5f:0c:1e:3c:81:c6:f7:56:02:34:db:1b:8e:0e:
                    bf:a3:88:1d:6c:ce:68:d2:b8:07:0c:73:0a:05:db:
                    12:1a:4e:0a:cf:9a:55:2c:a1:6f:60:13:db:08:65:
                    e0:e7:12:95:9e:3b:32:8a:6f:96:f3:79:df:ec:69:
                    54:1b:7b:6a:f6:fc:de:39:10:a1:20:87:26:c8:7c:
                    a9:8d:4b:81:64:f5:59:b9:49:a7:20:11:0f:33:61:
                    f3:46:bd:12:f1:f7:0e:fb:4a:55:fb:27:25:5e:0b:
                    86:c2:ab:5d:27:0c:fe:92:5b:e6:dd:57:f6:5e:29:
                    ef:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2A:9C:FC:98:3D:D7:9F:86:A3:38:AB:FA:94:11:E6:6B:2F:37:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7e0b5f2a-2894-3400-b60b-1d756437ba1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3a00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:7c:f3:3a:e1:3c:ae:5e:86:f6:41:54:02:0c:e3:29:e7:0a:
         8d:56:07:ad:fc:10:69:fe:82:26:11:ac:b4:0e:71:72:3f:7c:
         db:d6:10:f6:6f:e9:ce:a9:4e:7a:0f:9a:de:48:8f:85:f3:83:
         55:c1:07:31:f1:95:4b:b2:fe:1d:f2:40:e3:50:12:c1:4e:bc:
         56:b8:27:c1:92:a4:86:ad:2a:1b:01:54:1b:35:08:87:a4:87:
         f1:b6:30:9d:4b:ee:c9:24:43:1f:33:d3:69:2c:9c:72:97:b3:
         1a:e7:1f:18:bb:ab:a9:c9:81:b9:be:5c:ca:c8:d1:c7:8f:c4:
         69:2f:a0:72:23:66:71:f9:ca:db:d9:11:22:03:b0:34:bb:5d:
         6a:eb:2f:e2:43:a6:40:cc:62:0a:b9:a6:78:83:23:52:4e:dc:
         21:27:1c:97:6d:9c:12:79:77:46:79:45:86:87:2d:9a:7b:40:
         2e:87:30:f1:ba:b7:56:de:ef:33:13:b8:ca:99:9b:1c:12:22:
         cb:c9:03:22:65:2b:20:9e:e0:49:10:bb:f9:ae:96:b8:ae:27:
         f8:cd:68:ea:65:f4:06:23:82:36:80:bf:8e:6a:91:89:03:6c:
         eb:b9:53:ec:b0:b9:3f:95:bd:18:3e:dc:9f:3a:99:29:f7:ac:
         bf:7e:86:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:14:13 2024 by rpki-client on console-fra.rpki-client.org