Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8b2cb573-f42e-331f-9e05-5080dc8a5ad4.roa
File:                     8b2cb573-f42e-331f-9e05-5080dc8a5ad4.roa (raw, json)
Hash identifier:          d6w2QVrRasYM2Mlmck0c1uEK7MlzHzgtZxAVUaPnX5Q=
Subject key identifier:   58:C8:FE:0D:E2:35:62:B4:38:E1:F4:78:63:45:A2:76:06:55:80:E6
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C17908EF2C55221F3A04A100
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8b2cb573-f42e-331f-9e05-5080dc8a5ad4.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:2fe0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:08:ef:2c:55:22:1f:3a:04:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=58cbba3f-96e0-4262-ab2a-3ab4593425b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:a1:0f:96:f5:a1:8a:f4:c4:b2:67:eb:d6:
                    be:88:59:f0:46:83:6b:e0:cf:1c:1d:12:1e:0a:4d:
                    5e:e7:7a:59:6f:87:8d:f6:eb:8d:f5:44:ae:37:98:
                    8a:11:6b:d4:31:2f:90:70:72:c8:b5:d5:d5:69:b0:
                    f3:a6:ae:ed:02:dc:3c:e2:83:86:a3:db:91:90:81:
                    e8:c2:47:39:9e:35:b8:51:63:43:86:47:dd:0e:20:
                    de:95:5e:72:2c:3f:40:3d:2f:a4:c1:5c:49:c1:b3:
                    b9:9b:a3:c6:7b:28:40:64:65:65:8b:14:54:d4:e5:
                    e2:2d:52:54:63:ba:6a:1c:31:f4:dd:3e:96:e7:64:
                    3b:17:66:15:1c:8d:b2:5c:76:a1:ec:34:60:ff:3d:
                    4c:ce:90:19:cc:4e:a0:c7:8e:9b:fb:75:18:8b:b4:
                    30:f4:e7:99:6b:44:c3:1a:be:40:32:6c:06:ab:fb:
                    a0:81:5c:25:f5:30:0a:9c:fa:90:31:8f:15:cf:4b:
                    29:df:53:1c:ca:19:20:b2:1a:58:c7:04:99:f5:e7:
                    76:6b:d2:7a:80:1c:c9:18:1b:96:94:ea:38:f7:f0:
                    f7:b5:0d:5b:20:0f:b1:8f:dd:36:88:4e:62:e4:4e:
                    37:8e:a2:9e:da:9c:c8:19:b2:72:a2:35:38:fe:cd:
                    c4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C8:FE:0D:E2:35:62:B4:38:E1:F4:78:63:45:A2:76:06:55:80:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8b2cb573-f42e-331f-9e05-5080dc8a5ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2fe0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:60:22:d5:3d:c9:49:b3:fc:29:e8:b2:5e:b1:b3:33:25:21:
         20:5e:71:ab:57:cf:bc:75:8c:a5:dc:3c:1e:fa:d5:e7:f9:6f:
         57:bb:18:d3:f2:b7:b9:e4:63:eb:c4:36:de:43:85:e7:d0:87:
         78:01:24:3d:51:59:dd:ad:dc:b9:9f:e2:6c:5d:ae:45:37:e2:
         8d:c6:13:ce:57:2a:8e:fe:5f:e5:be:cd:38:09:ce:b8:9a:47:
         d7:84:e3:26:9e:c6:12:2c:0a:42:89:dd:56:09:24:f1:82:98:
         31:12:36:6a:f7:43:60:60:70:7a:78:3d:3f:84:98:09:ce:bd:
         2f:31:83:59:e3:eb:4f:2b:b7:77:f8:4a:7d:8f:ec:ec:bc:ed:
         c6:ae:ad:6c:3b:7a:b9:c4:1f:0d:42:80:f7:12:62:ae:91:b3:
         95:9f:69:74:d8:99:e9:60:64:29:1a:07:94:31:78:d4:01:b3:
         a5:57:f0:c4:9d:ec:42:1e:8c:1b:37:bd:f8:3e:f9:d8:63:19:
         21:ff:0b:32:d3:fb:3c:97:30:dd:f7:cf:f0:6a:4f:02:61:18:
         8d:2a:75:d2:ce:66:93:7a:9a:99:b3:4e:f0:96:30:54:91:7c:
         c3:ce:9b:78:fd:42:1c:fa:90:45:5e:5c:dc:88:66:21:96:db:
         36:69:3e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:25:44 2024 by rpki-client on console-fra.rpki-client.org