Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f7a67f4-52f5-36cc-8966-9370a9c53b2f.roa
File:                     7f7a67f4-52f5-36cc-8966-9370a9c53b2f.roa (raw, json)
Hash identifier:          tNzuHN6XM2S4XkxyVl4qtTkZpfYw37mp+PuWbVvAjyY=
Subject key identifier:   9B:4B:BA:98:58:4D:AD:6E:05:FD:1C:61:96:2E:D7:8A:19:EC:02:6D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178E47A59D1415A4C019A50
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f7a67f4-52f5-36cc-8966-9370a9c53b2f.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:2b40::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:e4:7a:59:d1:41:5a:4c:01:9a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=94399444-8fc9-4c58-a6a5-eafb9606f7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:af:b5:4e:d0:f8:57:5f:d6:cf:37:0f:fe:a1:
                    6a:33:88:c0:b9:61:ec:ce:b3:e2:37:5b:59:7b:62:
                    e6:46:b7:2d:15:39:3c:0b:6c:04:0d:a1:d0:f9:75:
                    72:89:4b:2b:fe:10:e3:14:1c:65:d5:9f:d5:f4:fe:
                    61:96:cf:77:8e:6c:2f:c6:7b:6f:ba:87:24:6e:7b:
                    4b:02:57:4d:1f:88:3c:5f:d5:38:61:07:46:b0:91:
                    d9:ea:4a:2c:87:42:14:18:dd:bd:5f:7a:e5:e3:ff:
                    35:1e:f0:7b:50:9d:e6:11:a1:c5:65:12:d0:e6:45:
                    c6:27:15:92:d0:81:76:80:59:d1:56:05:03:a5:fa:
                    73:6e:bc:81:3b:68:a2:79:f3:98:52:5f:fa:b0:2b:
                    7e:f4:82:17:42:26:63:7b:5f:f4:42:0c:a6:bb:0b:
                    02:d3:4a:52:37:2e:e2:0e:08:6b:5b:b3:fd:2a:f3:
                    78:22:59:e9:42:b9:e0:51:eb:42:25:65:b2:14:08:
                    8e:df:f7:89:29:cc:07:a4:2f:f6:10:46:0c:09:af:
                    88:2c:9c:46:ff:f2:a6:16:a6:37:6e:a9:ac:1d:13:
                    cb:61:1f:93:3f:b4:f9:1a:79:6e:6b:2a:c2:3c:e3:
                    7c:44:21:ee:28:1b:10:2f:ef:8d:b3:f1:ca:75:f4:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4B:BA:98:58:4D:AD:6E:05:FD:1C:61:96:2E:D7:8A:19:EC:02:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f7a67f4-52f5-36cc-8966-9370a9c53b2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2b40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:27:c6:33:c6:13:f8:65:5d:c2:01:1f:4c:00:a5:9c:5c:a5:
         e0:9a:d2:d0:77:68:38:1c:e4:dd:77:99:09:24:ac:e1:05:f4:
         b7:4e:0b:30:fd:4b:e1:07:d1:c4:f0:13:5f:3c:12:a9:9a:61:
         69:9e:7c:d7:86:de:26:06:59:ff:a2:2b:d0:75:ef:71:b4:98:
         55:31:d9:6d:5a:02:46:a6:b8:1c:bb:80:66:d9:fe:0c:9a:01:
         8a:f6:bc:79:73:33:08:74:f2:9d:78:90:ba:be:4b:66:5e:1f:
         a5:66:91:1d:f9:cc:16:a8:69:2a:bf:be:45:bb:65:aa:60:b6:
         df:06:d9:6b:73:f3:69:50:b9:33:24:0c:eb:fb:bd:f5:4e:17:
         5a:a9:87:db:ba:01:5b:5e:ce:16:44:00:7d:7e:e1:89:ca:dd:
         92:91:9a:24:e5:cc:97:3b:ab:d3:76:12:4a:12:93:f7:7e:cd:
         69:0e:c8:29:3d:62:51:ad:df:f1:5b:2c:20:e7:6c:52:35:c6:
         d2:df:1c:c4:53:06:66:81:ed:02:14:ee:79:91:b0:70:f2:0d:
         d5:4b:41:fd:71:db:ee:97:b4:21:61:01:eb:ec:fa:85:16:8a:
         0f:1c:2f:ac:c7:04:2b:45:e5:3e:d9:20:69:4c:7c:0b:7e:4b:
         a7:aa:7e:63
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXBeOR6WdFBWkwBmlAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk
OTQzOTk0NDQtOGZjOS00YzU4LWE2YTUtZWFmYjk2MDZmN2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6+1TtD4V1/WzzcP/qFqM4jAuWHszrPiN1tZ
e2LmRrctFTk8C2wEDaHQ+XVyiUsr/hDjFBxl1Z/V9P5hls93jmwvxntvuockbntL
AldNH4g8X9U4YQdGsJHZ6kosh0IUGN29X3rl4/81HvB7UJ3mEaHFZRLQ5kXGJxWS
0IF2gFnRVgUDpfpzbryBO2iiefOYUl/6sCt+9IIXQiZje1/0QgymuwsC00pSNy7i
DghrW7P9KvN4IlnpQrngUetCJWWyFAiO3/eJKcwHpC/2EEYMCa+ILJxG//KmFqY3
bqmsHRPLYR+TP7T5GnluayrCPON8RCHuKBsQL++Ns/HKdfTqGQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJtLuphYTa1uBf0cYZYu14oZ7AJtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvN2Y3YTY3ZjQtNTJmNS0z
NmNjLTg5NjYtOTM3MGE5YzUzYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQCtA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACAnxjPGE/hlXcIBH0wApZxcpeCa0tB3aDgc5N13mQkkrOEF9LdO
CzD9S+EH0cTwE188EqmaYWmefNeG3iYGWf+iK9B173G0mFUx2W1aAkamuBy7gGbZ
/gyaAYr2vHlzMwh08p14kLq+S2ZeH6VmkR35zBaoaSq/vkW7Zapgtt8G2Wtz82lQ
uTMkDOv7vfVOF1qph9u6AVtezhZEAH1+4YnK3ZKRmiTlzJc7q9N2EkoSk/d+zWkO
yCk9YlGt3/FbLCDnbFI1xtLfHMRTBmaB7QIU7nmRsHDyDdVLQf1x2+6XtCFhAevs
+oUWig8cL6zHBCtF5T7ZIGlMfAt+S6eqfmM=
-----END CERTIFICATE-----
Generated at Mon May 6 22:48:15 2024 by rpki-client on console-ams.rpki-client.org