Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b79ae0ef-c01e-3f6e-84d6-ae6c8d0138ab.roa
File:                     b79ae0ef-c01e-3f6e-84d6-ae6c8d0138ab.roa (raw, json)
Hash identifier:          +0gOocfRt6/u/1Zhkpk7fUP2x5/RGSg+gqBrTXNt3I4=
Subject key identifier:   97:E2:5E:40:AC:89:EB:AF:8D:FF:F4:64:60:3E:94:63:7F:B8:85:72
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C17901D3E827B63BF4B6C100
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b79ae0ef-c01e-3f6e-84d6-ae6c8d0138ab.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3d60::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:01:d3:e8:27:b6:3b:f4:b6:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=f569dddc-3174-459b-a9cd-86762f6453b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2e:a9:ff:59:0a:7b:60:86:b8:12:fd:22:06:
                    fb:ad:ee:61:7a:ec:81:4b:23:6a:45:58:c3:c4:e2:
                    3a:15:d4:09:46:ef:f7:fb:e3:1c:5c:90:18:e2:53:
                    8a:3f:8a:f1:8f:7c:69:15:71:b6:06:b7:3d:fa:c2:
                    24:c3:01:2f:2a:a6:fc:84:30:c3:04:08:83:8d:8e:
                    68:6d:da:9d:bb:3b:2e:c0:4a:b7:c4:4d:2f:f5:d7:
                    64:f1:de:a6:e2:e1:93:86:0c:57:23:ec:e1:b9:66:
                    d7:91:e5:1d:48:30:90:b3:dc:4d:29:02:9d:03:38:
                    17:64:57:98:0d:63:bc:e4:69:84:5f:0b:bd:80:37:
                    ff:c7:88:cf:27:23:ea:f2:37:a6:41:c8:cd:3f:48:
                    3a:ff:bd:81:f1:45:ba:22:8e:e2:ac:ff:58:41:16:
                    f1:91:66:cc:d2:ab:3e:8d:57:b3:7d:92:b8:fe:b0:
                    b0:48:59:c1:a0:51:2a:07:f8:e2:a9:a3:b4:e6:57:
                    39:5e:22:f4:ce:9b:76:f6:58:10:c4:b7:d8:27:6b:
                    ca:44:07:8a:a7:c6:0a:06:72:01:0f:d0:9b:90:04:
                    96:01:ac:67:55:1b:9e:88:3c:bf:e7:30:d9:a2:3c:
                    95:06:46:66:c6:43:c3:92:f7:06:95:2f:eb:63:2d:
                    bd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E2:5E:40:AC:89:EB:AF:8D:FF:F4:64:60:3E:94:63:7F:B8:85:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b79ae0ef-c01e-3f6e-84d6-ae6c8d0138ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3d60::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:72:fb:15:e7:1e:25:25:a1:ee:ab:c5:4d:2f:c8:0c:24:2e:
         ae:73:f8:b8:f1:39:f7:41:96:df:2f:e9:03:a8:d5:c3:22:1f:
         5a:cc:9f:25:07:b3:3c:08:25:a5:21:42:3f:b6:69:d6:62:73:
         a6:56:3e:12:05:da:ec:2b:e1:11:1f:a6:03:06:54:2d:ee:3b:
         e3:a8:cc:f3:28:05:6a:60:67:31:d0:2e:cc:d6:8c:49:22:a7:
         d0:7f:ea:19:30:34:73:a7:c9:64:b2:75:2f:3b:47:a3:b7:76:
         c4:c9:e9:81:17:7c:ac:14:de:79:cc:8b:a1:7a:1a:bf:86:5d:
         45:8e:da:f3:0b:44:f3:7c:f0:a9:db:94:c7:98:14:55:be:e3:
         42:28:10:9f:11:d9:11:ef:95:8d:09:52:36:ed:1b:eb:16:dc:
         25:04:f6:27:66:cc:01:36:a5:7f:78:ce:97:6c:20:ad:67:fe:
         71:7e:cc:82:9d:03:15:82:fb:01:4a:57:96:49:e8:02:fb:4f:
         ff:7a:e9:ab:97:27:5c:e6:57:d2:d4:bd:d3:d6:31:fd:ab:70:
         63:d4:27:77:5a:0d:d9:9f:27:b3:20:49:7e:60:52:2f:24:1a:
         08:5f:7c:0c:d1:69:af:f5:9b:f7:c6:4b:cd:98:b8:6c:6e:a2:
         00:c9:a5:21
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXBeQHT6Ce2O/S2wQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk
ZjU2OWRkZGMtMzE3NC00NTliLWE5Y2QtODY3NjJmNjQ1M2I1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy6p/1kKe2CGuBL9Igb7re5heuyBSyNqRVjD
xOI6FdQJRu/3++McXJAY4lOKP4rxj3xpFXG2Brc9+sIkwwEvKqb8hDDDBAiDjY5o
bdqduzsuwEq3xE0v9ddk8d6m4uGThgxXI+zhuWbXkeUdSDCQs9xNKQKdAzgXZFeY
DWO85GmEXwu9gDf/x4jPJyPq8jemQcjNP0g6/72B8UW6Io7irP9YQRbxkWbM0qs+
jVezfZK4/rCwSFnBoFEqB/jiqaO05lc5XiL0zpt29lgQxLfYJ2vKRAeKp8YKBnIB
D9CbkASWAaxnVRueiDy/5zDZojyVBkZmxkPDkvcGlS/rYy29/QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJfiXkCsieuvjf/0ZGA+lGN/uIVyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjc5YWUwZWYtYzAxZS0z
ZjZlLTg0ZDYtYWU2YzhkMDEzOGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQD1g
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAhy+xXnHiUloe6rxU0vyAwkLq5z+LjxOfdBlt8v6QOo1cMiH1rM
nyUHszwIJaUhQj+2adZic6ZWPhIF2uwr4REfpgMGVC3uO+OozPMoBWpgZzHQLszW
jEkip9B/6hkwNHOnyWSydS87R6O3dsTJ6YEXfKwU3nnMi6F6Gr+GXUWO2vMLRPN8
8KnblMeYFFW+40IoEJ8R2RHvlY0JUjbtG+sW3CUE9idmzAE2pX94zpdsIK1n/nF+
zIKdAxWC+wFKV5ZJ6AL7T/966auXJ1zmV9LUvdPWMf2rcGPUJ3daDdmfJ7MgSX5g
Ui8kGghffAzRaa/1m/fGS82YuGxuogDJpSE=
-----END CERTIFICATE-----
Generated at Tue May 7 12:32:46 2024 by rpki-client on console-fra.rpki-client.org