Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b8799f0-aa9a-35f2-a5cd-53f0bd116852.roa
File:                     0b8799f0-aa9a-35f2-a5cd-53f0bd116852.roa (raw, json)
Hash identifier:          xpaDmCsQJ5jC7GPLLUOQUEYykO59HTAvzCAQgE7TIbo=
Subject key identifier:   6A:95:AC:34:45:DD:2F:1F:19:66:28:20:43:66:AD:0A:2C:47:AD:35
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847F15527D4F6E38DFE19F7F000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b8799f0-aa9a-35f2-a5cd-53f0bd116852.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     396581
IP address blocks:        2620:74:2b::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:27:d4:f6:e3:8d:fe:19:f7:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=69fef0bf-04c4-4da7-8803-fe8f6c41a84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:23:d3:6e:f4:60:66:58:b3:2f:d3:ea:23:
                    c9:92:6b:c4:95:c7:b8:14:d6:81:93:f4:24:8d:36:
                    f5:80:fd:a5:b3:6f:db:a6:67:e6:3d:60:31:1b:27:
                    e2:f8:e3:63:dc:17:08:8c:b4:73:5b:1b:ca:66:8b:
                    0f:0b:bb:8f:f2:7b:0a:3b:d3:ec:b5:18:b0:00:b7:
                    29:33:6c:3e:cc:53:e7:3b:28:e2:c7:44:c4:2b:2c:
                    7b:ab:10:bd:0f:90:cc:b5:99:d8:93:9c:8c:34:37:
                    3e:5e:ea:bd:18:6f:54:2c:66:cd:f9:ec:c5:86:3d:
                    ad:f2:70:c4:c3:99:c6:4e:1b:be:eb:fb:98:09:d9:
                    96:40:ab:9b:90:a3:43:63:82:51:94:62:db:fe:83:
                    dd:8e:24:8f:20:5c:eb:88:91:3a:71:33:2b:8f:5d:
                    41:bd:c8:fe:4b:fc:86:2a:8e:6d:21:70:ca:65:39:
                    9d:11:dd:90:f9:5d:cf:ed:82:20:a3:17:c6:49:fa:
                    cf:db:04:1f:79:12:45:ee:6f:e2:dd:e2:12:69:7a:
                    ab:0d:c5:14:c8:ee:63:c4:fd:f8:0c:17:ef:52:79:
                    59:2b:6d:cc:7f:65:98:92:da:2c:2a:18:78:7c:1a:
                    48:e3:9d:92:bd:d4:05:c9:89:b0:e8:66:65:45:4f:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:95:AC:34:45:DD:2F:1F:19:66:28:20:43:66:AD:0A:2C:47:AD:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b8799f0-aa9a-35f2-a5cd-53f0bd116852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:6d:8f:eb:db:2b:77:04:20:4a:e5:ed:88:87:57:75:f9:59:
         f5:cf:53:56:68:47:ef:07:f4:a6:bc:48:71:95:0d:cf:31:35:
         59:fe:98:ff:c8:40:d0:92:fe:f7:8c:00:80:cb:51:54:36:c7:
         34:fb:28:a7:1a:cb:4b:5d:bc:f5:66:e0:8f:7a:b0:91:1e:f4:
         f0:1b:b9:45:d0:06:c7:d4:cf:de:33:29:e1:77:b6:06:96:13:
         03:23:05:be:c7:c7:bc:9c:9d:29:ef:07:99:3c:f4:ef:71:4d:
         5f:1b:75:3a:5d:e4:84:ee:f9:7c:71:ec:2a:c8:59:1a:d6:46:
         cb:01:39:04:6a:e2:26:3c:d4:57:de:ad:e1:ce:22:24:99:a5:
         7e:eb:8b:f3:c8:86:d8:1d:79:b9:16:04:1c:57:a2:16:d1:50:
         c7:a9:c4:bd:ea:f0:77:0c:28:10:28:d8:08:a7:b6:53:90:b9:
         57:f8:a7:48:3e:7c:85:4c:ad:a2:e3:fd:17:c3:00:1e:3a:14:
         3a:01:4e:ee:09:ee:e4:e4:dc:59:08:1b:f1:3f:0f:06:de:ca:
         88:c7:74:a3:a4:2a:8d:d6:ea:14:ce:00:07:c6:ea:01:d1:8b:
         7d:40:2c:9e:76:92:db:d6:2d:91:cd:ae:b5:32:40:e6:cd:f8:
         65:45:0b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:29 2024 by rpki-client on console-fra.rpki-client.org