Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9c28d-46b6-3549-8101-ad0cd851e804.roa
File:                     24c9c28d-46b6-3549-8101-ad0cd851e804.roa (raw, json)
Hash identifier:          6800dUIh/XhQhKaFeRCMsP+atERboC7utRpAg2DkICs=
Subject key identifier:   05:CA:ED:ED:3E:20:A0:B5:EC:84:DE:3B:38:76:04:7E:60:23:50:A9
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858474F4B814B9EB589EE384E3A80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9c28d-46b6-3549-8101-ad0cd851e804.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     7342
IP address blocks:        2620:74:52::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:81:4b:9e:b5:89:ee:38:4e:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=f787e111-3148-4a10-ad7a-fa8958b27650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6d:64:ea:5f:e4:65:e9:bc:d4:89:03:9f:28:
                    5b:de:f8:56:0b:5c:b9:0c:a9:61:ec:9a:07:f7:41:
                    9e:71:22:51:28:8d:0b:16:30:cb:4c:5d:e2:25:26:
                    b8:01:a8:a5:15:89:d7:88:5a:cd:70:f7:a7:92:06:
                    5b:b2:83:7e:c7:a5:d4:59:f1:2e:6f:83:ba:0a:d7:
                    18:45:9d:52:de:9c:34:b6:76:6b:66:bb:af:55:cc:
                    1c:46:31:73:40:63:b3:b0:e5:b4:b2:c5:48:dd:17:
                    0a:9e:0d:e0:d0:a5:b3:e9:7e:25:6e:7a:38:17:6b:
                    8d:53:04:a0:25:fe:f1:7c:43:81:48:73:20:81:0a:
                    29:4a:3e:92:1d:e9:a1:b5:95:3d:94:8c:84:93:23:
                    87:fe:60:0f:41:5c:29:43:5e:02:d1:c6:65:d6:27:
                    19:ca:b1:d5:c2:c0:5d:2b:79:f6:aa:db:f0:f7:3d:
                    98:36:da:73:93:48:81:bc:3e:a1:bd:08:43:7c:a0:
                    95:78:d5:0e:a3:3e:9d:c2:f7:76:23:53:98:9f:f6:
                    26:d5:2d:6a:f9:3c:ed:88:7e:c4:b5:be:a6:38:59:
                    49:fb:20:4b:b4:4a:f4:74:b6:76:b4:ef:82:14:78:
                    a1:b0:ee:55:ab:4b:bf:82:2f:c7:00:5c:79:a5:b7:
                    2b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CA:ED:ED:3E:20:A0:B5:EC:84:DE:3B:38:76:04:7E:60:23:50:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9c28d-46b6-3549-8101-ad0cd851e804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:52::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:7b:6b:d0:d1:1e:7a:8b:59:ae:27:98:c7:66:6b:54:67:ff:
         de:41:d2:28:e4:e5:dd:3f:b3:23:88:fd:a5:79:9e:53:a5:a7:
         07:c5:dc:eb:68:a5:f5:64:79:25:a8:d4:21:4d:03:e9:74:1d:
         91:b6:51:49:fa:ab:25:33:1f:df:b8:da:67:49:41:ee:f5:6a:
         df:f7:72:99:82:29:f9:6e:96:f6:80:82:5e:90:17:64:5a:97:
         d1:da:0c:15:88:89:de:39:b2:bb:4a:03:55:60:f8:52:c8:2f:
         ca:be:bf:ec:02:c4:ab:f3:87:22:04:23:06:51:0f:2e:0a:cf:
         0c:ec:f1:ad:ba:44:78:70:cf:b1:3a:85:ca:de:8e:c8:30:b9:
         15:f3:d6:39:45:2d:12:24:df:b2:13:dd:f7:da:f0:d6:96:90:
         93:28:b0:2d:13:cb:11:b3:b9:79:65:ff:38:86:85:7d:7c:3a:
         02:3d:12:43:8d:06:1e:0a:55:44:03:a3:d6:69:26:26:b4:69:
         16:52:33:36:7e:8a:ab:56:b7:fd:14:c2:fc:8e:e3:40:4c:d0:
         06:07:88:a9:6e:5c:3e:51:6d:8d:b9:62:5e:1b:02:ae:ea:30:
         0e:fb:f8:cb:8f:34:06:95:26:66:4a:57:90:f6:bd:a5:cb:cd:
         cb:b8:0d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:31 2024 by rpki-client on console-fra.rpki-client.org