Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08948b09-6fc1-344a-9112-728d8ee52b11.roa
File:                     08948b09-6fc1-344a-9112-728d8ee52b11.roa (raw, json)
Hash identifier:          BbSUiVggXD8eWseVi9v+1kKiEXYwUdKWKyJpZsMmbPo=
Subject key identifier:   CB:F9:72:88:C0:8A:CE:CD:B4:75:55:EB:A3:90:60:8D:14:BD:0D:67
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584738F5F3DA879EE8060AB92440
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08948b09-6fc1-344a-9112-728d8ee52b11.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     396589
IP address blocks:        2620:74:21::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:f3:da:87:9e:e8:06:0a:b9:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=c25efc11-c46c-42eb-a402-c86e2c5e7c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:44:11:6e:12:b0:b7:cb:45:5e:f9:c4:dc:
                    1b:ee:43:ba:11:d9:5f:bd:43:ee:1a:7a:35:82:3a:
                    a4:0d:7f:0d:c2:b4:97:bf:aa:90:a6:92:71:5f:60:
                    f8:55:b9:e7:87:42:0e:97:ef:35:b2:27:d1:0c:2a:
                    bd:60:16:15:1d:c7:55:5a:cb:97:f7:e8:86:bd:c1:
                    ed:1e:62:98:0d:b3:21:3e:b7:6e:f7:3b:24:99:5d:
                    df:c4:57:0e:f2:00:b7:eb:21:aa:b1:07:61:86:78:
                    72:e9:3f:23:6b:35:9d:a2:c7:66:dc:86:01:dc:9d:
                    d1:fb:6a:b3:98:95:4b:ec:62:88:83:0a:3b:a1:e1:
                    4b:e4:4a:af:bb:6c:3c:40:aa:c4:67:ef:58:9c:62:
                    ff:fb:7a:8f:43:b2:b7:ab:71:7c:3b:a7:58:e8:24:
                    56:22:cb:2f:78:65:78:67:ee:d5:6c:85:ab:b2:46:
                    3c:2e:7a:d1:3e:75:4c:60:36:0a:8d:50:09:c2:54:
                    51:2b:b6:5c:5f:a4:d2:f8:8f:a5:91:bf:23:49:03:
                    aa:a2:be:4b:27:37:15:65:fc:bb:4e:10:e6:52:39:
                    03:44:df:12:78:83:97:2a:59:61:4e:e2:0d:d5:35:
                    c4:02:84:ba:92:fc:6c:b8:67:fb:af:17:a7:db:de:
                    8d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F9:72:88:C0:8A:CE:CD:B4:75:55:EB:A3:90:60:8D:14:BD:0D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08948b09-6fc1-344a-9112-728d8ee52b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b2:6b:0c:e0:0d:2e:bf:21:c1:80:0e:ee:00:2d:31:c0:00:
         46:0f:c3:f1:91:99:b4:c2:e3:48:ee:c5:ee:b3:5c:1d:98:d9:
         0f:ad:f8:88:34:e4:fb:2d:e1:b2:54:75:59:cb:46:fc:de:4d:
         5c:f6:42:22:14:82:d1:8a:37:8f:56:a7:f6:ca:80:f4:a2:b8:
         29:d5:ff:67:56:1b:99:be:d8:6c:85:51:74:31:ce:30:11:8c:
         82:49:bc:84:90:91:a8:88:ef:e7:ef:c8:2c:a6:ed:f3:2f:76:
         05:12:3e:57:73:8e:b5:3c:69:15:25:41:73:34:dd:be:ec:e9:
         2a:54:94:5f:8d:72:41:75:4d:c1:e6:12:15:b4:a1:47:33:18:
         b7:88:46:6a:5a:ae:64:2a:37:a0:a0:46:74:22:12:de:c3:b2:
         be:32:d1:a8:08:14:1d:0e:35:50:b8:e3:eb:56:e2:1e:80:9c:
         c7:c9:3a:17:ac:14:38:75:98:1b:e7:b0:a7:05:f4:dd:8b:75:
         40:13:7f:c7:1e:d0:6b:57:f7:09:61:8e:de:b5:0c:ed:2e:d7:
         86:95:80:75:c8:5e:5d:ba:3a:50:2c:aa:dd:7b:f5:e0:1e:4a:
         21:9f:ec:97:44:55:3e:bf:a5:4b:f7:28:44:f3:12:c2:d4:18:
         cf:e9:5a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:06 2024 by rpki-client on console-ams.rpki-client.org