Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa
File:                     87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa (raw, json)
Hash identifier:          T8qAwSaJdMCUb6RpiM8CIxgxZ4sparsVVBzb85x7tKg=
Subject key identifier:   A0:FF:37:DB:53:FE:41:3A:F0:36:47:86:2F:A5:EA:ED:4B:74:A2:BD
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584726D07124F246F4BCD7DA2600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     36624
IP address blocks:        2620:74:2a::31/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:71:24:f2:46:f4:bc:d7:da:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=9b15204c-c897-4dfe-ae10-845a3c61b967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5e:17:06:73:03:6c:55:98:c5:80:7e:96:86:
                    f9:f3:ab:14:8f:56:f6:16:dc:01:d5:17:5f:c9:9d:
                    50:f4:cb:95:32:f8:c0:0e:bb:7d:fe:f4:7e:03:7b:
                    d8:f2:f6:a6:35:63:a7:e8:43:be:93:d2:38:74:5a:
                    c8:cd:d0:b7:ad:36:de:2d:c1:6a:4d:63:e9:d5:43:
                    8f:33:e9:e4:f4:a3:30:c1:54:50:4e:e3:c9:68:8f:
                    22:7b:9c:6a:8a:4c:7d:a2:7f:b4:75:d9:41:68:08:
                    a8:33:f3:7c:a7:8e:2f:b9:6d:98:c7:e7:a7:bc:19:
                    72:a5:ae:1b:a8:a4:5d:0c:2e:c2:7a:10:61:3c:6b:
                    d1:4c:0c:9e:76:4c:69:de:80:ea:eb:ab:ec:51:79:
                    65:38:f6:4d:7f:d7:34:44:f5:10:31:d9:73:6c:cf:
                    a1:41:2f:a9:e5:0e:0f:fa:89:4d:16:97:0a:34:ac:
                    73:9e:41:31:b6:e2:78:3e:84:80:e2:ca:1a:f1:d1:
                    41:6e:e0:b8:67:e1:74:34:c8:17:03:8c:9c:d2:9c:
                    9a:b7:dc:46:89:88:9d:d0:87:bd:61:30:a4:7a:c4:
                    bc:28:9a:1b:94:61:21:e6:8e:2f:0c:cf:c0:3d:ff:
                    ec:c5:d1:e3:2c:22:0c:9c:29:13:c7:ed:2f:33:a4:
                    e7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FF:37:DB:53:FE:41:3A:F0:36:47:86:2F:A5:EA:ED:4B:74:A2:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:15:40:cc:44:c1:62:42:2f:80:1c:18:e0:56:53:95:7a:3d:
         ae:c9:ae:5f:11:bd:c1:ec:d3:69:b8:06:3a:d2:1c:e4:c2:84:
         be:c0:a5:99:f9:5c:3a:bb:79:f1:e3:fb:dd:12:38:b8:df:3d:
         ad:e8:ff:bc:d4:37:2b:37:45:9e:06:56:d1:be:59:6a:74:72:
         19:0a:48:9b:92:42:f7:e9:d4:53:d8:68:80:73:48:c6:fe:1f:
         52:7a:82:c1:1d:a9:7c:b4:4d:d6:37:38:c6:8b:6b:87:a2:93:
         db:b3:89:b4:0f:a5:b2:de:ba:1f:f4:6a:fb:5e:b4:d6:2e:df:
         82:f6:6e:5f:f8:f4:a0:2c:21:f1:53:d6:ca:c5:07:e2:8a:4d:
         8c:60:70:d5:5d:7f:82:58:8f:b9:dc:e7:89:d1:cf:cd:79:52:
         bc:5f:0c:6e:80:6d:95:32:cc:5b:ab:88:fc:51:5d:cd:8c:5b:
         76:bd:18:60:4d:fd:1b:4f:05:1f:97:2a:96:87:7a:0f:43:9f:
         b2:42:0b:25:4c:07:34:88:a7:90:8e:56:d4:de:74:ef:ff:f0:
         b7:1e:36:9d:53:9a:8f:b9:e4:8f:20:03:a3:af:dc:69:1a:9c:
         82:04:33:45:1c:d3:22:b2:76:fc:42:3c:39:ef:b2:fe:b8:1d:
         11:5f:97:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:40 2024 by rpki-client on console-fra.rpki-client.org