Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51d5a324-afdd-36bf-a007-44a256b05f5e.roa
File:                     51d5a324-afdd-36bf-a007-44a256b05f5e.roa (raw, json)
Hash identifier:          9b2Sw+OhifnoW9wPv2bwM/Zdt7qaiZ8mkwKMXZGkdO8=
Subject key identifier:   5A:4D:FE:33:E7:E2:96:E1:6D:AA:0E:A2:3B:7C:AB:7A:50:53:E9:6E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847F1551CBF94C98C7FD4C2CB00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51d5a324-afdd-36bf-a007-44a256b05f5e.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     396597
IP address blocks:        2620:74:2b::31/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:1c:bf:94:c9:8c:7f:d4:c2:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=0d393617-2273-411c-8cd4-965daa8ddfcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:a8:a7:7e:ec:12:81:6c:20:8a:0d:33:f9:
                    28:f8:15:0d:69:92:2e:b9:c7:53:fe:40:b4:1c:b8:
                    f1:11:e6:2b:d5:40:ab:37:73:41:9a:cd:2e:5c:dc:
                    78:b8:5d:3a:81:0b:06:c2:04:a0:57:50:1f:fd:9f:
                    2c:79:1b:39:fc:77:a8:24:34:88:43:3a:8a:91:00:
                    ce:2f:6e:df:da:dc:f9:ba:64:f9:b2:3a:20:3c:f0:
                    85:54:85:df:03:fc:81:58:e9:90:86:26:12:d9:18:
                    61:53:50:e9:ad:37:1b:24:f6:c6:c7:65:16:1f:db:
                    90:86:77:53:85:f7:8c:9a:82:44:c3:f3:15:c7:22:
                    7a:1f:9a:93:e3:f9:a8:2b:6b:c4:56:31:7c:ce:57:
                    20:4b:81:6c:ff:88:dc:1f:a5:36:b4:19:0a:94:e0:
                    4e:35:ef:f7:ab:ff:ad:0d:ef:c3:65:1d:83:5a:88:
                    72:8c:d1:6f:ff:65:fe:60:4c:ac:cc:81:5a:e1:9b:
                    82:4b:ab:99:40:92:79:f4:99:e6:2d:6f:70:42:c0:
                    4e:b7:15:29:1a:4e:e6:cc:3a:54:a8:3e:f2:26:90:
                    11:bd:ba:26:aa:07:94:8b:88:2d:48:7a:63:15:bd:
                    34:25:bd:20:83:9e:d2:cb:aa:c2:85:c7:be:f0:b8:
                    5a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4D:FE:33:E7:E2:96:E1:6D:AA:0E:A2:3B:7C:AB:7A:50:53:E9:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51d5a324-afdd-36bf-a007-44a256b05f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5f:cb:55:fc:a7:2b:70:f7:1a:96:78:cf:f4:84:38:92:67:
         35:60:8d:ec:4f:8f:c9:c7:61:59:52:d0:34:4e:45:99:da:cf:
         f3:98:58:71:34:6f:9f:7e:2d:f1:e8:60:3a:d6:bf:2f:ed:18:
         36:61:5c:2d:09:91:45:14:aa:a5:2e:e4:84:f6:20:bd:32:36:
         00:5a:c9:ed:83:12:c4:63:7d:31:52:c4:5b:84:73:62:bc:7d:
         10:b4:c3:0b:31:23:d2:29:49:c2:b9:de:1a:b4:a0:cb:2e:c3:
         59:44:5d:59:49:1c:a2:82:69:5c:06:2a:ea:2c:89:61:d6:f2:
         b0:86:a7:78:02:a4:d9:91:3a:e7:bc:6b:8a:e6:6c:c4:49:28:
         7e:64:64:38:33:ae:45:b2:8a:24:38:49:9d:82:96:15:65:c2:
         19:70:cb:e5:cc:4f:39:3f:d9:f9:d1:65:a1:ca:2f:7c:d8:5e:
         60:bc:5d:70:7a:9d:ae:f1:8f:79:c3:c5:57:11:d5:c0:66:46:
         45:06:48:62:a0:6e:7b:3a:3b:20:e6:36:fc:29:03:ec:64:f2:
         af:18:b6:34:61:8c:30:f5:82:c7:b9:49:4d:04:26:f1:3f:59:
         1a:7f:d6:e3:63:2b:7e:38:90:aa:ce:34:2d:cb:17:1f:56:6e:
         62:ba:13:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:13 2024 by rpki-client on console-ams.rpki-client.org