Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a8916779-85c8-387a-937f-3bf93d498d9b.roa
File:                     a8916779-85c8-387a-937f-3bf93d498d9b.roa (raw, json)
Hash identifier:          Kt5ZmYnrEhximdStRTxb2bdl5qi4JmN982bK0ur6dJo=
Subject key identifier:   5A:A6:5A:A8:CE:22:D9:2F:D8:23:33:20:8C:3E:83:1D:68:53:B1:83
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178F1ADD5C0443E08A51CC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a8916779-85c8-387a-937f-3bf93d498d9b.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:2710::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:f1:ad:d5:c0:44:3e:08:a5:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=0c4f7c2d-07dd-4649-bc87-51d4e4109d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:58:6b:0d:8b:03:dd:ed:b8:15:f2:7b:e6:30:
                    1a:75:33:c4:0d:9b:d9:67:75:a7:37:53:13:b9:48:
                    24:dd:e5:f5:1a:f3:40:77:1d:dd:21:a1:45:5b:18:
                    79:88:02:c1:aa:68:cf:be:c0:ac:78:f3:c9:7f:6e:
                    36:f7:78:92:6c:02:70:3e:ac:f2:33:30:4b:8e:d8:
                    11:83:64:41:a7:4a:c4:b7:6d:28:24:12:27:e9:b9:
                    61:45:6e:2a:38:19:5b:2f:07:7c:fc:75:b9:a8:12:
                    85:75:cc:8f:50:6e:75:8d:6c:11:e0:c3:0e:e1:fa:
                    da:61:9f:6a:d3:22:f3:4d:c3:d9:d9:e1:a6:0f:96:
                    6d:75:4e:13:5f:60:18:e9:59:a5:06:07:dd:37:a4:
                    a3:94:34:1a:a3:fd:2f:e6:e2:fb:4f:80:93:59:02:
                    1c:45:83:ba:3f:d0:76:7f:6e:99:ff:6a:f5:79:d4:
                    bb:eb:b0:b6:38:04:fb:28:1d:df:0a:71:6a:3b:84:
                    87:c0:c1:a6:ad:01:57:f5:12:3e:fe:77:41:a0:04:
                    b0:72:9c:88:53:f3:5e:53:b8:bb:28:8c:7e:f4:c8:
                    31:b9:a5:b3:97:b4:d2:56:2d:c6:16:e8:b8:67:9b:
                    4e:29:cf:f9:22:c0:03:98:9d:d7:ef:17:a1:36:36:
                    55:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A6:5A:A8:CE:22:D9:2F:D8:23:33:20:8C:3E:83:1D:68:53:B1:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a8916779-85c8-387a-937f-3bf93d498d9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2710::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:09:fb:84:97:8e:5b:01:27:12:8f:b1:e7:4f:11:c1:2f:ec:
         78:27:5e:0a:91:ce:17:4b:28:9a:44:e1:b8:2a:a6:ff:4f:45:
         32:85:7e:fe:68:9a:aa:ee:ee:3f:2a:93:92:a9:a0:8f:cb:52:
         f0:b3:db:74:d3:2b:c8:66:60:0f:74:03:64:78:ed:36:f7:05:
         7f:02:dd:57:84:01:3e:0d:3a:86:82:ce:96:32:b6:00:10:53:
         2f:84:ef:96:97:b4:9f:0e:51:bd:47:b4:a7:99:23:36:07:45:
         6e:b1:61:00:28:5c:69:3d:f1:5c:c1:28:8f:39:f0:c2:01:29:
         f6:12:0d:7f:ba:30:ab:d0:98:3e:02:1f:3b:63:5c:92:b4:27:
         02:62:2d:83:da:94:09:e2:ad:0f:01:99:ae:9d:3a:4b:58:b8:
         e1:e1:5f:c2:d8:26:7e:db:e1:80:06:9a:89:a8:b2:c1:4a:87:
         fc:05:84:d3:0c:85:1c:89:9e:75:dc:31:3b:9a:fb:c9:a7:15:
         33:a8:bb:86:a1:c1:3a:59:26:e4:de:ff:37:ca:2c:59:d5:ee:
         48:e9:ba:dd:c3:13:77:c1:55:db:7d:1b:29:2d:12:07:7e:9b:
         be:7f:58:3b:68:bd:36:21:5d:ad:54:49:39:a4:4b:7f:09:c1:
         c9:5c:2f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:12:11 2024 by rpki-client on console-fra.rpki-client.org