Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/475650bf-7ba0-3fa9-bc01-ddca5df969bc.roa
File:                     475650bf-7ba0-3fa9-bc01-ddca5df969bc.roa (raw, json)
Hash identifier:          zSUuiRkH5zi+LHMlvKWn9hW9ekdiKKuaaNtJ4+AgtZ4=
Subject key identifier:   A1:6F:32:38:17:EC:C8:12:B6:61:C1:B8:0A:F5:9E:11:55:C0:2B:43
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858475A7625C24C1632F2370A9A00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/475650bf-7ba0-3fa9-bc01-ddca5df969bc.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     396612
IP address blocks:        2620:74:20::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:25:c2:4c:16:32:f2:37:0a:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=11fa365b-ea34-4005-a1b7-2f44efd7f395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:ad:fc:50:f0:68:10:05:c8:26:12:fa:02:
                    c9:ce:61:b6:ae:81:7e:b6:c2:5b:73:67:b1:e0:2c:
                    c9:b3:fa:9f:b3:52:fb:ad:c8:94:f5:3f:13:6c:5a:
                    56:d8:1c:7b:54:fc:94:ef:7e:c2:a2:a8:de:42:39:
                    53:00:8a:8a:d4:37:c4:4a:7a:f3:b7:fb:8a:ae:00:
                    07:98:c3:61:72:5a:3a:09:81:c8:c5:bd:ff:58:7c:
                    54:ea:31:02:79:e6:d7:77:e0:a2:60:c3:f3:44:a6:
                    68:99:28:b6:fd:bc:77:66:04:91:d5:b1:dc:a4:02:
                    80:43:17:29:09:90:c3:fb:a8:ef:af:85:45:b6:e5:
                    75:68:ae:4a:41:2a:fb:0b:fa:93:ba:ac:8a:df:ce:
                    39:de:07:91:9d:7e:e6:aa:46:61:e3:26:d3:6c:9d:
                    20:e4:2a:56:7a:4c:b3:f1:7e:d0:d6:2e:14:6f:2e:
                    9d:9a:4e:23:90:05:63:d7:8f:1e:27:93:cc:ea:b3:
                    aa:f1:22:34:b6:03:3f:c8:bb:67:04:67:fd:a7:9f:
                    c7:4e:0f:26:b3:69:7e:72:04:0c:c8:4f:57:fa:df:
                    5e:60:15:a1:0d:d9:d8:88:0b:91:76:e4:96:35:92:
                    08:51:a4:2c:54:4f:27:ea:25:d0:e4:f7:de:7f:50:
                    04:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6F:32:38:17:EC:C8:12:B6:61:C1:B8:0A:F5:9E:11:55:C0:2B:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/475650bf-7ba0-3fa9-bc01-ddca5df969bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c5:0f:b6:d8:4f:e6:e6:93:1f:a5:bb:da:af:81:c9:e4:b1:
         a0:d0:2e:4c:0b:6d:7e:43:2c:08:6f:75:b5:53:60:91:80:98:
         87:fa:2d:8b:6e:b2:d0:e5:35:68:ee:42:0e:5b:42:c6:05:2f:
         5f:be:3f:11:f5:6c:e5:92:ae:9a:2d:33:70:0b:0c:e3:98:fc:
         f0:c9:57:fb:dd:6a:ea:9e:65:82:12:73:39:ab:ef:80:36:9b:
         2f:ea:8a:89:dc:14:15:56:d7:c4:58:43:4a:b4:5f:7c:74:b8:
         80:d4:7b:82:35:f9:0b:8c:dd:27:43:d4:fd:02:75:8b:4b:0c:
         30:0f:3c:e1:8d:11:31:da:47:97:3b:0b:a7:94:0f:7d:6f:fd:
         36:60:39:f7:c7:17:d3:ff:a4:76:76:ec:00:d0:a8:f2:d1:a8:
         3b:3c:a0:61:a9:e0:92:70:58:c9:e5:21:92:ad:32:5d:bf:3e:
         fd:4b:bc:87:f3:d9:1a:fe:03:66:5c:45:f6:42:7d:7d:14:aa:
         8a:35:90:bd:85:40:03:68:6b:fb:e7:85:a6:5a:dc:f1:7f:87:
         91:ee:f7:5b:36:01:b6:b8:25:95:95:0b:1c:63:a7:66:68:4f:
         81:92:48:ad:ec:4e:fe:ee:7e:ca:31:77:b7:de:2a:04:37:62:
         94:d5:e8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:12 2024 by rpki-client on console-ams.rpki-client.org