Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfd6a48b-f9f8-3af5-b651-08807f038759.roa
File:                     bfd6a48b-f9f8-3af5-b651-08807f038759.roa (raw, json)
Hash identifier:          gu5l6kT5A1+YKnZyZIeU92sdlYFHhmJ/5bmBgpIqNFA=
Subject key identifier:   05:BD:BE:3C:82:CE:93:4F:DE:C7:3D:7B:46:C6:F3:B0:44:D5:C2:E3
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178CDD04284DB868C620640
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfd6a48b-f9f8-3af5-b651-08807f038759.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:29b0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:cd:d0:42:84:db:86:8c:62:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=af56f27c-8a0d-474f-862f-a26b698a9568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:f7:6f:29:1d:44:75:54:a1:17:10:4d:cb:
                    37:6d:ba:a8:cc:85:4a:8e:83:25:aa:f3:b1:da:63:
                    92:67:d7:1a:de:9c:6c:72:60:9b:fe:fd:38:a2:cb:
                    ea:84:bc:4a:4a:df:d0:e8:6a:8d:5e:16:f2:29:c9:
                    ab:87:92:a1:f6:56:0f:91:5e:d9:10:27:6c:89:f9:
                    6b:37:36:4d:2c:63:b0:b3:30:84:48:5d:1d:9f:a0:
                    52:bb:49:d9:b5:36:0a:98:e1:55:8b:dc:ca:11:41:
                    ac:c7:56:7f:a0:5f:d7:ae:3c:78:08:ab:10:10:44:
                    cb:0c:33:50:2c:81:bb:66:57:e9:0c:3c:df:bd:a8:
                    1f:27:5f:c1:1a:53:ab:29:cc:f6:54:2a:9b:cc:ee:
                    8f:cc:9c:cd:69:a5:59:9d:11:91:5e:7d:06:aa:74:
                    7b:cf:4f:c6:a3:29:ce:07:c6:a7:95:36:f8:94:19:
                    77:a9:f1:0e:d1:fc:38:5d:33:1b:f6:ac:1e:25:40:
                    f5:62:8b:6f:ec:6b:f5:17:d5:60:5d:42:44:11:96:
                    a1:57:8c:8b:dd:e0:24:ac:61:03:be:04:45:b9:17:
                    9c:99:54:d0:d5:c8:52:cc:e7:8c:82:50:09:7b:57:
                    cd:68:18:0e:ce:c0:7d:ba:04:07:84:da:74:e5:ad:
                    ea:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BD:BE:3C:82:CE:93:4F:DE:C7:3D:7B:46:C6:F3:B0:44:D5:C2:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfd6a48b-f9f8-3af5-b651-08807f038759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:29b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ec:7b:74:43:90:7e:91:cb:41:ec:66:b7:2b:a5:58:1f:86:
         5e:6c:ea:a3:38:de:c3:23:b8:4f:11:25:67:81:85:97:59:bd:
         a2:50:98:ec:58:44:7d:f7:dd:e8:00:81:fa:84:6b:6d:1d:02:
         2d:2a:a8:56:9e:bb:e3:c4:4e:55:3d:88:55:f1:db:b0:e6:34:
         44:a0:b8:1c:7a:78:1a:6b:09:0d:1c:09:2b:38:70:0b:f6:ec:
         f4:a3:f1:76:d4:8b:f0:ea:16:af:45:b7:8c:23:ac:1f:31:67:
         34:72:39:dc:a2:58:2e:6e:ef:5b:17:02:01:fb:11:3e:c9:3f:
         37:07:77:25:3d:a3:8c:83:7a:d2:e0:2d:fb:02:cf:17:55:41:
         a0:14:8a:19:4a:2b:a6:65:5f:0d:21:9e:81:9e:d1:ab:6e:8c:
         74:ce:6d:8b:70:ed:c0:81:0d:3d:a0:95:27:93:25:1c:29:2a:
         7b:d0:af:31:e4:d8:62:50:17:fe:eb:8b:19:da:4c:0b:e3:c1:
         b6:40:6b:17:60:92:2c:29:b4:7e:91:33:29:64:7d:53:5a:2f:
         cc:43:c3:07:d2:d4:49:aa:88:ea:72:b3:24:09:3e:1c:df:ec:
         54:47:97:1f:a6:8a:cb:f2:bc:c4:a7:7c:e5:0f:83:40:e6:31:
         2b:ef:03:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:23:25 2024 by rpki-client on console-fra.rpki-client.org