Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b3a3a52c-b366-3abd-8899-85c546de9527.roa
File:                     b3a3a52c-b366-3abd-8899-85c546de9527.roa (raw, json)
Hash identifier:          UEbUnpsjbxV8Oua9e6CRhyarR9iQkf81I5NcK0YMt78=
Subject key identifier:   B8:F1:40:FD:37:61:1E:E9:99:4D:30:35:95:D4:27:88:CF:BE:BC:48
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780266E9BC8999393620633C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b3a3a52c-b366-3abd-8899-85c546de9527.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:32f0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:6e:9b:c8:99:93:93:62:06:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=0af7114e-9da1-4265-aaf1-affae069e747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b6:9d:b1:8c:52:bc:07:a3:4a:d9:fb:d5:10:
                    33:b6:a7:b7:20:bb:10:09:d0:e3:47:c9:a3:54:97:
                    96:25:5d:fa:3d:5c:5f:f8:d2:f2:87:af:f2:b2:c8:
                    5b:93:70:19:e7:87:95:85:e3:b4:d6:ac:57:87:eb:
                    54:b9:a6:af:7c:de:c5:28:7e:73:98:f1:ab:dc:49:
                    a6:de:77:00:61:f7:db:da:96:15:da:00:89:ad:8d:
                    5d:9b:85:aa:43:b2:12:6b:6a:f0:4c:0a:c8:a0:2e:
                    92:a0:e8:63:cd:0b:5d:db:c1:4f:b2:3f:eb:e6:12:
                    bb:c2:64:44:f1:9d:fc:51:86:66:11:00:fe:86:4c:
                    35:4b:44:5a:33:36:ac:42:9a:d5:20:75:0e:4f:7b:
                    ab:91:64:76:a6:82:1e:94:c4:6d:cb:13:9e:a2:b2:
                    1c:37:cd:e6:82:9d:01:99:a0:ad:a0:e8:f2:75:3c:
                    3b:f1:c3:c6:84:2b:06:8f:24:aa:f1:ba:87:8a:05:
                    f3:64:32:85:b8:2f:e4:68:95:c4:04:8c:a3:9a:61:
                    1f:76:e6:09:59:37:f8:ed:47:19:e4:18:b1:ea:88:
                    ce:b9:d9:21:d5:71:8d:4b:c7:25:7b:75:d7:b6:f5:
                    72:22:37:24:e3:ab:c2:8f:05:80:b9:7c:95:9f:a2:
                    11:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F1:40:FD:37:61:1E:E9:99:4D:30:35:95:D4:27:88:CF:BE:BC:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b3a3a52c-b366-3abd-8899-85c546de9527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:32f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:27:ea:70:f4:d6:f4:d7:ee:d8:5d:ac:f9:41:20:17:c1:db:
         e4:56:62:41:3a:08:11:f8:f9:bc:ff:90:6c:bc:d1:a6:65:3a:
         5b:8f:52:09:7c:ec:d2:a6:31:44:f0:1e:08:37:10:81:e2:b7:
         e6:ae:f9:e9:25:46:33:53:c8:41:8f:ed:17:41:10:f4:f3:e7:
         cd:75:65:64:dc:50:07:46:1c:73:e3:af:30:7e:b6:d7:17:c6:
         5c:4e:42:7c:8f:d5:e8:29:90:85:4f:a5:d2:37:50:26:58:c6:
         0f:1e:41:1f:7f:8a:e9:20:21:d3:ce:86:f4:cf:50:29:f7:b4:
         81:81:23:f3:2d:28:50:db:d7:5e:09:d9:3a:f4:bf:1e:b7:0b:
         e7:b2:00:11:33:57:39:ba:fc:78:8e:25:ad:a1:e2:55:4c:69:
         ff:a6:17:79:7e:1f:05:9a:f2:b4:b7:3a:52:0e:2d:53:f0:33:
         be:4d:ef:a7:7e:9b:46:79:25:25:b1:4f:97:ab:81:82:b5:30:
         9a:e6:0d:17:fb:48:1b:7a:bd:ea:40:a2:b7:95:1b:a0:96:62:
         43:bb:ab:f9:d2:8e:d4:84:df:97:5d:65:17:8d:96:56:5f:24:
         8a:4f:b1:3f:4b:47:3b:f6:0a:d9:8e:0d:dc:ce:b6:40:12:bb:
         d0:09:77:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:27 2024 by rpki-client on console-ams.rpki-client.org