Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f5fd7d04-254b-340a-b4e7-9918788d8933.roa
File:                     f5fd7d04-254b-340a-b4e7-9918788d8933.roa (raw, json)
Hash identifier:          jj940NVgwghOv7sPrw3C9zKnKCS0fOPCsQmkZOsGbP8=
Subject key identifier:   51:B5:CC:30:BD:5D:1F:92:BE:7A:21:2F:A0:92:85:9C:0B:3B:27:EE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178D895F407B38CD157C780
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f5fd7d04-254b-340a-b4e7-9918788d8933.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:39f0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:d8:95:f4:07:b3:8c:d1:57:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=2a55aa56-fdae-4e7c-a255-e716657d300e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0a:80:b5:a5:e6:e1:03:42:b8:00:65:2b:73:
                    c8:08:64:6c:48:e6:2d:3d:ae:50:77:6b:bb:f1:7e:
                    8c:5a:b1:2e:39:1c:06:89:a5:28:b1:73:5c:31:09:
                    0f:41:cd:c9:9c:8f:b5:73:7b:94:9e:31:4b:4d:77:
                    30:c1:79:5e:ff:25:f4:df:29:7c:88:ab:e6:0c:05:
                    1e:81:ac:2a:31:26:d1:60:12:b5:c4:4b:08:fd:85:
                    7b:c1:91:fb:4d:01:e8:37:b4:4a:9e:1f:db:3e:9f:
                    07:69:4a:aa:b4:f2:7c:66:70:a8:d6:ef:8d:94:f6:
                    db:65:9b:30:9a:a5:e1:cc:22:90:4d:c1:d8:73:d5:
                    c3:47:b9:ac:50:a9:df:ed:b5:81:56:55:65:b9:fe:
                    d2:fb:72:4c:f5:39:4e:d2:c8:a0:bc:6b:70:a0:d1:
                    bf:c9:96:57:59:0e:3b:67:e9:0a:4a:51:33:7e:44:
                    42:16:a5:a1:4c:e0:ab:f3:53:5b:93:34:da:9c:25:
                    12:a7:fe:27:9c:0c:5c:3a:db:49:50:17:b7:0d:50:
                    c1:0c:1a:3d:96:bc:8c:2c:51:65:29:59:22:d2:ca:
                    35:8e:cf:3c:f5:4b:fe:56:d7:f3:6a:95:c1:37:38:
                    1a:40:2e:56:a8:7b:ab:e9:43:af:df:48:79:ba:42:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B5:CC:30:BD:5D:1F:92:BE:7A:21:2F:A0:92:85:9C:0B:3B:27:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f5fd7d04-254b-340a-b4e7-9918788d8933.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:39f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f8:86:41:0f:3c:5d:a9:b3:06:ae:9a:ba:3a:c7:57:08:ee:
         6a:ab:48:bf:03:e1:6e:5c:bd:50:07:da:5d:2d:07:8c:37:a3:
         81:22:7c:e9:b3:52:b7:8f:51:39:e9:7f:7c:75:b9:02:67:ae:
         25:82:67:21:3e:a7:4b:43:a1:3b:65:68:69:6f:d0:f8:e1:82:
         f2:89:ff:9b:80:59:f2:a0:25:23:9f:3d:ca:f2:4a:1c:30:ac:
         f5:ef:b6:f5:da:4f:06:d2:6b:ed:8b:20:49:35:58:04:19:16:
         9f:1d:9a:ee:f3:65:5d:e9:ea:22:42:f5:49:a8:41:17:5c:ee:
         d8:bc:8d:7c:4a:33:a8:79:1d:61:37:39:45:2f:e8:98:9a:c1:
         43:59:2a:33:62:1f:eb:f6:97:8c:1b:95:74:e5:f1:bd:7f:0f:
         ba:2b:fa:17:93:85:9d:7a:4a:8c:2c:8b:22:31:31:a1:4c:e2:
         68:94:a8:4c:24:34:cb:5a:63:2f:ee:f6:d4:bf:64:dd:f9:de:
         42:f9:00:0c:48:7f:35:11:12:07:97:0b:e7:31:f6:a8:91:1e:
         d8:d8:f8:19:f5:b4:ba:fe:4a:87:1f:5b:3a:29:70:80:f7:34:
         34:bc:48:d1:5a:36:32:db:b5:15:c8:22:1b:d3:10:c5:05:72:
         6d:80:98:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:37:47 2024 by rpki-client on console-ams.rpki-client.org