Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f38a706d-f7cc-35a3-83c2-1f7535910e40.roa
File:                     f38a706d-f7cc-35a3-83c2-1f7535910e40.roa (raw, json)
Hash identifier:          wh0LJycNQMj1wI3Ddsp9o4VSUjZsMst//yQmCnVzI60=
Subject key identifier:   E9:21:D3:82:46:82:51:81:29:4D:F6:7B:A4:0A:36:0B:75:4A:D1:23
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780269700EB0E6DCA82A52E00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f38a706d-f7cc-35a3-83c2-1f7535910e40.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2607:8940:5e70::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:97:00:eb:0e:6d:ca:82:a5:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=0a6e59fb-9543-49ce-a6da-48b414c9d8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:24:c7:52:b9:85:67:c6:1e:a1:ad:65:1a:10:
                    4d:ce:6f:f3:ea:29:0f:7a:ea:f0:9c:f1:a1:16:85:
                    67:38:8a:8a:cc:46:8f:d6:3c:a8:2a:3c:18:41:7c:
                    66:d6:e0:64:1f:2b:87:c4:e0:35:e7:67:0e:af:c2:
                    77:3a:9b:a2:46:46:aa:d9:1b:59:bb:c4:07:a5:45:
                    ff:85:3d:a8:c2:62:0c:b2:c9:b7:8f:49:60:84:62:
                    d1:4c:24:9a:5a:0f:9a:a3:e0:b8:da:e1:63:7f:83:
                    c8:d9:b3:39:70:0a:91:35:9d:2e:52:e7:ed:29:0a:
                    93:5f:bc:41:a3:ce:b3:2d:89:aa:6c:36:b6:29:81:
                    ce:c6:1d:a9:4c:da:81:3d:83:1a:aa:4f:63:4a:1f:
                    35:4d:70:ce:ac:7a:e7:7f:d3:a2:2b:f1:04:27:b2:
                    46:16:0f:97:f8:d5:e9:99:9d:e0:9b:36:1c:9f:92:
                    80:e1:cb:69:e4:7b:8d:9d:a3:6d:36:8e:4b:f2:4f:
                    a2:00:83:71:d3:27:8e:df:4f:12:3a:d3:35:a6:4f:
                    14:bb:fc:f5:98:59:64:52:7c:c3:52:30:98:00:cc:
                    06:db:45:cc:0a:24:5d:72:84:6a:ef:0d:a9:d6:9c:
                    3f:4a:2c:9d:2a:9c:a9:35:a9:2d:44:fa:e6:28:c3:
                    36:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:21:D3:82:46:82:51:81:29:4D:F6:7B:A4:0A:36:0B:75:4A:D1:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f38a706d-f7cc-35a3-83c2-1f7535910e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5e70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b4:ba:6e:1c:36:ea:2d:e4:25:ba:fb:cb:03:9a:7e:54:bb:
         8a:c4:4c:da:5d:f3:72:89:ab:6c:15:3a:0a:f5:a5:10:ab:1f:
         4b:8d:30:7a:11:46:41:ad:50:d3:42:99:23:85:14:80:b7:63:
         80:a4:19:5e:84:a5:5d:52:23:0d:67:de:c8:e6:57:ff:7f:20:
         9d:1a:81:b3:90:d2:83:2e:e0:80:9d:1f:b4:61:81:35:41:88:
         39:49:57:e8:c3:92:29:7a:a9:51:93:78:17:cd:ba:6f:80:ac:
         c4:0a:bd:56:5a:c1:72:1d:3d:ee:a1:84:b9:c1:fc:23:71:f7:
         d1:f7:f2:41:55:8c:b8:67:07:2b:da:f4:45:71:0e:3c:62:8f:
         e3:b6:07:6e:4c:9a:62:ed:13:bf:e5:2d:90:77:c4:58:f4:1e:
         e0:a1:a4:ee:1b:15:e8:0d:90:08:13:d8:56:17:2f:3c:8d:4c:
         40:97:92:5d:07:80:af:2c:f8:13:0b:e9:96:e8:cd:01:11:4d:
         3a:82:fa:a3:5b:a1:66:12:a5:6f:32:9e:80:00:55:6d:60:8d:
         d6:f5:9d:91:40:44:af:b8:9e:21:91:dc:10:1c:1f:14:2f:cd:
         25:02:81:f8:e8:59:73:6d:c0:2e:cd:56:4f:ac:7b:89:f7:25:
         3a:04:d2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:51 2024 by rpki-client on console-fra.rpki-client.org