Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dd3e2e5-35ec-3eca-8086-ef7275cb6ed4.roa
File:                     9dd3e2e5-35ec-3eca-8086-ef7275cb6ed4.roa (raw, json)
Hash identifier:          DiBjmwRvc7JNY26KG4pEkYn3rNkLgvto0dOygGZKcHA=
Subject key identifier:   2B:BA:98:EA:6A:D1:97:28:1D:1F:82:3F:89:72:C4:12:80:34:D9:A1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780266FD9753FF121313BEF40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dd3e2e5-35ec-3eca-8086-ef7275cb6ed4.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:3550::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:6f:d9:75:3f:f1:21:31:3b:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=d5b9fcdf-e891-438d-b19c-d98c434c14e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:64:a3:30:b8:5e:6e:7c:0f:a4:75:87:ee:
                    e0:13:c9:7c:e4:60:f4:df:f0:08:a4:57:c7:ae:43:
                    0c:bb:9d:3e:65:e5:ac:22:eb:5c:35:3a:7e:94:c0:
                    5d:19:55:55:9c:a3:18:cb:9a:86:7d:1f:61:32:c9:
                    c1:40:12:52:0c:91:e1:1d:5c:3c:7b:52:77:34:5b:
                    46:9e:79:8a:61:fb:ed:f7:dd:4d:3b:61:bd:13:3f:
                    19:a6:52:eb:32:8a:e2:87:ca:bc:0a:00:9d:66:55:
                    6f:e5:d0:b1:56:8a:a2:a9:c6:ac:fe:8a:d2:ff:e2:
                    69:f4:a0:3f:4b:24:e2:c6:ae:08:a7:bb:7e:7b:f5:
                    4a:08:6c:90:35:d1:a0:e2:76:f0:3f:85:0c:03:12:
                    75:66:0d:bf:8a:e8:63:a6:da:a3:14:90:24:27:dc:
                    cf:95:91:ad:91:7a:97:97:06:c9:c9:d6:42:ac:5f:
                    a7:01:54:24:75:8c:a0:b9:7a:35:06:72:36:93:39:
                    bc:7c:83:b5:6c:bc:4e:16:f9:2b:d3:22:ea:9e:de:
                    55:d2:0c:20:f4:74:7b:0b:3d:a8:9d:0b:38:fc:41:
                    27:9c:38:50:ed:c7:7e:9a:cf:91:fa:b5:3a:a3:39:
                    f5:3e:a6:10:1a:f5:c4:0d:3b:ed:76:a1:cc:78:1f:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BA:98:EA:6A:D1:97:28:1D:1F:82:3F:89:72:C4:12:80:34:D9:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dd3e2e5-35ec-3eca-8086-ef7275cb6ed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3550::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c1:0e:26:9d:3e:95:08:cb:e5:0f:e1:ed:6d:e3:c9:1e:1c:
         1e:91:10:b0:71:c7:f7:57:83:ad:ba:1b:eb:82:7c:e2:b3:39:
         a9:ba:2e:2c:ae:8e:42:77:98:0b:c2:12:b2:62:93:e1:6d:80:
         b0:5c:23:a2:ce:d0:15:34:33:97:b8:5b:29:7a:bb:f9:b9:55:
         9b:47:5f:2f:f8:14:08:47:ce:a1:9a:cb:e4:d9:45:e5:42:c5:
         44:72:f0:41:58:e3:25:3c:70:88:02:79:b8:16:53:11:41:9b:
         30:12:6e:16:9b:1f:d4:d3:eb:7e:62:9a:9b:fe:80:d1:89:71:
         10:aa:a5:2b:72:fa:f3:a6:13:e4:a8:b7:31:e8:03:ed:dc:33:
         77:a2:cd:d4:8d:62:7a:53:65:62:f2:54:ba:e0:05:10:bb:61:
         41:a6:55:02:aa:84:53:9e:88:29:a2:00:41:7f:04:27:dc:44:
         57:68:de:4b:c4:ec:74:17:2b:77:0f:75:76:f8:9d:71:40:e0:
         d9:dc:58:b4:f7:73:47:e3:96:26:dc:12:3e:76:a7:5b:90:ed:
         cf:48:d4:61:58:88:f8:9a:9f:5a:60:8d:39:f1:1a:85:f5:8d:
         42:e6:61:d7:70:44:7a:bb:80:8e:84:66:9f:56:de:41:f3:a7:
         d2:63:d0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:49 2024 by rpki-client on console-fra.rpki-client.org