Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a16e89d8-ed6d-3e3e-b7a1-ed3f28a1794d.roa
File:                     a16e89d8-ed6d-3e3e-b7a1-ed3f28a1794d.roa (raw, json)
Hash identifier:          6Mm1YBNC7wUPHvRrzB1r3t+oAakPA3YvSxKn9nZgV0U=
Subject key identifier:   7D:A8:47:B0:2E:2D:F7:D9:4F:0D:6E:2D:9B:24:D7:31:26:12:C1:21
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178F701C29731463A85D2C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a16e89d8-ed6d-3e3e-b7a1-ed3f28a1794d.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3fc0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:f7:01:c2:97:31:46:3a:85:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=f35a1b89-4c1d-4da6-b793-1ebcce49c166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:08:c5:9c:bc:21:7f:28:06:86:35:b4:ca:f6:
                    e8:bc:f5:32:14:31:ec:82:c8:f5:7c:dd:e6:df:bd:
                    65:40:85:40:4e:67:50:64:3d:29:7a:51:07:aa:32:
                    82:4c:8c:18:4d:3b:23:e4:5b:0f:c8:3c:65:f1:51:
                    b5:50:7a:dc:7f:1e:9f:11:a0:1d:3d:7b:58:2d:58:
                    30:08:77:d6:f9:6b:8b:46:a1:99:e2:14:ba:c1:eb:
                    a3:c8:91:b7:8b:61:97:75:a0:a4:16:17:86:eb:a5:
                    37:36:22:70:af:82:c1:8a:90:a9:cd:57:4a:b8:2a:
                    34:34:70:aa:1a:ae:8d:45:dd:ee:e2:b1:bb:80:d8:
                    8e:61:64:13:44:e7:cf:88:e2:9c:19:02:f6:71:6c:
                    9e:5c:de:55:ac:ef:34:2d:db:00:cc:59:d8:70:97:
                    3a:62:c5:1a:6c:33:6e:5c:4b:d1:51:22:24:07:6a:
                    d8:b5:fd:b8:64:ce:5e:0c:37:0d:09:9f:c5:53:7c:
                    23:e6:96:fc:f9:77:21:cc:67:d5:4b:ca:36:55:57:
                    84:ca:bb:b2:40:1f:e5:18:14:47:20:0d:e6:cd:26:
                    b7:9b:12:aa:cc:cc:3b:4e:0f:65:72:80:05:3f:c2:
                    84:4d:f7:2f:3d:9d:a4:e4:18:0f:04:8e:65:ba:0c:
                    53:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A8:47:B0:2E:2D:F7:D9:4F:0D:6E:2D:9B:24:D7:31:26:12:C1:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a16e89d8-ed6d-3e3e-b7a1-ed3f28a1794d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3fc0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:49:fa:ce:7c:b9:99:f4:62:52:fc:94:33:55:0f:a1:f0:03:
         38:2d:2a:bc:d8:80:59:d0:66:aa:9b:7a:ed:ed:15:98:53:08:
         4e:88:56:e2:29:47:83:ee:39:50:83:14:5a:0d:37:d0:0f:93:
         a1:1e:65:68:a2:f8:3e:67:da:e6:24:b5:34:d7:73:d2:de:ee:
         ed:d8:9f:03:08:6e:5d:b6:c1:31:1f:b1:6f:f0:13:67:e9:5d:
         44:e8:4b:7b:b9:3e:58:84:1a:7a:f6:19:66:15:d5:56:df:05:
         22:62:95:e9:67:45:b2:d5:ad:87:c4:96:ce:c7:6a:3c:7d:56:
         51:7c:63:8c:b0:fb:70:39:03:c3:5b:02:ce:ae:70:18:47:ca:
         73:dc:42:9f:4a:bb:c8:b2:38:aa:8c:12:0c:00:4d:8b:59:1b:
         2e:32:12:32:6f:c9:75:79:38:ae:bb:14:5a:56:06:f2:a3:83:
         01:6f:62:49:ec:b7:be:a4:f1:c5:76:15:6b:3a:a6:b2:4c:9c:
         52:e1:49:28:0f:cc:03:7f:04:4c:a0:fd:18:a3:03:d2:69:c7:
         a0:09:24:18:a4:95:be:d2:df:17:77:7f:cf:64:a3:ff:55:c5:
         8b:41:1b:d2:ff:f7:fc:58:47:9e:48:75:bd:37:f8:89:41:d9:
         fc:28:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:48:18 2024 by rpki-client on console-ams.rpki-client.org