Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fae692d7-3261-3990-a139-ccf452aecace.roa
File:                     fae692d7-3261-3990-a139-ccf452aecace.roa (raw, json)
Hash identifier:          MfGNNZQDrIar5lOVYMfSr0fLdaMgxRv2XdN3dIiDtBk=
Subject key identifier:   9E:34:A1:B2:75:E5:52:B8:E1:D5:53:55:73:C4:15:16:B9:9E:D1:C1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178F6EFDB58616070C61F80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fae692d7-3261-3990-a139-ccf452aecace.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:3860::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:f6:ef:db:58:61:60:70:c6:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=e05d9b81-3c6e-404e-ba34-30873164c263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b6:36:90:98:67:58:28:af:98:ea:7d:65:38:
                    3f:b0:30:93:c8:54:09:dd:34:b3:51:63:97:a0:8e:
                    9c:00:91:e4:ef:65:dd:43:bc:5f:c8:de:6e:32:7d:
                    66:ac:bd:b8:1f:ed:f4:c2:6b:dc:e9:a6:a5:a2:d0:
                    32:bf:19:c5:51:d0:26:2b:0f:0d:4d:87:4c:45:c6:
                    b2:e3:46:9d:51:c8:b4:14:4e:19:43:61:e9:9a:aa:
                    34:bc:c9:aa:34:8d:46:19:5a:5e:0b:e0:2a:0d:2f:
                    a7:0d:88:eb:8f:18:c3:0e:9a:cf:6d:f7:32:ed:98:
                    54:14:26:ed:d8:32:1b:ea:8f:1c:c9:e2:66:36:e1:
                    32:db:03:22:bb:cf:ac:10:d8:9e:07:54:30:d2:e9:
                    17:c2:ce:5d:53:7e:72:1c:8f:2a:29:9b:7d:7c:01:
                    c3:ec:1a:33:86:b3:20:02:4f:9a:a6:c4:eb:97:b0:
                    12:a1:3c:da:f9:58:ad:71:0e:3e:1e:95:95:71:9f:
                    be:80:4e:14:98:cc:6e:6a:25:c2:75:6b:1e:8a:0e:
                    39:29:1a:f5:65:6c:77:84:3d:b4:23:7d:0c:c8:16:
                    ad:e3:f2:1e:f2:70:93:16:2d:22:ba:43:46:4f:78:
                    f0:c2:5d:3e:70:ce:aa:a9:3c:ca:fd:a9:de:49:64:
                    0a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:34:A1:B2:75:E5:52:B8:E1:D5:53:55:73:C4:15:16:B9:9E:D1:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fae692d7-3261-3990-a139-ccf452aecace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3860::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:80:c6:f7:19:e2:da:82:c6:5f:b4:22:51:f8:1d:66:a9:14:
         5a:29:71:d8:93:dc:8d:ba:9d:7a:fd:bf:6d:a8:48:58:43:63:
         93:38:4b:b9:e9:b3:92:49:14:92:2f:2f:d8:15:b8:88:46:24:
         f9:16:c5:c6:0c:39:e7:e7:81:fe:80:54:22:8a:66:79:96:b7:
         58:ea:73:53:6b:bc:76:c9:c1:9d:e3:13:01:66:20:1c:c6:b9:
         c6:4e:ad:d9:4d:fc:5f:30:1b:d5:f0:b4:9e:8c:7b:0f:07:6c:
         72:7f:67:3a:1b:2d:7d:93:10:5f:39:86:07:b4:c1:c4:82:11:
         c0:80:1a:f9:7a:f4:ab:aa:18:c8:96:6b:aa:98:5b:78:9a:3c:
         2b:89:6f:2c:a4:11:41:67:59:3d:93:d2:2d:c8:fa:3e:89:53:
         94:47:bb:e3:f6:30:ee:98:57:f8:0f:b8:be:87:bc:97:ee:1d:
         03:a0:1d:97:63:4a:85:b1:87:8e:c0:4a:d6:c7:72:3c:89:aa:
         68:b2:1c:88:e9:0c:f1:5c:6b:03:d4:62:e7:0a:5b:f2:67:bb:
         f8:6c:24:e2:68:34:90:ee:df:17:c4:72:08:0e:32:55:7a:74:
         8e:11:d7:b0:88:b9:7e:53:eb:df:21:2f:87:5b:5d:cf:16:9e:
         e8:19:b8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:25:48 2024 by rpki-client on console-fra.rpki-client.org