Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e8627125-cc47-3088-b776-53d05690a8da.roa
File:                     e8627125-cc47-3088-b776-53d05690a8da.roa (raw, json)
Hash identifier:          gez3ZymnkPlU56EPmDsirBnU1EAvByrmqKYuI5Oj++0=
Subject key identifier:   74:D8:C3:E6:40:23:53:E5:56:5D:70:B0:A3:66:1B:33:60:0F:28:72
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178E35E513057E9DE99A280
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e8627125-cc47-3088-b776-53d05690a8da.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3730::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:e3:5e:51:30:57:e9:de:99:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=87d16fc5-5fcc-4465-ae1d-4034ce29df12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3b:66:9c:88:cf:f0:59:c3:d7:3c:d6:66:07:
                    7c:fc:94:71:fb:f2:17:9f:d9:af:c0:64:fc:7d:ad:
                    97:36:b6:e2:9c:97:a6:0d:ae:50:f4:21:32:39:d4:
                    50:9c:75:fb:68:6a:14:87:cd:02:a0:3f:ba:7a:a0:
                    c4:da:52:43:f2:30:ba:76:af:c4:3f:93:4f:28:b0:
                    3a:c3:9a:e0:ff:f9:c8:0d:42:53:50:cd:b8:1d:07:
                    66:d0:2f:17:e7:09:86:2f:9d:2a:51:32:32:de:96:
                    2f:9f:5d:b1:fe:0a:c2:fd:78:32:a6:6b:69:8d:37:
                    bb:a9:18:57:e8:11:41:05:ea:59:f1:ff:12:37:c8:
                    87:3a:35:e1:f9:17:66:b6:75:11:74:c0:dd:f7:c4:
                    8c:30:07:2a:3c:14:39:50:ed:d2:e6:0d:c7:4b:13:
                    31:b4:f1:74:b1:f4:24:61:79:45:20:99:4a:d1:be:
                    50:36:9c:7e:4b:89:1c:1a:00:60:98:f1:2b:04:03:
                    9a:5e:7e:7c:f8:4d:4b:47:6e:40:61:23:d0:cd:fa:
                    9b:23:5e:aa:73:0a:2e:96:40:c4:06:a3:ef:93:7f:
                    fe:08:1d:f5:56:b5:ac:01:3d:ee:8c:a0:43:a4:ed:
                    56:e6:44:01:95:ca:e2:a0:59:87:5c:cd:99:4f:06:
                    75:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D8:C3:E6:40:23:53:E5:56:5D:70:B0:A3:66:1B:33:60:0F:28:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e8627125-cc47-3088-b776-53d05690a8da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3730::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:1d:bc:47:8b:48:6d:08:51:99:32:42:60:e4:ef:de:58:23:
         4d:5f:66:66:7f:7e:66:10:ca:7a:7d:b2:66:9c:29:a4:a4:b0:
         e0:41:b8:ec:28:84:9e:13:b4:f5:91:79:22:9c:49:78:f8:98:
         3d:5e:d2:2a:ff:5e:23:8a:d8:40:82:91:5e:3b:eb:31:44:ed:
         df:8b:a1:ca:b2:2a:67:e6:9b:6a:63:98:ba:1c:53:be:39:a6:
         8f:8e:be:b0:c8:13:8a:9d:b8:53:bb:23:ba:06:ac:f3:7d:69:
         15:91:86:85:3a:95:b6:40:1e:6c:0d:76:45:a6:ad:24:80:df:
         5e:4e:a0:f2:c1:72:af:7f:f5:73:03:70:50:5f:d9:92:75:5f:
         cc:cb:63:7c:66:ac:f4:3f:09:29:08:ae:83:6e:58:6f:66:b8:
         24:dc:e1:45:08:5e:d7:fc:ff:9c:81:2b:a3:f3:a9:a2:b8:8f:
         1c:a9:f8:3b:f1:30:8f:bc:9f:40:99:6f:72:e1:f5:1b:5f:f7:
         5b:e0:21:fd:82:91:21:6a:b8:9c:d6:79:dc:08:d5:19:d0:3b:
         a3:4e:80:52:e1:98:b2:b2:09:e6:3b:3e:f7:69:38:5a:94:c4:
         54:8d:92:b4:e8:22:b0:e2:c8:c4:45:9a:d1:24:17:77:3e:3d:
         f9:50:d8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:25:48 2024 by rpki-client on console-fra.rpki-client.org