Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9210c6c8-6bb7-3c98-b4ec-14da309b70a0.roa
File:                     9210c6c8-6bb7-3c98-b4ec-14da309b70a0.roa (raw, json)
Hash identifier:          tEhvawPq7GXWuY7qfW7zfVv5JR9YEGK6b4gxSGYSWR4=
Subject key identifier:   5E:21:ED:D2:8D:FE:98:DA:82:5D:F9:33:43:11:B0:ED:18:DE:57:4F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C1790B83FBD2FE638A6AC188
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9210c6c8-6bb7-3c98-b4ec-14da309b70a0.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3c70::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:0b:83:fb:d2:fe:63:8a:6a:c1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=6c276b16-6221-42b0-9be3-a042ef22603e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6c:91:f7:23:d3:0a:8d:36:55:d0:6d:fb:51:
                    06:a1:d3:0e:c4:d1:c1:17:74:b5:91:06:4a:46:e2:
                    70:f6:53:a6:d7:87:7d:6a:7c:0e:4d:fc:2b:9c:ce:
                    c7:51:14:40:29:f5:49:a9:10:5e:18:ad:9a:62:91:
                    a0:88:d7:38:48:83:fa:97:a9:5b:71:c5:6c:de:f6:
                    39:35:31:4e:65:6e:dd:9c:04:20:d8:7a:ff:2a:36:
                    12:59:af:b4:ff:35:c0:dc:c8:7c:70:08:72:3f:db:
                    97:c8:62:1a:9c:12:c3:62:d2:58:16:d1:ec:b8:8c:
                    27:83:33:14:be:43:a5:e3:77:1b:d0:70:94:1d:50:
                    4a:4d:9c:e6:61:51:d5:c0:38:f5:f2:bb:bd:75:67:
                    8c:30:a4:80:ce:9d:86:8f:fa:8e:f5:8e:89:a3:ef:
                    fc:cc:62:2c:a6:5d:a9:a0:6d:33:98:10:36:70:41:
                    07:6b:59:2d:bb:46:ee:46:f7:32:aa:94:41:fd:88:
                    25:48:3a:da:05:cf:3c:cc:59:d8:9e:73:99:2e:0b:
                    12:4b:a7:5a:e4:dd:d0:8c:b8:be:f0:17:f6:cb:5c:
                    ea:1f:ae:3a:30:36:50:84:da:a1:b0:95:63:ba:a4:
                    65:9f:c1:6f:d1:dc:f8:3e:80:63:32:73:da:a2:45:
                    59:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:21:ED:D2:8D:FE:98:DA:82:5D:F9:33:43:11:B0:ED:18:DE:57:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9210c6c8-6bb7-3c98-b4ec-14da309b70a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3c70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:1e:7b:f7:73:e0:d7:81:15:27:9c:79:97:8a:37:a8:59:02:
         03:d3:05:11:9d:4f:e1:cb:df:c3:53:18:fe:e4:6e:cb:46:a4:
         68:3e:c0:e4:30:b8:10:c8:fc:61:b7:31:50:ea:c9:4f:9c:60:
         80:a2:17:c4:90:b3:10:ed:1f:91:a6:07:e3:cf:fa:fa:b5:7c:
         87:ad:03:29:10:b9:aa:41:a2:71:dc:57:0e:56:5f:79:d3:ae:
         b5:0d:bf:f4:10:82:6a:e5:6f:3e:7c:3f:01:3d:b5:d9:94:ed:
         d3:dc:c7:b8:8e:a4:04:69:27:88:79:fa:b5:29:36:8b:48:15:
         4d:cc:b2:f8:e1:88:1e:48:b2:c4:d4:10:a9:9a:4b:af:39:3a:
         1b:bd:06:0f:7f:c6:66:12:37:3b:57:21:f4:f8:4d:64:74:3a:
         14:28:d8:42:f5:df:ab:b7:f8:68:73:8e:cf:46:3e:90:99:fb:
         d9:36:f9:8c:6a:8a:15:5d:b5:a5:d7:d7:92:d5:05:be:d3:0f:
         11:a0:42:8d:ca:be:6f:62:98:70:21:2a:fb:14:ca:61:7c:ac:
         a3:b9:6d:49:61:8a:7e:3f:04:fa:86:b6:e2:dc:31:c3:a9:ed:
         f0:d5:fb:80:73:21:2e:08:58:b0:a2:88:44:55:f0:0a:59:a1:
         f5:ba:b9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:23:23 2024 by rpki-client on console-fra.rpki-client.org