Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/89d971b5-6ff2-3941-9e01-29db34b76379.roa
File:                     89d971b5-6ff2-3941-9e01-29db34b76379.roa (raw, json)
Hash identifier:          iR8LlPwZ+X7t48uv/ng5gI+HovvPt+L5dfihI7GMGU4=
Subject key identifier:   3D:89:9F:AA:23:33:23:79:41:D1:39:34:0E:EB:ED:C3:84:10:61:45
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802672BE7F8FA7983CED1E40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/89d971b5-6ff2-3941-9e01-29db34b76379.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:4190::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:72:be:7f:8f:a7:98:3c:ed:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=0faf94d9-7de5-430a-afa4-383aa2d457e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0d:08:35:68:a0:18:49:17:95:49:17:29:f6:
                    5a:bd:85:a9:be:fc:ab:48:37:14:5c:98:36:76:e2:
                    b9:ea:59:be:c6:31:81:b9:ee:18:99:64:66:42:11:
                    00:e2:a8:06:03:2f:f2:cd:45:80:0a:08:d0:53:42:
                    41:fe:d3:34:59:1d:9d:6d:0d:a8:e2:87:d3:1b:bd:
                    22:45:f3:1d:76:51:c5:72:7c:cc:dc:5e:fe:62:df:
                    06:bc:93:10:67:72:39:4a:53:a3:97:05:17:ca:34:
                    88:3a:c3:f8:13:d6:ba:5f:98:64:a6:2b:ea:75:38:
                    38:8f:f4:8c:0e:6f:00:1f:22:27:b0:3a:e1:d4:45:
                    62:53:71:3e:7a:88:64:f9:98:80:91:5e:b3:c9:a1:
                    7b:83:39:a7:b5:4e:68:1f:16:04:20:46:f8:bc:64:
                    3a:ac:6f:e2:2d:31:65:15:3e:fd:e3:11:ec:f0:ea:
                    15:47:f7:d2:91:c6:52:97:02:17:bf:15:18:00:28:
                    75:d6:8d:54:a3:8c:0a:c9:9d:22:a1:54:86:98:1f:
                    d3:7b:6c:a9:f7:c1:87:27:21:5a:7c:4d:16:de:fd:
                    58:40:11:6f:2c:53:1a:cb:ff:c5:04:89:ee:a9:57:
                    0a:8e:d4:c8:ed:15:bd:ee:66:ac:25:67:da:67:a6:
                    49:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:89:9F:AA:23:33:23:79:41:D1:39:34:0E:EB:ED:C3:84:10:61:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/89d971b5-6ff2-3941-9e01-29db34b76379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4190::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:16:31:98:88:68:6a:c9:6e:86:7d:93:ee:eb:4e:07:ee:49:
         10:4b:b4:a2:97:51:a6:7e:e5:86:27:e9:cf:21:38:ad:b0:e2:
         ed:31:79:d1:c3:53:c4:12:09:10:fe:7c:57:45:53:36:14:f3:
         82:60:d2:f9:64:1b:73:9f:b6:ae:ed:67:e4:f6:83:49:28:0a:
         78:3b:54:ea:ca:b2:55:ff:68:78:c9:8c:72:af:79:94:11:17:
         1d:86:f2:ca:77:d4:32:04:57:ab:b1:a8:95:9f:87:11:3e:b2:
         1c:20:39:4c:39:30:a9:b2:ff:52:15:73:3b:82:95:94:9f:94:
         2b:78:7a:12:3c:5e:00:54:be:1a:d2:88:4f:3c:47:05:da:bf:
         3f:f1:6b:0b:75:62:e3:44:e8:f2:94:c0:4e:2c:98:d2:60:b6:
         ca:17:80:3a:0c:35:82:a3:63:0c:37:29:e2:b9:3c:c0:11:d7:
         d6:79:15:30:27:46:78:cd:4f:2b:2a:dd:18:4a:a9:ac:ea:5c:
         ca:83:ef:be:83:b8:42:03:df:70:5b:a4:c4:61:a5:3c:a5:8a:
         62:f1:c3:f5:6b:16:e3:ac:9c:ac:43:64:02:04:d6:bc:c7:8b:
         9c:30:0c:ac:6f:02:b3:df:b1:24:ad:24:2f:86:9f:ac:11:40:
         7c:88:cd:04
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJnK+f4+nmDztHkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
MGZhZjk0ZDktN2RlNS00MzBhLWFmYTQtMzgzYWEyZDQ1N2U0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw0INWigGEkXlUkXKfZavYWpvvyrSDcUXJg2
duK56lm+xjGBue4YmWRmQhEA4qgGAy/yzUWACgjQU0JB/tM0WR2dbQ2o4ofTG70i
RfMddlHFcnzM3F7+Yt8GvJMQZ3I5SlOjlwUXyjSIOsP4E9a6X5hkpivqdTg4j/SM
Dm8AHyInsDrh1EViU3E+eohk+ZiAkV6zyaF7gzmntU5oHxYEIEb4vGQ6rG/iLTFl
FT794xHs8OoVR/fSkcZSlwIXvxUYACh11o1Uo4wKyZ0ioVSGmB/Te2yp98GHJyFa
fE0W3v1YQBFvLFMay//FBInuqVcKjtTI7RW97masJWfaZ6ZJiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD2Jn6ojMyN5QdE5NA7r7cOEEGFFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODlkOTcxYjUtNmZmMi0z
OTQxLTllMDEtMjlkYjM0Yjc2Mzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEGQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAEWMZiIaGrJboZ9k+7rTgfuSRBLtKKXUaZ+5YYn6c8hOK2w4u0x
edHDU8QSCRD+fFdFUzYU84Jg0vlkG3Oftq7tZ+T2g0koCng7VOrKslX/aHjJjHKv
eZQRFx2G8sp31DIEV6uxqJWfhxE+shwgOUw5MKmy/1IVczuClZSflCt4ehI8XgBU
vhrSiE88RwXavz/xawt1YuNE6PKUwE4smNJgtsoXgDoMNYKjYww3KeK5PMAR19Z5
FTAnRnjNTysq3RhKqazqXMqD776DuEID33BbpMRhpTylimLxw/VrFuOsnKxDZAIE
1rzHi5wwDKxvArPfsSStJC+Gn6wRQHyIzQQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:21 2024 by rpki-client on console-ams.rpki-client.org