Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bf9b6863-db18-3b00-b003-3e70802efc1a.roa
File:                     bf9b6863-db18-3b00-b003-3e70802efc1a.roa (raw, json)
Hash identifier:          bPSPjOT0M+3Btc1hWgbqZWNPmosO7wce2fY3PBe1c0Q=
Subject key identifier:   F6:81:68:1F:F1:E2:54:8F:65:85:65:70:B6:8F:26:8A:0D:66:4D:04
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802674984C1CC0D55007C440
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bf9b6863-db18-3b00-b003-3e70802efc1a.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:3d10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:74:98:4c:1c:c0:d5:50:07:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=2d0ceede-23a6-4f2b-aa61-791901f79251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:64:be:b1:dd:00:9b:92:a4:6f:54:ad:be:
                    34:2f:37:92:4c:3f:4f:95:27:5e:a8:b7:1b:28:a9:
                    f6:66:42:1b:07:d4:0c:c5:42:8f:88:d5:44:f0:7e:
                    45:1a:d3:5a:a8:a9:07:c7:5a:cd:f0:12:43:0c:50:
                    e3:81:e9:f7:fc:aa:61:de:20:0a:a8:d2:2c:27:3a:
                    dc:b9:19:c1:4c:07:9b:4f:cb:0e:bb:ef:c1:6b:53:
                    34:8c:61:60:9e:a4:c0:f4:5c:1e:1b:28:d5:47:f3:
                    dc:51:e9:f8:00:ac:c8:0f:62:ce:52:46:64:2b:56:
                    9f:d4:14:c5:a8:ec:ed:cb:d7:6f:76:2b:18:19:2b:
                    05:e7:e0:96:e1:71:da:4e:68:93:9a:72:a0:58:b2:
                    6f:d2:d5:60:82:f2:7d:9b:77:6c:e4:77:50:f5:78:
                    f7:e6:74:4d:29:e6:c7:6f:87:45:67:0e:77:12:85:
                    d6:8b:f4:08:d6:91:6d:2a:22:9b:f3:dd:a4:dd:ec:
                    37:a6:ac:a1:cd:f4:2e:0c:ec:7f:ed:a0:97:6b:e6:
                    6d:78:97:e4:2c:6d:ad:bc:09:b4:76:29:b5:b2:88:
                    1b:8e:12:f3:5a:6c:2b:ee:75:e6:e4:e6:b3:c2:f8:
                    9e:70:e8:8d:3c:6f:f3:cd:40:bf:88:39:e3:23:19:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:81:68:1F:F1:E2:54:8F:65:85:65:70:B6:8F:26:8A:0D:66:4D:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bf9b6863-db18-3b00-b003-3e70802efc1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3d10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d4:af:98:57:15:95:22:a7:43:6b:46:62:e0:c3:04:1b:88:
         15:81:ce:8f:e5:f2:82:bf:fa:cc:69:b3:cd:07:93:65:db:ac:
         e6:6f:0f:f5:75:25:58:05:81:e4:1d:b0:0b:c5:95:78:89:66:
         06:33:2d:4b:29:36:ba:d3:14:ef:10:25:50:73:8c:54:1d:6d:
         51:d3:2d:0d:b4:bf:de:05:1c:15:93:41:f2:4a:d8:f5:55:a7:
         4b:1e:fc:3f:cb:fc:65:5e:2f:e1:ac:76:f5:9e:3a:aa:03:96:
         9a:db:3e:d0:b1:bc:66:00:4d:ba:ed:3b:9a:8b:d2:26:d8:8f:
         75:2a:c9:77:3e:c5:fe:eb:76:fd:ca:00:cb:34:b1:e2:e4:ca:
         7c:79:25:b6:f0:62:d4:52:f9:48:0d:09:92:d7:4c:6e:d8:6f:
         13:55:b1:80:42:29:e0:0f:fd:b5:c6:ee:76:10:9e:2c:7d:1b:
         d0:ee:05:7e:98:8c:86:2a:eb:58:cb:7a:5c:09:88:2d:7e:e8:
         b9:3d:ce:5d:58:ba:30:70:77:16:d9:92:10:5d:ea:44:9c:57:
         f2:b0:6c:1c:00:e8:46:a7:3f:5b:4e:87:92:13:42:14:ab:9f:
         66:18:75:d7:fd:7d:86:f1:32:ca:ea:04:7c:18:ce:ac:56:df:
         ca:8b:3d:bb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJnSYTBzA1VAHxEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
MmQwY2VlZGUtMjNhNi00ZjJiLWFhNjEtNzkxOTAxZjc5MjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIVkvrHdAJuSpG9Urb40LzeSTD9PlSdeqLcb
KKn2ZkIbB9QMxUKPiNVE8H5FGtNaqKkHx1rN8BJDDFDjgen3/Kph3iAKqNIsJzrc
uRnBTAebT8sOu+/Ba1M0jGFgnqTA9FweGyjVR/PcUen4AKzID2LOUkZkK1af1BTF
qOzty9dvdisYGSsF5+CW4XHaTmiTmnKgWLJv0tVggvJ9m3ds5HdQ9Xj35nRNKebH
b4dFZw53EoXWi/QI1pFtKiKb892k3ew3pqyhzfQuDOx/7aCXa+ZteJfkLG2tvAm0
dim1sogbjhLzWmwr7nXm5OazwviecOiNPG/zzUC/iDnjIxnxEwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPaBaB/x4lSPZYVlcLaPJooNZk0EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmY5YjY4NjMtZGIxOC0z
YjAwLWIwMDMtM2U3MDgwMmVmYzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQD0Q
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFzUr5hXFZUip0NrRmLgwwQbiBWBzo/l8oK/+sxps80Hk2XbrOZv
D/V1JVgFgeQdsAvFlXiJZgYzLUspNrrTFO8QJVBzjFQdbVHTLQ20v94FHBWTQfJK
2PVVp0se/D/L/GVeL+GsdvWeOqoDlprbPtCxvGYATbrtO5qL0ibYj3UqyXc+xf7r
dv3KAMs0seLkynx5JbbwYtRS+UgNCZLXTG7YbxNVsYBCKeAP/bXG7nYQnix9G9Du
BX6YjIYq61jLelwJiC1+6Lk9zl1YujBwdxbZkhBd6kScV/KwbBwA6EanP1tOh5IT
QhSrn2YYddf9fYbxMsrqBHwYzqxW38qLPbs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:50 2024 by rpki-client on console-fra.rpki-client.org