Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b9326761-09e1-302f-9566-8a5598d8d972.roa
File:                     b9326761-09e1-302f-9566-8a5598d8d972.roa (raw, json)
Hash identifier:          4k8voEZoaiwOCIcQEAOaanDcguQZU1XNumgUag7zE1U=
Subject key identifier:   60:BB:7D:5D:A0:EE:FE:B7:F9:00:99:FA:9F:7A:AE:3F:90:D0:0B:44
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858478026719F2C8115F8F2388CD0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b9326761-09e1-302f-9566-8a5598d8d972.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:3b90::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:71:9f:2c:81:15:f8:f2:38:8c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=36ee600f-6168-49fc-8e2b-ae1360aaf977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a6:9a:40:27:47:0b:90:34:57:e8:af:a2:80:
                    c0:58:af:2c:a5:1d:ce:e5:25:60:d7:eb:60:f9:8a:
                    d9:20:95:b5:03:da:6b:01:67:4e:61:86:00:2a:92:
                    e2:0e:a8:52:e8:c9:aa:84:1f:60:4a:53:87:aa:f4:
                    3e:f2:ba:8f:fe:f3:27:ff:14:7c:04:f1:d7:74:33:
                    36:a1:d1:86:90:6a:f2:40:69:28:94:2b:f1:7c:be:
                    c3:80:30:d4:e5:96:41:83:07:66:89:a9:07:27:c8:
                    05:74:90:9c:6a:8b:91:0f:64:c2:8a:f3:0a:e9:84:
                    dc:99:64:ed:90:20:7d:b8:c2:17:7d:3d:06:57:66:
                    f0:a9:ff:cc:70:28:1f:1c:d5:20:49:c3:0a:62:54:
                    e3:ee:6c:f9:89:1f:06:aa:db:12:9e:4e:7d:40:3c:
                    34:72:27:28:0d:31:de:57:41:0b:cb:5c:74:28:09:
                    d5:77:62:25:2d:13:85:f4:ad:7a:fe:b8:06:5f:32:
                    15:d5:35:c3:09:6f:8e:10:c9:49:78:3f:c0:a4:3e:
                    0a:10:48:58:9d:66:7c:61:cc:2f:15:ee:dd:b5:2e:
                    62:19:5e:77:f5:f2:65:f4:61:65:92:03:ef:da:64:
                    28:83:79:5d:49:c9:33:3f:5c:02:23:a0:cf:c3:3d:
                    db:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BB:7D:5D:A0:EE:FE:B7:F9:00:99:FA:9F:7A:AE:3F:90:D0:0B:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b9326761-09e1-302f-9566-8a5598d8d972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3b90::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f8:ce:55:bf:1b:41:c7:38:88:1a:93:4c:af:f0:f3:a6:54:
         e4:0f:25:55:ea:b7:63:70:63:e9:eb:cf:92:6f:65:8b:d8:61:
         f0:b4:db:81:71:01:43:e0:ff:e0:37:bc:22:bb:ef:7f:03:fc:
         c4:58:d9:1c:e2:a8:bc:8e:59:82:a5:ee:37:48:42:c9:d2:c2:
         f1:6d:a0:69:07:1b:31:f6:e7:c0:aa:6d:e4:83:30:0f:0f:81:
         49:40:48:eb:fb:0b:db:ad:c5:00:8d:59:d1:48:c8:68:97:73:
         6e:62:85:db:c1:1d:77:97:1a:06:fc:68:5f:41:68:2a:b9:9b:
         6e:1b:4b:da:a4:7c:c7:3b:8a:ac:86:ed:96:e2:9b:f3:01:6e:
         ba:6a:8f:a5:ef:a6:1a:22:73:c8:ac:c0:1c:f1:0e:77:d9:d1:
         b9:66:26:e8:b0:58:b8:1e:9b:9c:0d:cf:4f:36:3c:e7:75:37:
         ce:75:85:6d:17:69:ba:fe:38:cc:8b:27:fd:fe:b7:67:6d:17:
         71:39:0c:f5:17:a9:bf:8a:c6:6c:33:79:d1:43:2f:a0:a4:ee:
         7a:fe:ea:eb:40:c2:f8:e3:f6:62:5d:65:b5:ea:39:1b:6c:df:
         0c:32:f2:40:63:38:96:7d:d0:96:f1:53:7a:88:3e:69:60:e1:
         ed:f0:77:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:27 2024 by rpki-client on console-ams.rpki-client.org