Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4add2be0-489a-3b89-b772-9357bf488d7c.roa
File:                     4add2be0-489a-3b89-b772-9357bf488d7c.roa (raw, json)
Hash identifier:          XW52bpuekw3dBR416n6s/PBhXf6rXxWRMT5J0wlbISg=
Subject key identifier:   8E:14:19:FB:FA:FE:57:30:23:85:40:57:E6:60:70:8F:EB:FF:56:AC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584726D068FCC1D1C2BC3890E240
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4add2be0-489a-3b89-b772-9357bf488d7c.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     397197
IP address blocks:        2620:74:2a::31/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:68:fc:c1:d1:c2:bc:38:90:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=c11fbce2-658b-459a-b636-da3085e53195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:82:e7:7f:b6:1f:c7:a8:d5:60:25:e7:89:c1:
                    ff:82:cb:7c:e4:88:0c:ce:56:f7:80:0b:8a:15:57:
                    8c:ae:71:e9:a1:74:de:fc:50:88:2f:94:20:13:ff:
                    73:91:ef:dc:04:39:15:ce:39:9d:3e:2e:b9:28:bf:
                    54:f2:36:8d:d8:a6:94:eb:e0:d5:7a:a0:14:6e:f0:
                    d7:13:2c:ef:b6:1c:3c:18:cd:6b:55:b8:e8:4a:18:
                    18:cb:08:72:62:07:72:54:dd:ec:6c:26:1d:a6:33:
                    78:52:e7:59:97:5f:7a:16:af:1b:89:31:c1:90:48:
                    e5:a3:fe:41:90:29:e9:a2:dd:11:f5:2a:75:55:f2:
                    a6:b5:b0:11:a6:22:ba:4c:98:52:b9:d8:18:45:0d:
                    08:7d:1b:41:73:71:9f:fb:0e:af:32:6c:fe:b2:60:
                    51:49:11:4c:f7:06:d9:c9:a3:3e:49:26:ab:b7:5b:
                    7c:6b:2c:a0:7e:30:a0:a3:e7:0a:dc:3d:32:5d:db:
                    b5:ff:3f:51:79:f3:e2:21:89:85:93:3c:bd:64:cf:
                    82:55:b4:f6:e9:ad:e2:da:c5:56:86:39:04:7a:29:
                    88:87:92:47:f5:99:7e:2b:4f:6b:33:ca:d7:dd:7e:
                    a0:53:32:30:e9:87:19:d2:63:c2:69:f3:23:e9:16:
                    80:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:14:19:FB:FA:FE:57:30:23:85:40:57:E6:60:70:8F:EB:FF:56:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4add2be0-489a-3b89-b772-9357bf488d7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:32:16:0e:89:8e:6a:0c:a8:73:f7:bd:41:b3:2d:65:70:36:
         42:a7:b0:59:e1:57:46:31:c7:75:7e:a9:f0:ef:fa:bb:e1:f3:
         f4:e1:5c:c6:89:c5:32:51:65:5a:ba:f8:be:76:e6:85:3e:ae:
         aa:a0:f9:75:4d:35:a8:a7:65:b9:1b:7a:a5:8b:9f:78:04:f0:
         7b:29:b2:83:1d:44:da:bb:df:c4:98:ad:c9:1f:8e:5b:67:ef:
         0c:c8:c8:e8:3f:a1:b5:38:aa:7a:42:77:e7:d3:58:ad:6d:1c:
         16:ad:fa:40:ca:5d:7d:15:32:4b:29:35:74:2c:16:5f:0c:10:
         fb:30:16:c4:88:ce:30:9c:33:89:e4:31:02:55:f8:54:7c:60:
         2d:93:a5:b6:0e:62:a8:17:74:ce:9c:8a:75:8c:09:28:72:23:
         cb:b5:90:37:0e:ad:d6:37:53:ac:5c:d5:24:69:c6:64:16:a8:
         5d:06:35:cb:95:06:49:e2:2f:00:86:32:b3:c1:12:6a:ba:a6:
         22:9b:e4:29:11:15:24:2e:92:4e:d0:e0:43:9e:ef:03:0e:29:
         f6:49:ec:f9:b4:97:2e:24:f4:47:14:84:28:86:c6:83:61:44:
         04:85:af:2a:e8:11:80:1b:05:fc:73:81:5f:4e:9e:f2:f4:48:
         38:e4:74:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:13 2024 by rpki-client on console-ams.rpki-client.org