Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8240cce3-1c65-3553-b192-b83186bdcb5c.roa
File:                     8240cce3-1c65-3553-b192-b83186bdcb5c.roa (raw, json)
Hash identifier:          VCnDpZ1teD6YoL8/HlPPP0lCjzuTQO2SMy0zBiwVhMk=
Subject key identifier:   D7:64:0B:48:34:5B:ED:DB:2E:80:B1:9C:F7:81:33:11:C6:85:6E:F7
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C1790AD60133E3A36846C380
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8240cce3-1c65-3553-b192-b83186bdcb5c.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3bc0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:0a:d6:01:33:e3:a3:68:46:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=98b3b9ea-4c90-429e-b52f-247e0a862103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:30:8a:79:be:59:eb:c2:e4:71:a6:23:7a:92:
                    68:7b:30:5b:d0:e1:c8:29:ee:de:ff:b8:d5:c1:f0:
                    6a:d4:dc:73:70:70:2a:27:24:a0:82:1d:ff:cf:a5:
                    78:39:2b:b8:b1:0f:28:6f:46:03:28:18:e7:c2:66:
                    ab:8c:17:cd:e2:9a:f7:a3:ad:a8:67:c7:ea:fd:13:
                    86:60:dc:f3:77:5e:28:e9:e4:94:9c:bc:b5:03:1e:
                    15:04:ef:00:3b:b1:74:0a:55:59:81:4f:a3:6a:a8:
                    cc:d5:d5:c1:bc:c1:9c:19:25:30:16:48:1f:e5:b5:
                    17:88:cb:63:dd:ba:4c:0a:5b:f1:de:6a:e8:78:e5:
                    ce:a2:08:91:d0:39:af:98:a6:6a:91:a1:87:1c:66:
                    7c:b3:74:95:78:6e:26:39:57:3f:b5:2e:c9:cf:4d:
                    e7:77:e0:8a:aa:4f:a4:88:f2:2c:d9:30:9e:cd:d6:
                    88:90:ed:5e:84:cd:e8:91:5d:6d:d0:1a:f4:13:6a:
                    f9:5e:2c:f8:61:a7:7d:5a:e1:90:60:12:ca:5e:92:
                    fd:08:d6:bf:21:a0:66:e6:40:c1:65:6e:40:19:0b:
                    b1:9b:e7:1c:37:af:47:f1:8b:a5:d0:49:94:cd:6b:
                    03:16:90:9e:cf:9d:72:bd:9a:3d:f1:8a:82:92:d1:
                    7e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:64:0B:48:34:5B:ED:DB:2E:80:B1:9C:F7:81:33:11:C6:85:6E:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8240cce3-1c65-3553-b192-b83186bdcb5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3bc0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:1c:8b:1e:4c:41:44:93:29:86:4d:63:9e:75:96:ed:03:ff:
         e1:33:16:89:f1:d9:b9:40:1c:10:cf:ad:aa:b0:a7:b6:1a:db:
         66:4f:57:b7:10:70:45:2e:23:b8:b8:60:f3:dd:7c:a0:8b:99:
         e7:76:71:1d:97:f3:9f:74:c0:e1:9f:33:ee:52:aa:1e:32:8e:
         a5:40:31:2a:33:17:81:ee:fc:f6:0a:1f:89:ed:dd:71:70:33:
         c8:5c:8f:53:03:7c:eb:65:bf:88:64:84:24:e4:ae:f0:63:d3:
         89:ad:5e:f5:63:ae:1a:be:73:72:0a:92:9b:60:18:2b:ee:0e:
         4b:17:e4:c1:ba:50:91:10:f6:36:5c:4d:1b:d5:e8:f4:7e:42:
         89:3f:e0:60:ed:3d:fd:05:29:da:d8:8a:6c:01:42:cc:dd:74:
         c8:09:26:21:1d:7d:72:71:bd:37:c9:6e:b7:5e:4a:77:06:78:
         d9:7c:ad:e8:31:21:3d:7e:69:7a:9c:d3:5b:c3:fe:a1:7b:29:
         99:dd:57:37:db:94:07:f7:98:a0:b1:d0:ea:b6:97:af:ab:50:
         4a:3f:f9:d5:a1:26:ab:f2:a5:62:1d:d2:98:91:0d:2b:ac:e6:
         d1:23:35:03:02:37:30:cd:62:be:b6:1a:c6:3b:70:71:d3:cb:
         36:0d:e2:f4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXBeQrWATPjo2hGw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk
OThiM2I5ZWEtNGM5MC00MjllLWI1MmYtMjQ3ZTBhODYyMTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TCKeb5Z68LkcaYjepJoezBb0OHIKe7e/7jV
wfBq1NxzcHAqJySggh3/z6V4OSu4sQ8ob0YDKBjnwmarjBfN4pr3o62oZ8fq/ROG
YNzzd14o6eSUnLy1Ax4VBO8AO7F0ClVZgU+jaqjM1dXBvMGcGSUwFkgf5bUXiMtj
3bpMClvx3mroeOXOogiR0DmvmKZqkaGHHGZ8s3SVeG4mOVc/tS7Jz03nd+CKqk+k
iPIs2TCezdaIkO1ehM3okV1t0Br0E2r5Xiz4Yad9WuGQYBLKXpL9CNa/IaBm5kDB
ZW5AGQuxm+ccN69H8Yul0EmUzWsDFpCez51yvZo98YqCktF+ewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNdkC0g0W+3bLoCxnPeBMxHGhW73MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODI0MGNjZTMtMWM2NS0z
NTUzLWIxOTItYjgzMTg2YmRjYjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQDvA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABccix5MQUSTKYZNY551lu0D/+EzFonx2blAHBDPraqwp7Ya22ZP
V7cQcEUuI7i4YPPdfKCLmed2cR2X8590wOGfM+5Sqh4yjqVAMSozF4Hu/PYKH4nt
3XFwM8hcj1MDfOtlv4hkhCTkrvBj04mtXvVjrhq+c3IKkptgGCvuDksX5MG6UJEQ
9jZcTRvV6PR+Qok/4GDtPf0FKdrYimwBQszddMgJJiEdfXJxvTfJbrdeSncGeNl8
regxIT1+aXqc01vD/qF7KZndVzfblAf3mKCx0Oq2l6+rUEo/+dWhJqvypWId0piR
DSus5tEjNQMCNzDNYr62GsY7cHHTyzYN4vQ=
-----END CERTIFICATE-----
Generated at Tue May 7 18:12:09 2024 by rpki-client on console-fra.rpki-client.org