Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/465ff9f1-7da3-3fc9-991e-1274d379e541.roa
File:                     465ff9f1-7da3-3fc9-991e-1274d379e541.roa (raw, json)
Hash identifier:          6dbODqn5qz3cXnUVbqo4qXrdYWPdHQVk0Jefc9IoqhY=
Subject key identifier:   F6:75:44:62:C3:97:56:7F:30:43:18:C7:1A:17:2E:FB:A5:F1:C9:05
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858471D0C96C34CD228BC008FAB40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/465ff9f1-7da3-3fc9-991e-1274d379e541.roa
Signing time:             Thu 05 Sep 2024 13:03:45 +0000
ROA not before:           Thu 05 Sep 2024 13:03:45 +0000
ROA not after:            Wed 04 Dec 2024 14:03:45 +0000
asID:                     0
IP address blocks:        2620:74:2d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:0c:96:c3:4c:d2:28:bc:00:8f:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  5 13:03:45 2024 GMT
            Not After : Dec  4 14:03:45 2024 GMT
        Subject: CN=a587e7cb-1284-49fc-a3c0-10aa2da99fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:37:21:b5:fb:e1:eb:3b:83:9a:12:4f:81:97:
                    20:6f:a0:89:c2:63:e4:8e:d4:2f:f8:59:eb:5e:c1:
                    de:62:67:55:af:a3:a4:5b:9a:08:a7:11:4d:e8:b7:
                    54:54:c4:f0:c5:21:d4:89:fd:37:fc:c1:ba:9e:ed:
                    76:c5:7a:4c:6b:f9:fe:f3:fa:bb:54:03:6d:36:8b:
                    d8:9a:41:ed:e6:56:5f:d6:e1:11:2b:78:1f:6d:d4:
                    9a:45:11:0e:fa:ac:ff:90:60:52:c1:10:f3:e6:17:
                    66:b1:44:bd:ec:d2:fc:3a:9a:3a:86:03:6f:eb:fb:
                    6d:91:ba:2d:02:fc:76:ac:80:37:10:0c:d2:22:0c:
                    ca:28:0d:5b:83:7f:f7:e9:45:54:ac:09:cf:37:dd:
                    fc:9f:38:12:5a:ab:0a:28:31:a6:35:15:bc:02:f5:
                    69:05:9e:64:e3:d5:e5:3b:3f:d1:8f:c3:f1:e6:da:
                    bc:20:6f:3e:de:d7:72:a8:be:92:fd:37:98:55:40:
                    bf:57:7a:cf:52:e1:54:a5:09:43:44:f1:eb:a0:cc:
                    43:23:fd:a0:54:8a:fb:8b:6a:c3:d0:2e:d8:c5:d7:
                    e2:93:f2:13:b2:76:99:34:04:1f:11:c9:08:84:b7:
                    aa:30:6f:b6:09:a3:0b:46:79:ee:de:84:7f:6e:47:
                    9f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:75:44:62:C3:97:56:7F:30:43:18:C7:1A:17:2E:FB:A5:F1:C9:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/465ff9f1-7da3-3fc9-991e-1274d379e541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a4:74:bf:28:c3:83:24:aa:af:da:cc:e6:48:d7:15:08:02:
         d0:2e:ba:0c:8c:bb:73:d5:44:28:99:7b:a4:e3:a0:05:1d:70:
         e6:09:d6:f4:b0:e8:bf:41:1f:4b:10:03:79:12:e0:f6:2b:84:
         69:e7:e1:ae:60:a0:e6:f7:3f:97:f0:18:6b:26:32:14:a6:71:
         0d:d5:b7:58:31:68:64:ed:35:ad:b0:5f:fb:25:df:14:64:d5:
         bd:ed:f3:1d:1e:d4:7c:b1:85:4a:dd:34:1c:9f:00:24:43:d1:
         0f:30:0e:e9:b8:d1:de:f4:f1:80:99:00:46:9b:1b:99:f8:1a:
         30:46:f4:be:15:2d:c2:3e:e7:48:9a:a9:4c:74:0f:b8:f1:4b:
         e2:db:b0:06:fc:cb:ca:af:89:90:4e:1b:63:c9:c3:e5:63:59:
         f0:fa:5d:de:03:91:e5:eb:54:60:c5:38:b1:64:3b:e4:f6:8a:
         ae:12:10:dc:3c:91:95:8e:da:39:9e:11:26:d3:9c:35:3a:17:
         58:86:97:8d:3e:4f:95:f7:c7:b0:31:db:ce:42:66:fb:14:21:
         7c:c1:0f:12:a0:4f:f4:bd:b1:b3:20:f8:e0:ef:8c:c7:ed:0c:
         f0:34:40:9b:e1:ae:f4:79:80:cc:c8:95:6a:e7:29:ba:aa:be:
         20:e6:22:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:06:33 2024 by rpki-client on console-fra.rpki-client.org