Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/074e835a-3df2-3bae-9d50-3ea5f7af237f.roa
File:                     074e835a-3df2-3bae-9d50-3ea5f7af237f.roa (raw, json)
Hash identifier:          Hh549jfLHtcZLWb7p+/avaY6z4A/xzvlHywCN14jH04=
Subject key identifier:   FF:74:FE:F1:04:47:1E:C9:CB:EE:6B:A5:A6:77:2F:AC:30:04:62:95
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584738F5ECA39CCCF85D23674F40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/074e835a-3df2-3bae-9d50-3ea5f7af237f.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     397210
IP address blocks:        2620:74:21::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:ec:a3:9c:cc:f8:5d:23:67:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=b68c453c-f700-4a34-882f-e2fcc441afa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:67:b4:c9:e3:2c:8b:d1:8b:9d:0f:c8:16:9b:
                    cf:7e:84:43:97:81:35:f8:77:28:28:85:f7:1b:7a:
                    7f:02:bf:8a:de:9a:8d:42:0c:85:7d:55:41:e3:6d:
                    5e:d8:95:b0:2a:17:03:b8:bf:a3:00:e2:43:76:ab:
                    a6:c6:99:03:0a:62:e9:95:61:ae:66:5e:3a:68:b8:
                    47:f2:6f:97:02:e5:35:cd:bc:aa:d7:6d:23:cd:29:
                    86:23:1b:5d:e7:2d:c9:b2:57:5e:43:6f:6e:25:c1:
                    81:cc:3e:16:22:0c:ff:5b:45:d3:43:88:45:7d:c7:
                    7b:81:d3:a5:50:60:5f:21:22:cb:90:1a:bf:48:25:
                    97:c7:2b:48:c7:12:15:7f:45:04:d4:ee:97:99:b9:
                    82:c7:c7:d9:09:a6:39:d1:42:49:84:41:f1:cb:b3:
                    4b:4e:c6:72:56:6e:c2:d4:9c:a5:b8:84:1a:23:9b:
                    4e:f6:8c:2d:fd:51:ff:2f:0c:01:61:c8:18:44:fb:
                    fa:82:b1:d7:3f:dd:ac:61:e7:72:19:27:64:d5:cc:
                    25:12:99:87:b1:ea:6c:07:28:51:f8:ed:b7:cf:ca:
                    0d:1b:ab:a1:91:ea:c2:2d:1e:ce:b8:c9:b3:d1:98:
                    d9:b7:9f:3d:a4:53:93:d3:0c:3e:2f:2c:c6:f1:cf:
                    84:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:74:FE:F1:04:47:1E:C9:CB:EE:6B:A5:A6:77:2F:AC:30:04:62:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/074e835a-3df2-3bae-9d50-3ea5f7af237f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:9d:19:c3:c5:3a:30:1b:60:40:42:6b:26:b9:07:7d:05:03:
         ec:98:2e:51:ef:b6:3a:c9:8a:22:fa:86:b7:80:32:8c:a0:7f:
         b1:30:67:ba:98:db:15:90:70:9c:61:dd:78:9c:64:cb:cb:02:
         f1:a6:e3:5a:fa:13:0d:ac:3c:92:0b:55:81:f3:93:bb:ef:b3:
         c1:4d:b4:e6:61:bf:7f:56:3f:11:63:55:91:6b:d7:f6:36:63:
         6a:84:28:04:34:01:9a:6e:77:f8:86:0e:47:5a:ae:38:e7:31:
         c6:c4:27:22:4b:68:08:97:a1:c4:90:b1:27:97:21:83:9e:37:
         dd:9c:93:e0:88:b3:5e:59:a4:1d:96:00:24:cb:4a:53:00:d3:
         69:48:5e:fa:b1:03:62:6b:24:5a:ac:24:8c:8c:34:00:11:1d:
         18:9c:96:26:63:6c:b1:d8:64:71:93:ab:ba:58:de:fb:ce:11:
         09:c3:19:51:a3:5e:ff:7d:32:29:6d:42:da:09:08:3f:24:76:
         83:f0:53:99:20:e9:da:73:3d:44:10:24:8b:00:13:12:74:c7:
         e0:73:4a:7b:58:ad:5f:9f:65:3a:b3:76:94:dc:01:cf:e1:de:
         95:6c:10:9e:2a:98:00:d6:e3:9a:05:8f:c9:79:f6:5d:19:4c:
         45:8a:47:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:29 2024 by rpki-client on console-fra.rpki-client.org