Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0ef03e6-40b0-3940-973d-f66bbd5fd5ac.roa
File:                     f0ef03e6-40b0-3940-973d-f66bbd5fd5ac.roa (raw, json)
Hash identifier:          BzhgzdcHtUHTOzQ04wlutQ3wsB8Sam4nw3ZQkXRu3i4=
Subject key identifier:   FC:32:67:C0:F7:B7:54:DA:B9:0C:D4:D8:D9:DC:5A:D8:8F:D2:2B:9F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178DE5393E46DD2BE274C80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0ef03e6-40b0-3940-973d-f66bbd5fd5ac.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:2d50::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:de:53:93:e4:6d:d2:be:27:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=80ca9bae-f63c-463d-8e60-f299bc9dc348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:90:43:e2:d3:9f:9c:5b:29:3d:7e:ed:89:ef:
                    93:d9:1c:4a:c5:38:f8:34:c7:60:b7:7c:e2:fe:7f:
                    89:ab:a7:db:9f:48:2f:94:9f:e9:a4:62:33:e6:8a:
                    96:56:11:b0:53:35:8a:58:cf:6f:ec:05:b8:fe:d4:
                    97:10:cb:10:9b:60:c2:fa:f1:f3:6d:a4:9a:25:09:
                    77:5a:09:3d:62:a8:ea:89:10:7f:02:32:2b:f4:26:
                    e1:ed:50:2b:b0:4c:d9:66:dd:5d:19:39:c4:7e:fe:
                    2c:29:69:81:5b:85:ac:c9:83:78:03:5d:c9:e8:78:
                    ee:7f:cf:bd:f6:bf:54:35:45:f7:46:2b:d8:ac:d9:
                    3d:93:48:dc:df:07:bb:3d:f6:66:dc:05:84:a2:63:
                    af:d2:b7:68:eb:e0:a1:f6:46:c6:d2:2a:23:fd:4b:
                    d4:a6:c1:9e:5c:ca:42:65:41:f9:af:db:bb:a2:4f:
                    65:f1:d7:1e:73:15:b9:1b:26:23:6f:0e:16:04:37:
                    2e:51:54:1e:fb:47:1b:df:19:dc:0d:44:7e:0b:b7:
                    ab:e6:83:2c:45:ab:eb:aa:6c:65:75:5e:c6:de:ae:
                    b1:3a:d5:f9:53:ed:bc:38:56:3e:6b:4f:e8:0e:d5:
                    73:55:ae:5e:40:81:e0:5d:21:be:ce:d1:ee:db:52:
                    2e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:32:67:C0:F7:B7:54:DA:B9:0C:D4:D8:D9:DC:5A:D8:8F:D2:2B:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0ef03e6-40b0-3940-973d-f66bbd5fd5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2d50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9b:48:43:e2:80:14:13:ea:32:7f:b1:9e:35:12:f5:fb:08:
         7e:cc:6d:b9:90:78:e2:93:ee:c3:85:91:69:fb:09:46:11:cc:
         73:68:f9:00:a7:f6:f7:34:95:73:9b:87:24:10:2e:0b:28:c7:
         e4:07:24:a9:19:c7:f4:f3:04:de:3c:10:42:1b:bb:73:80:cb:
         fa:2a:77:98:a4:7e:5a:ec:e5:85:ed:61:81:96:d1:f2:0d:4c:
         26:80:e8:d2:52:ef:48:e1:8d:b7:9d:bc:a5:0c:cb:6c:b5:14:
         c5:df:a3:d7:9b:aa:8e:58:91:eb:cc:a2:f8:a2:99:90:cd:e2:
         55:58:81:38:bd:67:43:fc:a0:5a:f5:db:df:66:83:8a:49:3f:
         70:73:10:1c:68:04:ab:aa:8a:2c:c8:b4:c8:9d:f2:46:ff:b5:
         db:ed:9c:9c:74:fc:54:aa:4d:b2:a4:1b:27:6e:7a:5e:a9:bb:
         da:28:fb:fb:59:fb:3e:97:6b:74:b8:ba:5b:90:87:fd:77:ed:
         56:5e:37:3b:16:47:d4:da:6e:b8:34:ea:c2:4a:22:d6:c7:66:
         10:fb:83:cf:18:f6:6c:26:b2:df:73:3b:39:41:a3:ca:5c:97:
         db:a3:fe:34:d9:6d:ae:35:4d:16:70:d9:6a:76:a4:f4:b2:89:
         d2:5b:d3:26
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXBeN5Tk+Rt0r4nTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk
ODBjYTliYWUtZjYzYy00NjNkLThlNjAtZjI5OWJjOWRjMzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJBD4tOfnFspPX7tie+T2RxKxTj4NMdgt3zi
/n+Jq6fbn0gvlJ/ppGIz5oqWVhGwUzWKWM9v7AW4/tSXEMsQm2DC+vHzbaSaJQl3
Wgk9YqjqiRB/AjIr9Cbh7VArsEzZZt1dGTnEfv4sKWmBW4WsyYN4A13J6Hjuf8+9
9r9UNUX3RivYrNk9k0jc3we7PfZm3AWEomOv0rdo6+Ch9kbG0ioj/UvUpsGeXMpC
ZUH5r9u7ok9l8dcecxW5GyYjbw4WBDcuUVQe+0cb3xncDUR+C7er5oMsRavrqmxl
dV7G3q6xOtX5U+28OFY+a0/oDtVzVa5eQIHgXSG+ztHu21IuXQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPwyZ8D3t1TauQzU2NncWtiP0iufMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjBlZjAzZTYtNDBiMC0z
OTQwLTk3M2QtZjY2YmJkNWZkNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQC1Q
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAKbSEPigBQT6jJ/sZ41EvX7CH7MbbmQeOKT7sOFkWn7CUYRzHNo
+QCn9vc0lXObhyQQLgsox+QHJKkZx/TzBN48EEIbu3OAy/oqd5ikflrs5YXtYYGW
0fINTCaA6NJS70jhjbedvKUMy2y1FMXfo9ebqo5YkevMoviimZDN4lVYgTi9Z0P8
oFr1299mg4pJP3BzEBxoBKuqiizItMid8kb/tdvtnJx0/FSqTbKkGyduel6pu9oo
+/tZ+z6Xa3S4uluQh/137VZeNzsWR9Tabrg06sJKItbHZhD7g88Y9mwmst9zOzlB
o8pcl9uj/jTZba41TRZw2Wp2pPSyidJb0yY=
-----END CERTIFICATE-----
Generated at Mon May 6 22:48:22 2024 by rpki-client on console-ams.rpki-client.org