Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d5d8f9b0-7508-3f09-896b-92f9db34609f.roa
File:                     d5d8f9b0-7508-3f09-896b-92f9db34609f.roa (raw, json)
Hash identifier:          snLfsbE2m8NPoIQNDi5+BCNLcYHtvTQhERyiHNuRmbI=
Subject key identifier:   94:15:DA:40:30:F1:36:40:59:11:6F:6C:6C:09:10:0A:E9:6F:70:D3
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178EAA3E6AD7E8C55762480
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d5d8f9b0-7508-3f09-896b-92f9db34609f.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:37a0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:ea:a3:e6:ad:7e:8c:55:76:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=5aeb53a9-4806-4786-9008-2d39efbf2152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:64:9c:29:6e:e4:bf:c8:49:70:b3:fa:88:a5:
                    41:db:b3:9b:e3:9f:17:5e:2b:e8:77:d9:f0:4b:c0:
                    a1:d9:b7:6c:05:db:45:f9:79:cd:27:cb:88:d2:3f:
                    ff:a6:57:fe:08:75:a9:ed:1a:42:57:8a:20:59:36:
                    14:38:c9:e5:cd:8e:0c:34:c3:b8:fd:1c:4b:23:b5:
                    aa:87:23:4a:8e:d4:d2:d8:a0:31:35:7e:22:56:f8:
                    8d:67:12:df:53:84:40:15:95:38:94:15:07:b3:63:
                    c8:3f:98:df:09:55:c9:c6:55:a1:84:d6:d6:0e:b8:
                    4d:89:c9:84:a7:21:fa:e3:2d:52:48:6e:de:73:a9:
                    aa:bb:8a:f9:b1:a0:b3:cc:50:fb:e8:ea:f7:1d:5e:
                    da:31:ba:e7:62:36:37:54:2e:06:7a:13:bf:f1:d3:
                    a8:6b:d2:5b:12:cb:ed:9f:a8:cd:0b:45:84:59:26:
                    e9:4a:bf:b7:83:0e:01:5a:91:a7:6a:04:80:6b:ed:
                    1f:b1:ca:19:90:22:6e:8b:8a:36:2d:0c:94:02:0d:
                    56:93:aa:47:ea:da:97:5f:b6:fe:e5:5c:70:23:10:
                    8f:ed:d2:e3:db:ab:79:c8:ae:cd:e2:b1:66:9d:8e:
                    76:bb:20:79:6f:7d:ec:21:73:23:be:bb:3e:ed:30:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:15:DA:40:30:F1:36:40:59:11:6F:6C:6C:09:10:0A:E9:6F:70:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d5d8f9b0-7508-3f09-896b-92f9db34609f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:37a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:9e:8d:3d:57:44:62:47:73:a1:5d:bc:75:ee:27:db:02:89:
         63:00:e0:9b:aa:75:18:a7:04:e4:97:fc:7b:8f:b1:89:7f:16:
         e2:ac:55:c9:7e:a4:16:16:96:d7:41:c2:41:fe:59:d8:c2:27:
         84:72:3b:61:ba:f6:6f:6a:d9:2b:40:73:9d:13:0c:b3:f5:b9:
         ed:6d:57:75:c7:d3:e0:31:0b:40:3a:a1:38:65:cf:f7:c9:2c:
         48:1c:9a:fb:cd:8f:fa:47:8e:04:86:28:c3:fa:f3:f6:4c:20:
         bf:0d:ab:f4:d5:e6:42:8c:27:ba:8f:93:28:b4:a1:07:77:97:
         1f:50:42:19:60:9b:ea:04:80:de:4f:e4:e5:8c:da:b5:32:d8:
         62:79:78:96:fc:4b:6e:ea:3e:42:5e:f4:64:49:a2:db:90:0a:
         1c:e6:c1:a5:6f:13:c5:5b:3c:b1:5b:9f:50:80:aa:7a:e1:ec:
         41:81:95:f7:99:93:ae:34:c2:d3:63:fa:54:98:8e:98:c0:51:
         f6:6c:a2:a1:5a:92:8e:65:39:26:93:35:0a:69:40:a0:b8:dd:
         c5:9b:0a:0f:44:46:f0:be:c9:c9:bc:75:91:f8:e9:49:f2:69:
         f3:21:79:31:1f:dd:6e:b7:8e:91:81:f7:ae:bb:59:70:75:c6:
         ab:4d:e0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:14:18 2024 by rpki-client on console-fra.rpki-client.org