Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9a29ad09-56b5-3d91-be7d-8a25231f0b2c.roa
File:                     9a29ad09-56b5-3d91-be7d-8a25231f0b2c.roa (raw, json)
Hash identifier:          Cjdop1CouJb16UMHoue3gtYvk1mTI0GDft4ZAAfU5Wg=
Subject key identifier:   72:C2:1A:61:BB:F9:78:F9:23:CD:D9:24:D0:98:C8:F2:2F:EF:D7:7E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178D2BE4B4259A405B6BE00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9a29ad09-56b5-3d91-be7d-8a25231f0b2c.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3900::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:d2:be:4b:42:59:a4:05:b6:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=92a0a720-18fc-43ce-84bd-7f7213df50ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a2:81:72:e9:a7:3f:e1:d9:a8:ce:ab:6d:ab:
                    5c:d1:9e:58:0c:b7:58:6c:e6:e3:bb:2e:d8:41:16:
                    ff:9d:4c:32:db:91:29:85:83:d3:ca:22:64:53:9b:
                    c3:8d:ca:35:a8:78:b9:c1:69:37:c9:6a:16:69:b6:
                    32:00:c7:55:b9:79:b3:00:18:eb:fb:c7:43:f8:12:
                    8c:8e:00:3c:af:76:f6:64:86:48:00:7a:62:17:04:
                    68:42:a6:52:db:9a:5c:3b:61:ef:29:36:dc:0e:56:
                    49:8d:02:54:bd:de:13:b1:15:7c:d5:62:b0:85:6a:
                    c7:1d:2e:21:01:9a:79:17:36:07:c7:b4:a3:fb:19:
                    f0:48:59:ca:d4:2d:ad:9b:6e:9a:8a:87:65:17:e4:
                    26:ac:f2:d2:0b:da:0b:93:e8:24:0b:7b:34:db:bc:
                    7a:cc:7e:39:07:01:6f:7e:3e:3c:42:14:ac:80:b2:
                    2c:21:09:23:ac:f9:2c:af:d1:91:cb:0b:5d:eb:0b:
                    dd:43:34:87:8b:bb:4c:3a:e1:f4:fe:33:9f:22:f7:
                    ba:f0:f3:e7:1b:5f:d6:35:26:f5:8b:ef:3a:de:9b:
                    76:9a:f5:ef:56:3d:68:63:8b:ff:e7:db:a8:23:b5:
                    c6:f8:de:9f:4e:8c:fe:95:f9:10:dd:91:a3:a8:62:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C2:1A:61:BB:F9:78:F9:23:CD:D9:24:D0:98:C8:F2:2F:EF:D7:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9a29ad09-56b5-3d91-be7d-8a25231f0b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3900::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:1b:dc:b8:43:e4:b9:33:86:38:5b:34:dd:62:60:c0:97:85:
         65:6a:a4:f7:97:37:7e:0e:f5:b1:a3:14:0b:31:10:95:33:ce:
         a2:41:32:80:b0:eb:2f:18:2d:f9:ee:2a:ed:43:f6:e0:86:2a:
         1c:b5:ba:cd:7c:3b:ab:aa:6a:05:1f:f0:62:8d:fc:06:64:fe:
         a6:21:45:79:5b:fe:07:9d:e7:e9:3e:f5:c2:b5:2f:8d:89:11:
         a4:10:a2:87:7d:b1:11:f4:9f:44:cb:f3:13:ca:3f:70:fb:76:
         90:56:88:d4:2c:f1:f8:0e:68:68:e2:c8:f9:0d:3d:49:26:21:
         d0:80:6a:d1:27:55:00:1d:f6:7b:7e:97:20:84:7b:92:f6:5e:
         43:5b:e4:9e:d9:75:2b:f9:5d:d8:ea:5e:77:d1:d0:0c:ee:c9:
         f2:bc:dc:be:ec:5d:70:5c:50:5a:bd:3b:c9:ed:75:4a:38:36:
         3c:bc:3f:e5:e3:74:d8:87:96:84:3b:d7:47:92:9a:bd:56:d2:
         ba:fb:d7:23:c8:39:c2:dd:09:0f:12:86:ed:a5:59:46:4e:95:
         68:96:a0:cd:90:48:be:d9:84:c9:d2:96:74:33:87:55:bd:f1:
         87:71:7f:80:1d:58:4d:7e:50:f7:a9:b7:95:91:c7:c3:4a:ca:
         ce:13:42:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:14:15 2024 by rpki-client on console-fra.rpki-client.org