Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/002ab075-89b5-3972-9a0c-7bf53d237fc2.roa
File:                     002ab075-89b5-3972-9a0c-7bf53d237fc2.roa (raw, json)
Hash identifier:          qLspusXIeMHnZnPQPpQBPWnfTT99gcEyjaNKiFDR5LU=
Subject key identifier:   6F:1F:39:65:58:21:7A:98:8A:71:9B:24:44:6C:42:C8:50:D3:E1:87
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584726D063BF0D7FEF51DA560F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/002ab075-89b5-3972-9a0c-7bf53d237fc2.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     396542
IP address blocks:        2620:74:2a::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:63:bf:0d:7f:ef:51:da:56:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=30fa93c8-476f-45c2-8a7d-5b7aa8fdd5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1a:b0:88:cc:a7:59:3a:6f:b8:99:83:8c:db:
                    a6:a0:35:51:ac:7d:62:2e:3c:82:a3:25:53:03:be:
                    ea:ed:c3:a7:aa:b9:b6:fc:e5:ba:3c:44:72:1d:ed:
                    b7:c6:c1:4c:e7:9a:46:56:2b:0c:1d:ac:b2:10:00:
                    eb:43:76:1b:89:fc:44:73:9f:49:fe:c0:aa:a3:c1:
                    92:21:98:74:9e:6f:00:e9:44:02:b4:4e:c1:56:f4:
                    29:aa:0e:ba:4c:42:2e:4f:7a:f9:39:dc:39:44:aa:
                    f1:cf:38:7c:b3:5e:16:2c:dc:5f:45:83:48:b3:75:
                    be:85:23:fb:b3:33:31:84:52:35:21:f3:9a:d7:26:
                    e7:7b:5d:98:5c:5f:ff:a8:62:d0:dd:1d:92:83:29:
                    02:0f:ee:e0:fd:2f:85:b9:59:71:5e:c7:21:ac:f4:
                    e0:48:03:5a:d4:78:84:32:69:ba:f1:8d:b3:89:43:
                    a2:df:30:d3:b6:66:9c:a7:3c:36:c6:f1:65:eb:7f:
                    5a:25:0b:a6:98:6b:f4:9b:38:ef:9b:ee:c8:cc:5b:
                    34:f9:b4:1c:7c:50:dd:9b:62:14:9c:32:c5:98:2d:
                    9b:b2:d5:8d:d3:50:85:6b:35:30:66:08:ff:64:99:
                    30:66:af:77:60:07:f8:9a:33:89:e1:77:01:53:17:
                    29:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1F:39:65:58:21:7A:98:8A:71:9B:24:44:6C:42:C8:50:D3:E1:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/002ab075-89b5-3972-9a0c-7bf53d237fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:44:25:1c:74:4c:51:c4:07:18:52:ca:17:87:5c:ed:f7:4e:
         8e:7b:9f:28:7e:99:1e:42:33:d2:60:a6:d3:ab:cb:8d:f2:46:
         d0:5f:34:9c:5d:e1:6c:58:4d:ef:db:7c:87:af:7d:fd:93:ce:
         2e:77:17:1e:50:a8:9a:47:22:94:01:74:3f:d6:96:d5:1b:58:
         0c:e4:6d:c7:64:6d:dc:f7:e2:4c:c6:bb:19:72:fa:ab:97:59:
         e2:1e:c4:f1:84:af:3c:38:d0:2f:85:56:1d:1b:49:9a:8c:c5:
         19:59:f6:80:95:fc:11:7b:c2:83:78:7c:dd:bf:2a:2c:ff:89:
         3e:a7:be:58:57:5e:0f:6f:2c:d8:a1:b6:c4:c6:73:f6:4e:ba:
         a8:31:b2:63:c7:88:41:87:98:e8:ea:03:e3:2e:73:c3:21:f3:
         96:58:07:fc:8e:22:e5:47:ef:4b:fa:b2:4a:fc:2f:21:6e:4e:
         42:c9:10:dd:22:bc:11:07:ec:dc:81:05:e0:67:b7:92:50:fb:
         32:b2:3e:bf:97:15:1a:f3:71:8f:d1:ba:6e:9c:72:7e:03:de:
         f5:b9:7e:8d:ce:65:54:13:e5:3e:fe:20:0d:0b:76:68:ac:fd:
         6e:20:43:b3:8e:90:b7:d4:33:e3:6c:9c:0c:30:d3:ae:a0:16:
         68:a1:1b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:05 2024 by rpki-client on console-ams.rpki-client.org