Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5dc3494-ff08-377e-8acd-c3c85e0f7f38.roa
File:                     a5dc3494-ff08-377e-8acd-c3c85e0f7f38.roa (raw, json)
Hash identifier:          rBlkW/30mHOK3Ee1IhRhcNZ3ybLqN2EnDKURtOkoo2c=
Subject key identifier:   87:EA:A1:3F:E7:F0:0D:55:2F:E5:31:8D:0E:A1:93:DD:69:42:AE:6B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802672E1BFB7AC62F822EDC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5dc3494-ff08-377e-8acd-c3c85e0f7f38.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:38a0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:72:e1:bf:b7:ac:62:f8:22:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=38c06247-10dc-416b-9701-ab6a8372401b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:27:3d:af:02:f5:a8:50:8d:cc:63:c3:7c:a3:
                    d3:f3:d3:ac:67:6f:3e:60:f6:db:c7:f0:79:b1:de:
                    f6:71:d2:9c:53:ea:4c:ee:96:67:02:39:84:79:00:
                    07:5a:03:b1:67:3a:fb:fb:75:8e:f4:44:c9:cb:57:
                    5b:ea:e5:b6:0a:6a:ae:19:96:81:85:5e:ee:7f:c8:
                    9a:ed:b8:3e:45:71:cb:e9:1a:f6:c3:80:6a:52:e8:
                    dc:a4:9e:25:1f:0d:de:7b:c3:e6:9c:b8:fe:9d:1f:
                    ab:6c:1f:70:d5:5d:9d:b4:14:8e:22:59:dc:67:f9:
                    77:57:ff:30:77:d5:f2:07:8f:0a:29:77:2f:ef:3d:
                    e7:fd:3b:b7:6e:c8:77:47:17:bf:c8:60:c0:2e:9c:
                    86:61:c2:71:f7:7f:18:95:65:ad:2a:e2:ec:2d:3b:
                    9e:d5:54:78:57:65:01:5e:50:5a:fd:0f:ec:44:ad:
                    0e:6f:80:b0:cb:ad:a2:e8:90:0f:db:83:f4:63:32:
                    52:4f:05:62:7e:a4:c8:a8:02:9d:b7:4c:9a:d0:71:
                    3c:75:4f:af:a6:63:3b:fa:e5:47:0a:73:bb:9d:d7:
                    8d:47:56:a0:fa:df:03:aa:dc:59:49:64:bb:61:66:
                    b0:60:7d:59:d6:b4:9c:29:e3:64:ba:14:f6:8a:5c:
                    de:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EA:A1:3F:E7:F0:0D:55:2F:E5:31:8D:0E:A1:93:DD:69:42:AE:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5dc3494-ff08-377e-8acd-c3c85e0f7f38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:38a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:a1:6e:79:3c:3a:fe:a6:bc:ce:fc:a0:2f:54:60:d9:d9:5e:
         d9:47:97:4d:f1:fa:b1:4f:20:7c:35:02:10:cc:9b:0e:b9:78:
         c4:32:1f:5b:bd:3a:54:de:b9:44:fa:cd:a0:f9:52:6f:12:38:
         d3:6c:fd:05:2a:0b:49:ff:6d:1f:6f:ea:59:16:d2:35:48:b2:
         04:78:77:c0:d9:58:48:79:59:fa:9e:49:eb:dc:ef:e0:92:9e:
         ff:91:b2:5f:a0:e4:2a:d6:d1:42:7f:e7:c5:bd:5d:b3:2c:21:
         a0:51:2b:42:20:2f:5d:34:e4:cd:0d:6c:e1:8c:11:7e:59:77:
         4b:00:ae:c0:17:3b:ff:f2:06:34:23:de:81:3c:77:78:1d:97:
         d4:76:6c:d5:a9:ba:8f:3a:1f:17:51:66:f1:cb:02:63:65:a4:
         34:c1:e0:3a:2c:b5:59:a6:19:f6:b9:04:10:fb:21:12:ea:57:
         ee:67:b9:96:e1:d3:cb:dc:d3:80:66:2a:ed:f6:86:74:2f:2b:
         04:52:17:63:a8:2f:51:22:8a:8a:98:ea:d1:8e:62:b2:26:b9:
         f1:e6:25:f4:03:77:00:30:91:9c:04:50:6f:4b:a7:ce:0f:6e:
         d7:64:0a:d0:92:dd:4c:be:f0:f2:35:e0:51:66:c8:2d:03:fe:
         0c:eb:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:22 2024 by rpki-client on console-ams.rpki-client.org