Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a76a5d28-376b-3bbe-9f7b-47b33bf42356.roa
File:                     a76a5d28-376b-3bbe-9f7b-47b33bf42356.roa (raw, json)
Hash identifier:          +FvYOlmUYIv/ewGHiggH5gkVN1t0HCwCAZ72GcUtru8=
Subject key identifier:   26:25:FA:F4:78:EF:22:69:4A:50:BD:99:CE:5C:21:BA:0C:0F:39:14
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780269A3E4E5B146C44981560
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a76a5d28-376b-3bbe-9f7b-47b33bf42356.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:3150::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:9a:3e:4e:5b:14:6c:44:98:15:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=294b54f4-23a8-4fe5-8f1a-00f74426d254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a3:8d:d2:62:c0:79:a1:4a:d9:71:ef:75:cf:
                    63:75:b4:d7:af:31:81:df:53:7a:1d:dd:4f:64:5b:
                    97:4b:90:fe:6e:fe:0e:d0:73:3b:6d:71:41:de:cd:
                    d7:2e:93:91:44:dd:a1:91:f3:4f:d4:ab:d5:b7:38:
                    69:c8:8d:33:52:d8:21:d4:a8:6b:ef:e4:1e:2c:c6:
                    3f:e7:17:30:30:54:67:89:3a:b3:c3:73:c0:42:f5:
                    51:c7:b1:88:29:d0:3d:63:a1:ae:09:54:42:ad:7e:
                    46:12:53:c9:5a:f5:3a:1c:e8:21:f2:f9:b8:29:06:
                    89:ec:64:6e:d9:9c:7f:36:56:77:57:ef:21:50:23:
                    7f:22:c1:d1:85:8c:aa:18:63:d7:b7:42:fb:97:26:
                    11:f0:33:dd:94:8e:ee:c9:f6:4c:2e:68:5f:bf:31:
                    16:0a:96:0c:ab:fd:47:da:5a:cf:3c:f3:15:df:8b:
                    5b:83:93:5e:9a:a8:02:b0:52:78:da:53:fe:df:7d:
                    b1:0f:cb:fe:91:8f:ea:b7:9d:8e:8b:74:68:31:7a:
                    52:99:89:24:36:dc:fa:ac:85:aa:da:18:a0:44:c4:
                    55:19:71:03:f4:3d:8d:4c:d2:dc:9c:6a:9a:48:96:
                    5e:68:0b:2f:5e:92:fe:b2:9b:3e:ed:5b:3c:88:82:
                    f8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:25:FA:F4:78:EF:22:69:4A:50:BD:99:CE:5C:21:BA:0C:0F:39:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a76a5d28-376b-3bbe-9f7b-47b33bf42356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3150::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:fd:bf:96:aa:6e:8a:71:99:12:78:81:85:23:35:ed:fa:68:
         e9:68:8e:f0:4c:f8:52:05:c9:80:1e:9f:5f:c1:6c:0f:7a:bb:
         22:36:3a:cb:33:d0:c1:5e:dd:57:1a:e3:bb:dd:dc:31:26:2c:
         ef:85:b4:27:fa:2b:b0:45:54:a2:dd:26:70:b6:53:74:46:99:
         a0:e1:55:bc:b2:15:a3:b2:e3:44:cb:94:56:5c:74:27:b6:f5:
         91:b6:29:77:9a:b7:54:5a:0f:08:17:06:2b:48:ea:e0:de:5c:
         0f:5a:14:fe:9b:d1:0c:68:8f:c8:8c:a4:12:7a:b4:91:c1:71:
         aa:85:0f:42:5a:61:27:9f:b6:ea:ff:5d:a3:dc:48:22:2f:8f:
         1f:25:86:f8:07:0b:88:f9:6a:47:6c:2f:42:79:76:f4:4b:f6:
         80:be:d1:6d:e6:7e:3a:0f:88:f1:31:b8:10:e8:e9:6d:79:3a:
         15:d9:21:db:89:30:b0:7a:0a:51:10:83:cc:f3:c0:31:21:26:
         17:1b:5f:2b:b2:5a:63:25:51:16:1d:44:3f:53:11:35:25:cb:
         a8:00:c6:d4:80:38:b0:51:da:d2:25:48:e5:52:69:1f:60:0c:
         7b:75:de:1f:67:76:63:61:8c:74:5c:44:66:26:fe:8a:32:c1:
         84:f1:38:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:48 2024 by rpki-client on console-fra.rpki-client.org