Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/481d97c4-7e9a-3cea-bb3f-dbd78665a0ca.roa
File:                     481d97c4-7e9a-3cea-bb3f-dbd78665a0ca.roa (raw, json)
Hash identifier:          PGno9LqeRHrGf1QVAlSW6A8MXxNf+orUnroFbk+6KSU=
Subject key identifier:   DC:ED:C1:46:6F:1B:98:A2:82:3D:E7:68:3E:F7:40:DC:EC:94:32:03
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285847F4A2132A2CA42E7C16576F00
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/481d97c4-7e9a-3cea-bb3f-dbd78665a0ca.roa
Signing time:             Thu 21 Nov 2024 18:23:45 +0000
ROA not before:           Thu 21 Nov 2024 18:23:45 +0000
ROA not after:            Wed 19 Feb 2025 18:23:45 +0000
asID:                     1288
IP address blocks:        2620:171:25::/48 maxlen: 48
                          2620:171:26::/48 maxlen: 48
                          2620:171:b1::/48 maxlen: 48
                          2620:171:f7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:a2:13:2a:2c:a4:2e:7c:16:57:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Nov 21 18:23:45 2024 GMT
            Not After : Feb 19 18:23:45 2025 GMT
        Subject: CN=40c7b2a9-fe55-46d9-ba08-86e095c2b158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a5:5d:55:09:42:b0:b9:dd:44:3b:38:b7:8c:
                    19:76:0f:2f:5c:8a:5f:35:6d:50:44:92:e1:ae:da:
                    7a:00:d5:46:92:c0:bd:42:1a:d9:e5:34:12:16:62:
                    a0:dc:85:31:55:a3:17:48:15:37:2e:fb:59:6e:cd:
                    ae:2b:c6:d7:45:55:58:7d:3f:1e:81:5a:bd:c7:b2:
                    37:34:e4:a9:47:40:b9:48:97:8e:fb:0b:15:ce:2a:
                    e3:47:a0:25:98:26:1e:0f:f6:60:e6:bc:bc:21:6f:
                    ea:e0:1c:4a:22:f3:c1:5b:12:4a:19:29:15:1a:b5:
                    35:22:96:15:e4:e9:5c:63:e8:0c:43:18:7a:12:13:
                    33:46:59:15:87:ea:b6:82:13:fd:eb:9b:32:a2:89:
                    c7:1e:b8:02:83:dd:bd:dd:8b:ea:3b:b3:b8:f3:d6:
                    e8:01:30:ab:51:19:bb:89:2a:b4:aa:7a:4f:9a:70:
                    3d:e5:91:f7:c1:e2:7d:a1:0f:72:2c:07:a5:32:6f:
                    e9:31:e6:e0:d2:4e:c9:41:c3:18:4a:68:45:62:70:
                    de:d5:3d:c3:ad:de:58:9d:bb:c8:77:67:0c:a8:6d:
                    ba:86:d2:ba:11:3d:6f:30:08:e1:f5:a4:e1:23:1d:
                    c7:e9:39:86:90:f4:0a:21:c3:28:fb:61:78:7f:7c:
                    8d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:ED:C1:46:6F:1B:98:A2:82:3D:E7:68:3E:F7:40:DC:EC:94:32:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/481d97c4-7e9a-3cea-bb3f-dbd78665a0ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:171:25::-2620:171:26:ffff:ffff:ffff:ffff:ffff
                  2620:171:b1::/48
                  2620:171:f7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:01:66:ce:60:94:2e:4d:7b:92:ec:c3:39:86:50:45:92:55:
         b3:2c:20:44:4b:43:33:65:bb:9e:b6:dc:1d:81:4d:6d:b6:f1:
         9e:fb:ee:c9:e3:52:71:a0:14:da:63:14:b8:80:7d:51:b6:18:
         77:57:72:6c:64:f5:f4:4a:8d:e7:56:88:bc:e7:89:4d:1e:f6:
         83:b7:2b:95:8e:ce:b1:ea:1b:68:3a:b4:42:cb:62:4a:2a:a1:
         78:36:d3:79:a7:69:11:2f:83:ec:2a:56:c3:00:64:4f:d5:45:
         61:41:20:72:38:26:c7:e1:c0:d9:50:ba:b9:18:73:12:bd:6d:
         c4:cf:31:cb:05:97:09:84:7b:52:b9:01:87:b3:3a:4c:b2:d0:
         7f:54:b7:6e:10:27:9b:95:ae:a3:f5:7d:30:20:dc:7d:76:6e:
         fd:be:a8:68:cf:b4:53:4e:2e:9a:a3:e2:9a:70:e2:20:c3:07:
         45:73:af:c6:32:eb:5e:e9:70:89:67:2d:30:31:c1:d1:fd:a6:
         9b:8c:5a:30:05:1b:82:4e:89:e3:0f:0f:ed:dd:4f:3b:72:d2:
         0e:d5:5c:ab:56:f6:8f:1c:45:a4:e8:ee:ef:69:67:67:63:7e:
         a4:8b:e7:a8:19:87:e8:1d:1f:3a:69:51:51:02:28:ee:c6:b7:
         0d:e3:9c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:40:48 2024 by rpki-client on console-fra.rpki-client.org