Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c968ff0a-121b-3728-bf40-32d610868704.roa
File:                     c968ff0a-121b-3728-bf40-32d610868704.roa (raw, json)
Hash identifier:          u6EXDvO7ZaYAqXu5MLEDJkUsUp6IX+6jD5eOHnH026w=
Subject key identifier:   44:2D:49:87:2A:04:3E:66:8F:32:F3:A3:51:BD:2D:9C:2B:71:64:33
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178F2CD2B1D5F18EB4E7A00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c968ff0a-121b-3728-bf40-32d610868704.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3c90::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:f2:cd:2b:1d:5f:18:eb:4e:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=adf842d2-3d4d-403f-9729-ff4d5304eded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7c:ab:77:f8:0b:fc:f0:8f:20:5c:54:42:13:
                    0a:32:b6:51:26:8c:c8:fb:20:c8:1b:5e:77:35:56:
                    01:4a:ff:d8:28:11:95:8b:20:45:9d:a0:79:d8:da:
                    8d:3e:02:dd:d0:c2:22:36:76:d9:a6:0f:e9:0b:fe:
                    b0:c6:8a:ee:f0:c3:b5:da:b1:69:23:70:57:8f:05:
                    a8:92:65:0d:da:b6:57:a9:f7:eb:ad:40:6d:7d:82:
                    67:a2:33:47:8c:b5:7d:35:54:a9:8e:73:28:7d:f8:
                    57:37:20:8b:e2:86:b7:97:5c:46:a1:96:d3:3c:73:
                    7a:36:86:bc:05:27:61:a8:7e:69:99:f2:d6:f6:84:
                    1e:42:48:d7:d9:55:94:8a:ba:ef:7c:ef:9a:49:81:
                    da:76:b6:90:fb:66:82:52:7a:43:20:97:1b:2b:7c:
                    57:e1:3e:ea:ea:7b:a7:6c:71:55:83:87:43:aa:6e:
                    31:1b:b4:b9:e7:05:ff:fe:1c:ee:56:cb:3a:1a:8a:
                    9f:6a:4f:fe:3c:9b:90:5e:04:83:e3:3b:db:da:43:
                    3d:79:f6:84:94:78:d4:c8:32:c6:f8:92:b0:cf:37:
                    56:66:2a:89:bd:fd:6b:b7:06:38:db:6e:47:f8:96:
                    37:ef:38:c1:83:da:1a:9d:25:79:2e:e4:5a:41:98:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2D:49:87:2A:04:3E:66:8F:32:F3:A3:51:BD:2D:9C:2B:71:64:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c968ff0a-121b-3728-bf40-32d610868704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3c90::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ac:bc:ff:74:5f:33:36:76:3b:08:12:86:47:71:95:62:46:
         0e:99:6b:3c:96:88:88:22:9c:7d:54:83:5a:72:82:f9:98:b6:
         1b:68:27:de:68:7f:81:9c:fa:e1:19:3d:05:8b:f1:6e:19:e5:
         dc:1c:7d:07:00:64:bb:f7:5e:79:27:21:9c:c2:9a:f3:42:4c:
         9f:44:80:58:7e:cf:0c:a3:12:51:28:48:8d:6c:51:6d:47:37:
         5e:27:a6:21:80:bc:0d:5e:ea:d9:3a:cd:27:12:d8:64:91:6d:
         f9:cd:a0:80:2e:a7:99:9c:c2:d0:56:2b:d1:d9:a5:84:aa:fa:
         d6:83:98:6d:25:56:4c:08:3c:5d:02:da:6a:2a:d1:22:16:7b:
         66:fa:0f:e0:45:34:ab:4d:db:a6:1f:68:cc:c1:4e:3d:86:ff:
         71:2d:90:01:6c:d5:92:3d:80:04:ad:67:00:a2:b4:52:43:d0:
         4d:23:bb:fb:4f:6e:e3:eb:8e:9d:0b:91:45:3d:27:9c:ef:32:
         27:97:45:de:db:ce:5b:a1:2f:6d:d6:a2:7d:92:c5:f2:a4:9c:
         2e:05:bd:fe:bf:db:87:ed:96:62:5d:c2:e2:8b:9a:72:bf:1a:
         c2:b4:6a:ad:35:6b:71:05:dc:39:00:38:bd:4f:3b:6e:18:93:
         56:6e:0b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:32:47 2024 by rpki-client on console-fra.rpki-client.org