Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/da6b5111-7249-37ea-9152-4e21b54dea08.roa
File:                     da6b5111-7249-37ea-9152-4e21b54dea08.roa (raw, json)
Hash identifier:          dW0+TEOcKWlIDLCFGiu3mdsRXkP5BANsazMfYRYacjs=
Subject key identifier:   FC:73:CF:61:F4:B0:6B:22:E4:F8:2A:2A:08:E9:6B:3F:A5:66:09:F5
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802690D41E958530B9AA39A0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/da6b5111-7249-37ea-9152-4e21b54dea08.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:3520::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:90:d4:1e:95:85:30:b9:aa:39:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=1d6d91f5-107e-4f7d-8aea-1f8d9198f88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:14:d1:84:99:b7:9e:62:ab:51:2f:d2:36:
                    34:05:0c:6f:7c:e1:ea:c4:46:40:73:c7:e1:bc:ff:
                    8f:aa:c6:20:52:82:26:1a:ac:37:15:0d:b0:2c:50:
                    39:f0:0f:fe:75:d2:98:59:d7:36:0d:0a:82:82:88:
                    b2:5f:92:b3:94:eb:f7:7f:70:d8:cb:16:eb:cd:e5:
                    cc:ec:6c:6d:0d:44:ab:eb:cf:15:ad:02:84:75:22:
                    fb:b4:8d:af:e0:a1:ff:27:8b:9b:bb:96:89:94:9b:
                    e0:e4:47:ce:5a:71:90:ad:56:d6:c4:cb:81:3c:c3:
                    11:0a:58:be:a3:05:63:ec:89:50:4f:85:3c:3f:89:
                    c6:54:8b:08:e1:89:61:15:62:fe:ea:c7:6f:13:e3:
                    c7:fd:82:f9:83:55:00:24:60:00:0b:0d:3d:e1:6f:
                    5f:6c:28:30:d1:06:6c:6f:08:c6:12:fe:17:02:cb:
                    57:cf:23:c3:50:d5:bd:95:2e:e7:66:e3:f2:7b:9e:
                    d9:29:4a:c6:83:66:d2:41:3f:dc:5f:f8:cf:f2:1b:
                    63:b9:55:86:1f:ff:94:0e:fa:84:04:d7:5e:8d:c7:
                    ad:9d:71:64:d1:db:78:ca:7a:42:49:37:9f:67:0b:
                    86:cd:c8:40:e0:fe:21:b2:77:b9:a3:4c:44:3d:d8:
                    4e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:73:CF:61:F4:B0:6B:22:E4:F8:2A:2A:08:E9:6B:3F:A5:66:09:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/da6b5111-7249-37ea-9152-4e21b54dea08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3520::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:dc:a9:5f:7b:8a:9b:36:ff:03:65:87:cd:40:2b:b4:9c:73:
         d4:63:13:af:c3:0d:d6:22:7f:9e:9f:e8:6c:7d:14:b2:d3:cd:
         30:27:f3:c9:c8:31:eb:c6:52:62:bb:04:19:b0:14:ea:31:33:
         c3:84:c9:85:09:99:d1:2c:c0:ee:2b:7b:cd:3f:88:cd:5a:dd:
         45:4b:4c:c8:e6:4f:69:4a:dd:b8:81:38:cf:d1:a6:b0:b5:e5:
         63:af:48:ae:d0:8a:be:37:53:48:67:91:6c:e6:f7:70:c0:4e:
         bc:a0:6d:b0:f7:e7:ce:02:09:94:03:f2:2b:3f:4a:c4:12:b7:
         7c:f6:4c:6a:ca:64:f7:12:5f:a7:98:5e:07:60:4c:5a:2b:e5:
         3a:e6:bd:f3:25:9b:84:b4:86:7f:2c:6e:e6:d1:46:ba:bf:6d:
         d3:b8:a0:f6:cd:fa:c9:df:f4:c1:c3:2e:3b:c1:3f:13:38:01:
         48:40:c6:7a:bd:5b:87:c2:8d:41:5f:2d:61:5b:c4:f9:81:54:
         6a:c1:e7:ae:46:20:78:ac:34:d7:a7:da:b3:ae:54:e3:e8:b5:
         5b:cb:10:70:16:3f:e5:89:b9:81:47:3f:27:3c:a5:a4:ab:75:
         d5:9a:83:b1:91:9c:91:2f:89:d2:2c:42:e0:a8:22:7b:ff:d9:
         e4:f8:b5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:16 2024 by rpki-client on console-ams.rpki-client.org