Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ca0fee5-bc09-3da4-8575-40bc82953498.roa
File:                     9ca0fee5-bc09-3da4-8575-40bc82953498.roa (raw, json)
Hash identifier:          9pkPKQkV/ANMagCw7AbDbglxqELx3bYM0CbszVI4AO8=
Subject key identifier:   4E:55:35:33:9A:2D:A5:AD:24:1F:E4:90:BB:FC:AA:FB:73:7C:25:F3
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178D403049310FEBA766400
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ca0fee5-bc09-3da4-8575-40bc82953498.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:2850::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:d4:03:04:93:10:fe:ba:76:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=5e7c0d02-424f-49f5-afff-0c661dae1187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b4:96:4b:cc:ea:40:ca:94:4c:1c:65:89:65:
                    d1:18:6d:8d:39:7b:95:8f:60:5f:74:3d:61:8d:e8:
                    0d:1a:a9:cb:59:22:cc:57:9f:11:64:61:5b:4e:74:
                    05:43:56:a3:a3:b6:2d:6d:c8:43:b0:8c:98:b5:b7:
                    9b:ab:35:8b:12:8a:57:c6:1d:c2:b5:fa:ee:09:d0:
                    2f:1f:35:57:9c:0a:d4:55:60:59:9d:b1:5e:a1:82:
                    c4:61:db:5b:95:c2:ea:40:dc:df:45:cd:a4:07:da:
                    83:63:8b:dc:ce:39:97:77:e2:f3:da:5f:13:58:39:
                    60:7e:4c:81:c0:3d:8f:01:fd:e3:88:35:d4:15:76:
                    05:c2:ba:59:3a:d1:16:f5:87:53:58:3d:cb:34:91:
                    9e:fe:f6:dc:01:c3:28:f3:98:e7:8e:f6:cf:72:fa:
                    02:40:63:be:ca:d7:bf:57:78:88:8c:01:14:5d:8c:
                    8a:65:1a:c2:86:da:74:1b:01:26:a7:22:2c:bd:6d:
                    cb:04:a4:b8:44:90:74:98:c3:ea:77:34:72:26:8a:
                    43:d9:68:15:ed:d1:20:c5:45:d5:cd:74:bb:86:f1:
                    27:e4:8c:aa:b1:fc:d4:f1:18:d5:6d:3f:f8:44:44:
                    85:c3:03:0d:8a:d3:8e:49:f0:12:46:f7:d4:ba:7e:
                    52:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:55:35:33:9A:2D:A5:AD:24:1F:E4:90:BB:FC:AA:FB:73:7C:25:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ca0fee5-bc09-3da4-8575-40bc82953498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2850::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:b5:3c:8f:f6:e6:34:94:d5:2a:1e:7b:38:4b:4a:61:b9:1c:
         bd:99:c0:18:31:d4:88:25:5f:64:f1:ee:78:5e:ce:72:12:26:
         4d:3d:1c:1b:31:1a:c5:64:a1:1f:80:25:57:39:58:99:31:15:
         4f:e1:46:df:0e:c5:52:5e:c3:7e:69:7e:dc:7d:fd:c8:ab:72:
         5b:17:20:15:cc:ae:aa:a5:bd:71:81:b8:e0:a8:52:24:7d:bc:
         88:6e:4e:48:f3:d8:29:f1:5d:c5:a9:88:29:d8:c3:55:07:d6:
         05:c1:a1:1c:aa:d6:36:84:1b:c6:d6:9c:89:dd:fe:e4:8a:ca:
         43:fc:9b:9c:6f:e2:e5:19:15:c1:90:d8:80:43:b5:b1:6b:34:
         ec:a7:da:92:8b:9a:e7:f3:3f:a7:53:d0:2e:dd:5b:79:b5:b9:
         01:58:b8:02:56:06:46:84:c1:25:a2:1a:f7:f4:9c:de:c0:70:
         ef:3a:69:24:e9:4e:95:74:6b:3c:87:43:a9:2b:8b:fb:14:7e:
         b7:e7:da:b4:8a:f7:5b:e9:5e:a8:3e:4f:26:95:53:94:28:a3:
         4d:f2:43:7b:d2:ca:f2:61:9c:e0:d4:90:b0:ab:69:64:29:20:
         98:32:b9:a1:fb:20:1f:8e:57:fa:b3:a8:c8:c0:65:a6:d6:f3:
         c0:47:83:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:25:44 2024 by rpki-client on console-fra.rpki-client.org