Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90bfe5eb-cef6-37df-b74b-c4e38a4fb904.roa
File:                     90bfe5eb-cef6-37df-b74b-c4e38a4fb904.roa (raw, json)
Hash identifier:          vNwqqg4FjfWUh0tFAw0zD+WzeF84sKhsA4REcXk/ibg=
Subject key identifier:   75:D5:B9:68:7A:DD:B0:14:BA:CC:44:8D:9C:6F:57:22:0B:41:00:87
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847B696CA01D628FF7B55BFEB80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90bfe5eb-cef6-37df-b74b-c4e38a4fb904.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     19836
IP address blocks:        2620:74:2c::31/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:ca:01:d6:28:ff:7b:55:bf:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=b864256f-699c-4042-ab48-4ab29f1d7b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:d2:3b:37:c3:4c:92:ac:45:74:78:1f:1c:
                    16:0e:13:fe:a5:21:7b:86:18:a3:f0:00:10:a9:fe:
                    0b:fe:de:f1:a4:43:2a:c5:ca:9c:16:50:1e:27:c5:
                    97:98:54:36:26:1f:e9:09:af:ee:15:30:e7:09:d1:
                    0e:48:7f:a7:97:78:b0:08:b4:e0:b5:f3:75:63:cd:
                    b9:38:c3:4b:2e:ac:67:66:6e:bf:6e:2a:ac:cd:84:
                    30:93:c7:47:bf:4b:d5:03:52:ff:0f:87:62:06:62:
                    5b:63:89:b3:30:f6:56:df:74:d2:22:44:e1:24:5f:
                    b4:91:d5:9c:7f:8d:c5:73:62:66:3f:06:ef:94:e8:
                    3d:cd:ce:8d:2c:f5:76:1b:1d:15:fa:60:6c:cf:6f:
                    1c:b7:ef:63:32:5e:d9:41:e6:cc:52:f9:58:36:9f:
                    79:81:58:3b:b9:e0:b1:25:7e:f0:37:8c:75:90:e8:
                    35:7e:24:8b:e7:19:d6:2a:5c:c0:c8:49:5e:bb:4c:
                    ba:78:b1:ef:0a:f1:6f:4f:86:1a:6a:22:15:90:56:
                    c4:5e:48:85:b3:cb:01:5d:95:d2:c2:ed:fa:ba:09:
                    0c:cf:59:d8:05:2f:7c:3c:21:20:b6:1f:2b:f7:fd:
                    57:c3:4b:d0:91:60:cd:79:ef:5a:fd:bd:4b:5b:99:
                    c8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D5:B9:68:7A:DD:B0:14:BA:CC:44:8D:9C:6F:57:22:0B:41:00:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90bfe5eb-cef6-37df-b74b-c4e38a4fb904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:4c:8c:75:08:5e:2a:a9:27:2a:c5:e4:13:b1:2b:8b:a6:de:
         7c:cb:f2:8f:af:f9:0e:b0:58:e2:6a:bb:d4:9e:0f:f3:ce:11:
         49:33:77:91:7b:53:ed:b4:62:7d:32:b6:b7:98:7b:75:22:ce:
         74:2a:c9:2f:08:df:c5:c9:eb:07:ad:81:d9:81:e4:9f:91:60:
         50:56:ef:ef:57:c1:f0:86:ca:dc:da:3b:e2:ba:c2:c0:7b:62:
         f7:f7:0c:5c:bf:42:a4:fa:38:d5:3e:84:56:95:92:0b:92:ba:
         1a:14:08:eb:ff:b3:20:0e:17:1b:77:72:ad:95:9b:2d:6e:1f:
         37:55:ac:17:d8:a0:f5:83:0d:ac:a0:31:90:25:d2:be:72:5e:
         01:58:c7:d9:7c:3c:89:e7:ff:6a:29:bb:7a:54:9f:7c:f9:4d:
         7a:4a:e1:4f:28:a4:dc:0f:53:e1:ef:2d:3f:be:af:f1:31:da:
         7a:ae:fe:42:49:cb:00:27:8d:4d:ae:90:9c:f9:64:6b:b9:aa:
         4c:be:36:41:f1:fd:9f:e1:a9:05:7c:c6:fa:ae:da:8e:f5:83:
         0e:db:6e:30:2c:b4:09:57:9c:f4:f8:12:27:2c:da:b0:71:53:
         21:5f:c6:87:ef:bf:e9:72:9d:ef:72:54:86:bb:2f:52:f5:80:
         cd:e6:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:18 2024 by rpki-client on console-ams.rpki-client.org