Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9741c41f-2ce5-3f59-b624-fae571160220.roa
File:                     9741c41f-2ce5-3f59-b624-fae571160220.roa (raw, json)
Hash identifier:          kEoMl7jfrzTLv77fJ9o7xmniKZEGlG/HLWtzMXj+LG4=
Subject key identifier:   24:70:4A:7B:6E:4F:73:22:77:73:BB:95:98:F8:0C:4D:A2:ED:E4:64
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178FD2297C30DE9AFE36A00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9741c41f-2ce5-3f59-b624-fae571160220.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3e80::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:fd:22:97:c3:0d:e9:af:e3:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=d48de8f7-4967-4ebc-933e-26a93990fb3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:95:a3:a6:2f:1d:48:cf:f3:79:5b:fa:77:77:
                    b8:b5:e6:4b:5d:14:f8:2f:fd:30:3c:36:61:4b:60:
                    0e:ee:75:6c:74:5d:dc:3e:96:df:77:29:af:8b:fe:
                    52:f1:08:37:67:6b:35:dd:49:9d:5c:d7:64:08:ae:
                    95:9d:03:bb:46:96:cd:79:82:f0:fd:2f:eb:a8:2d:
                    c3:5e:3b:29:49:41:e1:33:28:00:1c:dc:2f:2d:d4:
                    74:93:bc:ce:ed:f0:c4:19:0a:46:b2:0c:c0:9d:e8:
                    21:86:83:f1:83:d6:62:27:17:1a:fb:b9:d7:6f:27:
                    93:a2:52:0b:d8:cf:bf:a9:3a:9b:e8:c3:25:9a:b5:
                    da:ad:b2:6d:b2:03:2c:46:17:2c:be:f5:e5:84:21:
                    f0:34:a3:d2:db:54:9a:f9:9c:0c:74:c2:a1:23:2a:
                    0a:86:51:8b:70:54:65:4c:d4:13:ae:ce:c8:e5:8c:
                    4f:62:ba:c8:7e:8b:ae:e6:17:84:35:12:09:39:31:
                    cb:ec:28:9e:13:c9:2d:d4:8a:a5:4b:ff:75:29:f1:
                    c3:d2:27:e1:6e:af:13:21:6b:c4:a4:c1:6d:05:44:
                    d3:c4:df:57:1f:94:99:51:e9:e1:40:37:05:ba:a1:
                    04:39:33:cb:2b:ec:d4:6b:9c:8b:cb:ef:34:e0:4f:
                    1b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:70:4A:7B:6E:4F:73:22:77:73:BB:95:98:F8:0C:4D:A2:ED:E4:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9741c41f-2ce5-3f59-b624-fae571160220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3e80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:07:d9:a2:f7:f2:62:20:ea:7c:c6:33:82:8a:0a:65:77:5a:
         be:4f:2a:60:9e:fc:45:7d:20:97:7c:09:3e:9b:2c:69:d7:3d:
         9f:d6:d4:95:be:fd:eb:c6:68:a2:46:a1:b5:e7:f1:93:e4:6f:
         94:70:0e:6d:90:fc:af:bf:ab:a1:6c:e0:ef:9e:00:bb:9b:6a:
         7d:23:2d:33:13:86:41:94:f5:90:ae:f2:0c:27:15:bf:ee:31:
         55:00:b6:1f:a8:ae:c9:37:97:6d:d1:57:5f:38:46:e9:7b:3a:
         bb:37:60:12:e1:7e:97:0c:7e:13:8a:8f:ef:4f:30:ce:cd:9e:
         c2:a6:a6:10:80:5c:95:c6:51:f1:67:c6:f1:25:49:16:b0:ba:
         6f:ae:a6:58:2b:26:03:a4:17:6d:9e:0d:4e:1f:ab:5b:d6:62:
         09:c4:e5:de:bc:ca:e4:c0:34:6f:fa:e4:87:3d:4a:77:d6:7f:
         eb:3c:83:06:3f:c5:f2:6b:58:55:35:4e:bc:91:6d:9c:6f:bc:
         bc:01:94:ee:15:81:3d:b6:bd:8c:6f:63:90:fb:c8:41:bd:c3:
         fb:71:86:25:26:c8:38:2f:65:52:eb:e9:86:73:7a:6a:da:9f:
         56:22:fa:87:7d:a4:4e:1b:cb:86:34:a7:9a:4d:68:1f:42:4e:
         de:71:1b:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXBeP0il8MN6a/jagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk
ZDQ4ZGU4ZjctNDk2Ny00ZWJjLTkzM2UtMjZhOTM5OTBmYjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZWjpi8dSM/zeVv6d3e4teZLXRT4L/0wPDZh
S2AO7nVsdF3cPpbfdymvi/5S8Qg3Z2s13UmdXNdkCK6VnQO7RpbNeYLw/S/rqC3D
XjspSUHhMygAHNwvLdR0k7zO7fDEGQpGsgzAneghhoPxg9ZiJxca+7nXbyeTolIL
2M+/qTqb6MMlmrXarbJtsgMsRhcsvvXlhCHwNKPS21Sa+ZwMdMKhIyoKhlGLcFRl
TNQTrs7I5YxPYrrIfouu5heENRIJOTHL7CieE8kt1IqlS/91KfHD0ifhbq8TIWvE
pMFtBUTTxN9XH5SZUenhQDcFuqEEOTPLK+zUa5yLy+804E8bTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCRwSntuT3Mid3O7lZj4DE2i7eRkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTc0MWM0MWYtMmNlNS0z
ZjU5LWI2MjQtZmFlNTcxMTYwMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQD6A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA8H2aL38mIg6nzGM4KKCmV3Wr5PKmCe/EV9IJd8CT6bLGnXPZ/W
1JW+/evGaKJGobXn8ZPkb5RwDm2Q/K+/q6Fs4O+eALuban0jLTMThkGU9ZCu8gwn
Fb/uMVUAth+orsk3l23RV184Rul7Ors3YBLhfpcMfhOKj+9PMM7NnsKmphCAXJXG
UfFnxvElSRawum+uplgrJgOkF22eDU4fq1vWYgnE5d68yuTANG/65Ic9SnfWf+s8
gwY/xfJrWFU1TryRbZxvvLwBlO4VgT22vYxvY5D7yEG9w/txhiUmyDgvZVLr6YZz
emran1Yi+od9pE4by4Y0p5pNaB9CTt5xGxM=
-----END CERTIFICATE-----
Generated at Tue May 7 12:32:44 2024 by rpki-client on console-fra.rpki-client.org