Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a68d386c-b73f-3b2d-ad43-ed5c0fa592c3.roa
File:                     a68d386c-b73f-3b2d-ad43-ed5c0fa592c3.roa (raw, json)
Hash identifier:          3VdHRmEAoU1GDOaLGBbCqRir30pGCDp9OkHXjL+MXBE=
Subject key identifier:   29:EE:45:E9:A1:A5:7B:A3:FB:B1:A2:45:06:86:89:5F:5E:F7:44:F0
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802675301AB3DF47F0ADB600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a68d386c-b73f-3b2d-ad43-ed5c0fa592c3.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:29e0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:75:30:1a:b3:df:47:f0:ad:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=0a048653-254b-4d45-90af-0646b8f1d8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c1:e2:1d:ee:36:d7:9d:21:50:3c:6f:e4:34:
                    fb:d2:7c:09:41:4a:b9:52:7e:82:ea:5e:84:57:c9:
                    27:0f:43:9b:eb:2b:08:ce:3e:0e:b8:ef:b6:b3:b9:
                    c4:a2:b9:4d:87:36:36:f5:4b:14:83:3a:23:6b:69:
                    c2:99:fb:f1:d4:37:61:51:d4:fb:8f:b0:d1:a3:7f:
                    74:0f:de:32:18:6c:2d:3f:7b:de:9e:66:8b:c5:a4:
                    4a:5a:cc:64:0e:8d:82:2b:83:f2:dc:41:60:19:fe:
                    5b:8c:1c:87:96:6a:48:b6:70:2c:cc:96:7c:5e:c1:
                    3d:fe:b5:fb:d6:de:8c:a5:90:50:6f:a4:02:78:72:
                    15:5c:2a:60:7a:8d:85:9c:9a:15:34:a7:ba:e1:9e:
                    da:b3:46:74:95:04:ef:9c:fe:fe:11:7b:6e:55:b4:
                    72:38:86:30:e2:f9:1a:a4:e2:88:3a:6e:0d:45:47:
                    72:5c:9e:44:ae:5d:70:c8:0d:9d:a4:14:43:ae:e4:
                    5b:53:fa:37:2d:6e:35:be:ab:6e:3d:6a:56:4a:d2:
                    5d:d1:dd:49:4d:43:6c:01:96:e7:04:31:9f:75:44:
                    02:8e:c3:c2:b2:fc:83:4c:49:03:fa:f4:6e:dc:20:
                    91:b9:bb:80:49:cc:91:fa:2d:61:39:06:9b:69:d4:
                    ee:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EE:45:E9:A1:A5:7B:A3:FB:B1:A2:45:06:86:89:5F:5E:F7:44:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a68d386c-b73f-3b2d-ad43-ed5c0fa592c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:29e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b8:c1:06:9d:a2:58:50:5e:e0:0f:bb:a6:b9:a5:f2:08:f7:
         01:ec:25:62:09:19:34:78:38:90:37:da:a5:f6:95:d2:17:af:
         6b:42:0f:5c:03:7c:46:09:4c:ff:67:91:32:17:13:a3:33:22:
         7c:ff:64:3d:c8:dd:3d:55:89:8f:d6:66:d6:c3:10:5b:00:3f:
         6f:31:54:eb:d5:73:d0:dc:9c:dd:db:aa:fc:d6:22:ed:23:23:
         14:d4:c1:8e:ac:6e:72:dd:01:ca:75:f5:0e:ca:56:d6:b9:8c:
         11:4e:c0:2e:63:8a:43:b5:35:26:8e:79:f8:75:44:98:8b:ac:
         b5:6e:6e:7d:13:23:8d:a0:6b:f4:d1:fa:7e:7a:71:10:e2:86:
         d9:74:23:85:b8:eb:73:03:84:9c:11:cc:6f:29:09:5c:23:28:
         04:e0:d5:07:9d:80:b3:99:74:d1:8a:19:96:f0:e2:bf:b2:3d:
         32:b6:83:c0:5f:76:c0:11:2b:e7:61:36:4e:60:71:8c:11:79:
         73:75:00:01:5f:aa:71:01:4b:09:e8:1e:7d:d0:38:9f:84:ce:
         08:21:d0:0f:67:fb:46:38:2c:41:2e:ce:59:1b:da:67:03:66:
         ee:4e:c6:30:a0:3a:cd:0f:c7:f0:aa:01:5a:30:18:9b:7f:7f:
         04:25:9d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:49 2024 by rpki-client on console-fra.rpki-client.org