Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/715a957c-c128-3489-9089-1ad219852e1a.roa
File:                     715a957c-c128-3489-9089-1ad219852e1a.roa (raw, json)
Hash identifier:          6rS5eKxC51Spv/nJ1XBnBWVMqjVHStP8+Z8kPauwxQE=
Subject key identifier:   47:F3:04:E9:10:DF:B1:E8:ED:87:23:5A:F2:27:D9:08:EC:9B:2C:10
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584726D0735607286BA4B655BA80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/715a957c-c128-3489-9089-1ad219852e1a.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     397199
IP address blocks:        2620:74:2a::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:73:56:07:28:6b:a4:b6:55:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=d1f7ed44-2f51-497d-9582-15d3ca3bc33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a9:f7:7b:49:ba:5b:7a:ca:8a:af:0e:c6:53:
                    cf:bc:d0:fd:cc:c7:0a:1b:49:91:ed:c2:f5:a6:c8:
                    54:54:e1:23:ec:55:81:01:56:c1:54:61:07:7a:b2:
                    37:39:5b:1f:53:a0:68:11:1a:24:d0:dd:0b:67:7d:
                    01:40:09:24:0c:ed:1d:3c:26:fe:dd:dd:3f:26:08:
                    4e:94:b5:38:77:c1:af:52:e4:b6:70:cb:c2:5b:f7:
                    8d:46:6d:88:3a:c6:49:04:50:01:2c:81:4b:22:12:
                    27:ac:b5:18:c1:9e:bd:41:57:8e:9a:0b:57:66:f2:
                    ba:fc:2e:79:3e:b8:79:fd:d4:30:aa:1f:fa:85:e2:
                    b1:2e:73:65:3d:f9:6b:ea:54:6e:73:ce:c2:b9:a2:
                    26:d7:c0:6b:74:53:c1:a8:8e:29:d6:ae:fc:86:5d:
                    16:16:bc:d0:c0:89:a1:3f:57:0b:dc:35:f3:1d:ca:
                    f9:83:b9:7e:42:21:25:30:93:f3:70:d2:69:05:7c:
                    cc:34:8c:b2:e8:8a:d0:be:34:4f:f8:25:76:53:5c:
                    6f:6d:b8:c1:f1:cd:80:b8:30:7b:39:ce:17:20:e4:
                    af:a1:e8:5f:29:94:bd:ac:b7:26:86:b9:73:36:6f:
                    3c:c9:1b:a0:23:2f:53:91:cd:f0:b4:46:5e:50:be:
                    f4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F3:04:E9:10:DF:B1:E8:ED:87:23:5A:F2:27:D9:08:EC:9B:2C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/715a957c-c128-3489-9089-1ad219852e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:09:a0:45:bb:be:93:f8:67:11:71:37:c6:e4:c4:76:33:84:
         a3:9a:69:a1:ed:39:9f:70:dd:9e:33:ed:25:c7:77:fa:35:63:
         d1:17:6e:70:51:d8:3e:7b:2b:95:57:b6:3f:01:f4:8b:a2:c2:
         ae:d2:96:6a:65:4d:9c:c3:62:0f:cf:29:cc:93:5a:96:34:80:
         9e:fc:4e:46:88:f7:e8:da:b0:d0:a1:8b:b2:aa:da:0b:ff:87:
         c5:b1:49:e7:de:be:99:0b:fb:b2:b2:8e:57:21:36:57:75:f4:
         fe:ea:18:0b:be:83:72:34:3f:c2:42:90:d2:e1:1a:d4:9b:18:
         53:a2:cf:e7:30:25:23:a6:59:c5:5e:9a:81:26:85:26:36:74:
         0c:4f:3c:73:37:b8:70:42:47:f5:0a:18:e6:cd:2c:b9:37:ad:
         59:07:22:ed:2e:e1:23:57:b8:ca:b8:ee:6e:24:25:8c:0f:34:
         11:e3:23:cc:2e:19:74:a9:45:7d:9b:42:49:de:be:37:5b:65:
         85:e1:dd:20:e1:26:f9:2b:02:0a:43:d0:1d:e7:a6:10:0f:91:
         3e:bc:69:e0:41:31:36:fb:e9:e1:ef:ed:36:b1:dd:8f:59:0f:
         7e:21:b8:e1:2f:5f:56:e3:df:17:02:a9:88:66:3c:4d:d1:72:
         94:b7:83:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:38 2024 by rpki-client on console-fra.rpki-client.org