Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/daa37269-495d-33b1-9d05-5821ab3eccdf.roa
File:                     daa37269-495d-33b1-9d05-5821ab3eccdf.roa (raw, json)
Hash identifier:          0rJNFHQ0qOdAvrEeTcZtMoyUwlZGLDTsDQv8nUHt8dU=
Subject key identifier:   27:E7:A8:F1:E6:91:B0:DA:A0:1E:D2:AD:70:EF:53:D2:96:B4:96:46
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C17911EF1F889D7E9D388C80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/daa37269-495d-33b1-9d05-5821ab3eccdf.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:2b90::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:11:ef:1f:88:9d:7e:9d:38:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=a539ab08-5122-42a8-8d86-0b0399f4978d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fb:e6:08:20:2b:c6:71:0d:3d:77:6f:ca:a3:
                    42:08:4e:14:04:ae:11:2f:77:48:c7:3f:4e:a1:61:
                    40:c4:cd:2d:a9:33:16:d7:0e:c9:8e:de:b0:34:8b:
                    65:00:5e:d5:06:23:e4:18:d1:99:be:25:cd:6e:55:
                    95:b8:fe:aa:3a:a0:7d:be:90:ca:72:9a:6b:bb:9c:
                    c7:f3:a4:17:52:95:3a:2a:be:63:9b:49:ee:60:68:
                    e1:39:e8:84:56:63:5e:4e:6a:e2:93:f6:97:ca:dd:
                    ba:43:1d:b6:3a:0b:b3:b6:44:11:a6:b8:7a:f0:56:
                    88:67:5f:33:b5:b7:ba:c3:23:7a:5b:d4:0c:9e:6e:
                    6e:06:27:a4:b6:fc:2a:86:e7:19:ed:db:98:8a:90:
                    27:ce:98:9f:7f:97:76:7f:69:99:f9:74:b9:7b:26:
                    c9:4f:33:92:a2:94:f0:6c:e0:39:11:84:f9:9b:74:
                    62:0e:ff:40:22:39:06:d3:92:78:71:18:01:dd:4c:
                    b2:3b:a6:87:d9:17:ff:e4:53:8b:1e:2b:bb:e0:55:
                    88:48:f4:88:68:46:4f:31:0d:c3:af:7e:c9:05:60:
                    05:4b:d2:ea:9b:21:33:1e:83:aa:88:6d:04:69:46:
                    d5:a6:d3:c1:45:03:8c:c5:29:31:13:c1:cb:87:f8:
                    f9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E7:A8:F1:E6:91:B0:DA:A0:1E:D2:AD:70:EF:53:D2:96:B4:96:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/daa37269-495d-33b1-9d05-5821ab3eccdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2b90::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ce:35:8b:07:20:56:09:a6:bd:85:80:dd:fa:97:a2:b6:de:
         01:da:a3:e5:04:ec:e3:ba:e1:83:ad:ea:9c:ac:72:8e:74:21:
         14:6e:3b:a8:59:4d:06:ad:99:ba:32:86:bd:25:6a:e8:bc:de:
         48:aa:e3:3d:d9:49:2b:7b:fd:f4:b1:2e:b8:62:d7:92:2f:00:
         a7:fc:1a:2e:f7:52:ae:f8:40:47:48:6c:9b:89:01:ae:5e:89:
         f1:f8:a1:f9:cf:af:a7:0b:05:ec:85:a5:54:df:1a:4d:e9:4d:
         aa:b1:3e:7d:7b:77:97:50:25:ff:3b:c4:1b:ba:cb:41:eb:fc:
         ef:00:2a:18:29:f1:c9:76:c2:1b:49:f5:bc:48:ee:ee:9f:af:
         cf:07:bf:55:ce:df:f1:1f:4a:03:b6:4d:92:5d:65:2a:09:c5:
         3c:de:e0:f1:3a:ab:6a:51:28:f6:49:98:9b:36:9a:5c:81:83:
         0b:b7:78:ce:85:d2:f0:87:56:7c:cb:88:fe:32:ae:ce:95:2e:
         3a:34:8e:b4:3d:23:38:69:ef:13:c6:db:0a:d0:2e:4b:4d:d8:
         b3:28:23:bb:39:f5:79:a5:22:97:fa:74:0b:d7:e8:ec:e8:3c:
         91:6b:2e:72:21:20:12:22:00:0c:05:b9:67:97:08:df:ff:3b:
         d8:04:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:48:21 2024 by rpki-client on console-ams.rpki-client.org