Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f567d0f9-edc9-3476-8da8-aff443954c90.roa
File:                     f567d0f9-edc9-3476-8da8-aff443954c90.roa (raw, json)
Hash identifier:          Uoj/4raAiCFx3PwWSG8r9xCjBTmECKYwIOzHRzH/7us=
Subject key identifier:   74:20:1F:C8:72:C0:49:24:B3:87:55:6C:AA:A0:61:31:66:8B:D1:C8
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858478026816A2EA50EE7E5789A40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f567d0f9-edc9-3476-8da8-aff443954c90.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:2900::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:81:6a:2e:a5:0e:e7:e5:78:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=7c90be49-5a63-48df-9f06-6942b2a035f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8a:97:dd:c2:9a:3e:2c:c4:53:15:2d:4a:62:
                    5f:36:76:58:5f:22:b7:18:58:95:8b:e1:73:d5:52:
                    6c:75:12:d9:6b:38:23:2d:bc:3f:2d:f1:4c:f1:1e:
                    b9:08:d0:18:f7:1f:73:4b:b3:c4:60:07:68:b5:0b:
                    e7:bb:b1:7f:43:50:3e:30:d5:72:6f:88:94:47:08:
                    c8:10:fe:6d:a2:54:d6:0f:f9:59:e5:87:55:fa:06:
                    8a:82:89:a4:40:b7:49:9d:fe:71:d9:f9:c9:c8:67:
                    74:4b:07:67:5e:b2:df:95:3b:e6:c6:b8:0e:49:b0:
                    02:c9:9f:4e:b6:3d:05:b7:39:00:23:0b:bb:93:a7:
                    7c:a2:4c:e9:ce:40:93:4f:2d:49:5f:ba:4d:fd:a9:
                    c5:25:d1:fb:ad:14:ee:97:cf:4b:15:ce:89:59:52:
                    4e:c0:19:8f:2b:98:ba:af:90:ba:ea:04:17:b3:53:
                    4d:d6:85:7f:8b:c8:4b:9d:7f:c1:5c:0c:b2:e7:ac:
                    f0:70:21:ba:d1:a1:87:25:e8:67:1b:d4:a1:bf:7f:
                    9d:cc:19:0d:06:7b:f0:37:26:be:3d:c6:37:18:5a:
                    6f:78:b7:0c:de:bd:8f:2b:34:fc:2f:4f:45:fd:76:
                    4e:c2:3c:81:4e:67:05:db:69:4e:90:ec:5c:be:42:
                    01:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:20:1F:C8:72:C0:49:24:B3:87:55:6C:AA:A0:61:31:66:8B:D1:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f567d0f9-edc9-3476-8da8-aff443954c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2900::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ea:1f:8d:b0:3a:68:8a:c0:18:fb:ba:f9:55:c8:15:43:84:
         fb:57:32:6b:ce:c0:53:97:92:3f:bd:d4:a3:0f:aa:ad:f9:5f:
         dc:f5:ce:0c:c1:bd:f7:fc:85:33:27:00:33:b1:21:c0:27:69:
         17:d4:f9:37:b7:9e:13:75:4d:8e:c4:83:61:98:0a:3e:4a:ef:
         3e:3b:eb:49:bd:52:28:f4:23:46:73:46:08:76:fb:94:a9:c1:
         25:68:e5:41:79:ce:7e:e5:98:2e:0e:ef:83:ba:bb:62:49:28:
         83:bf:60:a8:35:aa:30:12:98:ad:e5:38:f4:2a:b6:65:d1:ac:
         4d:6d:d5:93:9f:66:4d:f7:28:4f:fa:0d:01:04:e0:27:b7:fa:
         f9:36:75:d2:61:72:ad:9b:ae:8c:2f:bc:37:7b:93:b0:22:ae:
         42:49:ff:74:7b:6b:75:bb:be:42:15:65:44:64:63:9b:9c:10:
         ac:9e:da:e5:cf:35:0b:2d:c9:5b:b7:48:7b:96:01:e9:d3:3d:
         2a:6b:35:ea:fc:4b:a1:b4:a7:34:41:bf:1a:2f:89:a7:72:d4:
         4a:8e:50:44:38:76:93:30:e9:0a:d0:d2:4f:da:d2:18:8e:45:
         12:45:e5:86:82:aa:4a:c5:97:d0:bd:6f:47:4a:47:38:44:94:
         cf:b0:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:51 2024 by rpki-client on console-fra.rpki-client.org