Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fbcdfa9a-5a4a-3592-9202-be0f20711738.roa
File:                     fbcdfa9a-5a4a-3592-9202-be0f20711738.roa (raw, json)
Hash identifier:          VKE/y6n2DtjJsctIxU5GNqQSfK7ujr/D7fmwAfTdZD0=
Subject key identifier:   5F:48:37:B9:3F:9F:37:58:75:8F:43:45:A7:DD:77:F0:8E:C6:1A:CA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780268B9F1A4871F3F3B89C00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fbcdfa9a-5a4a-3592-9202-be0f20711738.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:3680::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:8b:9f:1a:48:71:f3:f3:b8:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=a0a4f8d5-b1ea-433d-9dac-0ebdc2cd893b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5f:42:89:ef:ac:b1:1d:59:14:19:28:ee:24:
                    e8:f0:ca:b1:d8:b4:fb:0e:64:9f:22:11:85:cb:69:
                    44:04:a1:e9:68:18:8c:4b:34:90:d7:fb:43:6c:77:
                    ec:7f:c2:71:3f:5e:65:58:72:f2:82:52:e3:c8:5e:
                    f5:40:5d:55:cc:93:82:3b:80:37:08:29:dc:64:f2:
                    31:57:8e:96:3f:c6:07:42:45:85:09:6a:40:23:4a:
                    91:99:be:d7:d7:3e:a2:7c:c6:12:0f:f4:c8:e2:0c:
                    fc:b6:5b:61:cf:fb:80:36:4e:0d:cb:61:85:67:7f:
                    c1:f9:07:1e:b5:96:5a:34:bf:7d:88:0e:9e:76:bc:
                    44:d9:a0:03:1c:21:8a:e6:b7:16:e3:a2:ec:d0:48:
                    c8:59:72:29:9a:aa:af:50:55:2e:17:0f:0c:d9:5e:
                    0d:16:b2:98:7c:15:a9:e2:3d:b6:7c:20:8a:6f:ba:
                    17:1d:51:ad:25:44:8f:19:77:6b:40:da:bc:13:97:
                    3a:a0:e3:86:f6:36:67:7c:01:d4:88:65:f0:ed:08:
                    15:31:d3:8b:66:5c:32:d2:4e:19:7c:d5:98:16:e4:
                    84:c8:d5:9d:3d:47:4f:e6:f1:98:a5:08:77:04:31:
                    e8:c2:e9:ff:09:31:64:6f:0f:49:4e:9a:9b:36:9b:
                    4f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:48:37:B9:3F:9F:37:58:75:8F:43:45:A7:DD:77:F0:8E:C6:1A:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fbcdfa9a-5a4a-3592-9202-be0f20711738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3680::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:2c:65:7b:d8:a5:0a:78:4e:a6:6b:20:5a:3d:63:bf:51:fb:
         b9:72:e1:9a:81:16:c6:8d:7e:09:0e:a1:f0:04:af:25:18:05:
         1c:2c:9c:62:e4:cc:e0:bc:f1:71:49:f1:2a:93:47:86:e2:7e:
         4e:00:70:63:4a:a6:26:d8:b3:46:bf:f9:b1:d5:27:ea:d7:eb:
         49:d0:9b:96:ae:f5:af:b1:31:73:26:f5:21:4b:e9:68:f1:b6:
         41:e8:fa:ba:01:ed:5d:47:b5:76:04:c1:4c:11:30:49:e8:c2:
         ea:8f:b8:e8:1a:fe:3d:af:3e:99:e8:86:67:8e:0f:04:62:14:
         b8:f6:f6:8b:4b:c3:be:12:a1:d1:25:09:1c:72:39:7f:6a:9d:
         94:a8:66:bb:fc:35:35:87:71:ea:8f:23:d2:ed:be:ac:cf:b8:
         9e:81:94:1c:8a:74:14:63:38:21:0b:a1:cd:1c:4d:7a:01:d0:
         21:90:cd:50:c1:58:dc:27:75:c9:d8:3a:c3:cc:54:36:de:9a:
         dd:22:49:63:5f:b5:4a:35:fa:9a:c6:b0:77:ae:fb:f7:9a:8e:
         db:41:48:5e:bb:c0:ab:45:c7:0b:be:19:38:e0:94:d9:fa:b9:
         dc:86:03:ac:71:82:0d:52:87:17:b5:91:a5:80:aa:3b:fc:9f:
         ce:71:66:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:51 2024 by rpki-client on console-fra.rpki-client.org