Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f390e584-e0d2-36b4-b97c-a4650182c299.roa
File:                     f390e584-e0d2-36b4-b97c-a4650182c299.roa (raw, json)
Hash identifier:          xG3UCRwTUZNk/nTGcozyCa2HI76T7dBCoK2AE1hjKEM=
Subject key identifier:   7E:71:EA:D8:E8:DF:F9:40:0F:85:0A:CE:52:7C:C8:8A:C7:B3:1F:01
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178CB4421804ADB3D4BCC80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f390e584-e0d2-36b4-b97c-a4650182c299.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3930::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:cb:44:21:80:4a:db:3d:4b:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=276ca2b5-3fad-4405-88bb-44951dd05613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:67:e5:98:d4:94:0b:96:fa:32:76:a9:60:
                    07:de:45:d8:c5:cf:a1:0d:a4:61:01:e0:ec:d6:3f:
                    50:9a:b5:e3:be:b1:de:b1:30:21:3c:bd:4b:cf:51:
                    7b:61:40:d2:66:45:4d:ce:f9:24:e1:2c:0b:58:77:
                    16:e0:0c:01:0d:b8:3d:8b:25:3d:db:c0:a3:76:30:
                    5d:32:a1:a8:3f:8e:43:e6:39:50:0d:a9:d0:69:00:
                    44:29:e1:0e:6d:3c:c7:cc:e4:ff:f0:b2:fa:3f:cd:
                    bd:a5:cb:c1:b2:d7:bd:0e:c1:6e:ad:1e:18:63:53:
                    b6:57:1f:0e:c9:39:df:a4:99:e0:00:cf:6b:77:3f:
                    c1:34:2b:85:ef:96:c5:35:08:64:81:65:f9:c0:85:
                    a3:ab:75:94:8a:33:f3:09:14:c4:18:5d:c0:36:83:
                    c8:a6:38:ca:1d:fc:ab:26:a6:c8:4f:45:8a:27:53:
                    b3:f0:e3:29:4b:7e:f5:d0:0e:c1:d0:8a:cb:42:06:
                    63:04:ca:97:8a:a6:e2:07:e0:41:47:f9:f1:87:e2:
                    2b:41:cf:e3:d7:7c:f4:1a:38:f0:91:ee:d2:4e:c6:
                    ee:bb:41:c2:7a:e9:c9:c8:51:8c:53:90:6e:3d:be:
                    ac:50:70:be:2e:49:a7:10:76:7e:01:ee:dc:16:7f:
                    fd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:71:EA:D8:E8:DF:F9:40:0F:85:0A:CE:52:7C:C8:8A:C7:B3:1F:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f390e584-e0d2-36b4-b97c-a4650182c299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3930::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c3:bd:6d:eb:5d:ac:62:8f:42:4a:83:65:50:44:8c:7a:66:
         ac:96:dc:e3:93:86:8c:d1:fd:8c:73:4e:1d:04:0f:5c:17:d7:
         e0:99:bd:60:40:79:2c:68:3f:97:be:ac:85:4f:77:3a:d4:4f:
         9f:0c:02:c8:fd:fc:28:ba:74:a1:20:28:04:d4:16:bf:9e:a2:
         f8:e4:18:02:82:e6:d1:5c:23:bb:44:d7:e1:79:d3:e0:96:9e:
         c4:6e:aa:a8:4a:c7:f3:bb:7e:6c:c9:f7:a3:9b:5e:7f:0b:ba:
         58:92:f2:bb:f0:11:ad:4f:d5:79:5d:33:dc:a8:6c:ee:21:57:
         ee:7c:06:ab:6c:15:ae:f0:a2:d4:3b:96:ba:87:b2:c4:72:c4:
         e5:74:d6:18:78:91:a0:28:86:70:d2:4e:44:55:a6:cf:94:ce:
         69:9d:d1:e4:dc:4d:94:eb:e4:3b:73:29:dd:4f:ae:8a:93:ca:
         1e:86:b6:99:a3:b0:98:85:ec:4b:91:d3:2c:24:5d:53:3c:22:
         3a:1c:17:d0:b8:05:d7:87:e0:e1:23:55:16:17:02:0b:cd:49:
         6d:16:ea:c1:55:83:68:4e:1c:58:36:2e:0b:52:93:26:ec:0c:
         f9:ed:b2:fd:38:c6:fc:01:0f:14:d6:29:aa:41:96:9f:0e:49:
         3a:23:d6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:25:48 2024 by rpki-client on console-fra.rpki-client.org