Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dedd5e4-4ca8-3001-959c-e1e53f2134fc.roa
File:                     9dedd5e4-4ca8-3001-959c-e1e53f2134fc.roa (raw, json)
Hash identifier:          u2N8/G4SZfz85Gg4lpEuntiqcpRt7ioSV2waS7oTt+4=
Subject key identifier:   B9:4B:DD:EB:54:1B:9A:F4:69:2A:40:8E:8A:F0:44:18:DC:8B:77:24
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178ED73D0DBE2163E7C6F00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dedd5e4-4ca8-3001-959c-e1e53f2134fc.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3e70::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:ed:73:d0:db:e2:16:3e:7c:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=dc21426b-1237-4f83-8a60-07323c3e14e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4e:4c:61:90:e0:f5:85:f3:41:fe:24:ee:e0:
                    e5:cd:19:39:f1:7b:5e:47:a8:65:5b:8c:bc:df:f8:
                    8c:15:25:be:57:00:7d:a5:fc:33:aa:1d:36:5f:29:
                    5a:26:d6:57:ce:7c:f1:ca:f1:89:b2:c1:b4:b0:d5:
                    86:03:18:51:b9:28:05:69:ee:79:02:49:a0:53:df:
                    05:67:99:48:79:e8:f4:ed:cd:ca:e8:4c:a9:b8:d3:
                    34:88:59:df:b2:da:a4:c1:2f:16:4a:07:9f:fa:17:
                    b9:64:c9:f9:01:cc:42:8c:26:7d:01:43:43:1a:05:
                    27:3b:1f:5b:63:b8:a7:aa:ff:cf:0f:90:89:ca:c6:
                    32:46:b0:d9:db:2e:5b:8a:d8:03:a7:c3:94:36:af:
                    33:1f:49:57:23:20:ec:e3:06:81:79:32:b1:f7:6c:
                    84:8d:7d:e9:6e:cf:c0:ff:52:8d:25:5e:94:71:1d:
                    f9:2d:32:99:18:13:6b:ba:c9:74:ba:bc:a6:f9:db:
                    3e:1f:2b:95:7d:8f:a5:ce:2d:4e:ad:c6:9e:62:48:
                    2a:a1:f3:4c:98:cd:b4:45:64:df:0a:f2:c4:72:d9:
                    df:a1:6b:2c:28:32:2f:e3:b9:6a:75:de:35:94:3d:
                    4d:93:53:f1:ec:a5:21:bf:f7:b9:b6:87:72:64:e0:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4B:DD:EB:54:1B:9A:F4:69:2A:40:8E:8A:F0:44:18:DC:8B:77:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dedd5e4-4ca8-3001-959c-e1e53f2134fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3e70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:84:4e:54:5b:b8:08:15:85:02:a4:85:64:3d:b7:c4:0d:00:
         8f:27:ad:66:ee:be:78:0b:e0:45:d5:76:4e:31:76:bb:72:c0:
         cf:cf:f7:2f:a3:75:77:bd:eb:d8:ad:15:6d:97:c9:42:54:9d:
         0a:eb:c4:c8:9a:33:06:68:d6:81:6d:96:d3:93:e2:a8:e3:7f:
         9e:35:9a:32:6c:15:19:bf:21:7d:39:c0:25:ff:cf:97:11:ea:
         6c:30:52:a8:6c:56:90:05:01:0f:0c:f3:e0:c2:99:e5:3a:52:
         35:43:60:a5:24:24:cb:83:c5:2a:ce:f6:68:b2:b3:2d:b5:5b:
         41:1b:7c:ab:66:80:c7:41:88:7e:68:b9:b5:66:37:26:90:7a:
         a8:e6:e3:11:1c:c4:60:91:55:f4:3a:24:5f:f7:c1:52:e5:9f:
         ba:1b:78:69:a3:0b:ed:af:e4:8a:db:9b:bd:dd:71:0e:41:e3:
         bc:51:41:34:c6:21:b9:e2:b1:46:5f:3a:34:87:0c:62:b9:91:
         f5:47:79:75:32:ce:7b:49:55:49:f4:ae:79:dc:1d:07:41:e2:
         f4:f0:62:a1:8d:e6:35:83:c4:e9:db:e3:73:1f:10:68:da:4a:
         51:b4:5f:77:01:c9:14:78:d9:8b:e1:6b:86:64:0a:f0:9a:93:
         ab:d5:7a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:32:45 2024 by rpki-client on console-fra.rpki-client.org