Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98271e78-5414-3dd6-b2f4-98dc5c9ee1ab.roa
File:                     98271e78-5414-3dd6-b2f4-98dc5c9ee1ab.roa (raw, json)
Hash identifier:          5ZbLNhQrswXyHZAzJdUkPM7zKH4hoh8DhSetDJNCYs8=
Subject key identifier:   0D:78:5E:17:48:5D:DF:52:B8:C6:05:0E:94:DA:11:5E:44:C1:E9:11
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847A30C092090896B31C7293880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98271e78-5414-3dd6-b2f4-98dc5c9ee1ab.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     36629
IP address blocks:        2620:74:2c::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0c:09:20:90:89:6b:31:c7:29:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=bf4beaec-9f37-4f1a-96ec-33b9e3f8d939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fb:2e:32:20:28:bb:3b:a6:47:d6:b2:1b:9f:
                    b0:52:a0:7f:c8:95:a2:51:e8:42:54:55:24:3a:e8:
                    84:0a:e8:61:f1:52:ff:e2:64:7f:72:32:7a:2d:29:
                    83:57:8c:62:fb:5f:66:36:1f:19:c7:5c:3e:60:dd:
                    09:75:1c:82:7d:95:d0:35:b0:a7:6c:31:ee:d5:fa:
                    39:da:f6:ae:a7:82:d1:12:7f:70:f2:36:78:37:4b:
                    c7:9a:88:12:00:f4:dc:89:97:28:13:15:24:b0:6b:
                    e0:0c:79:c7:9a:29:21:ab:c8:2f:e7:fa:78:08:8a:
                    bb:ff:e4:fd:96:ae:cf:0d:d6:ae:f9:7b:30:7e:67:
                    db:e1:ac:1d:63:94:f5:66:27:05:73:e8:75:3c:2f:
                    e0:c5:03:1f:f4:00:4e:10:1f:ea:f9:09:8d:ed:ce:
                    d8:3b:b5:c3:b9:f4:2b:8b:6d:c6:02:1f:dd:ed:b6:
                    06:af:cf:f8:b8:3d:df:f6:18:9f:a7:f3:2c:0b:d8:
                    06:ee:ca:6a:e5:4c:56:cf:aa:9a:cb:c4:04:6e:20:
                    7d:1e:53:00:7b:3f:a6:e2:54:ae:b5:a7:79:92:a3:
                    3d:53:25:23:d4:10:f7:58:96:2b:7f:8c:c8:32:ce:
                    da:48:1f:1d:f3:1c:1d:4d:f4:1b:a0:e5:b7:b8:f8:
                    a8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:78:5E:17:48:5D:DF:52:B8:C6:05:0E:94:DA:11:5E:44:C1:E9:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98271e78-5414-3dd6-b2f4-98dc5c9ee1ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:50:b1:cf:55:68:ec:2d:d3:41:31:0b:0c:61:55:6f:9a:0d:
         dc:a0:76:70:88:f3:aa:61:77:8d:82:e0:ca:f6:9f:25:25:71:
         f4:14:a8:ed:8d:67:07:8c:7d:09:ea:de:6c:34:a8:df:2b:92:
         89:8d:3b:9c:84:b6:2c:4b:d8:c3:2e:6d:c6:dd:f3:6b:c2:93:
         84:15:f6:b0:51:a4:0a:4f:05:b0:3c:ab:98:8b:44:1f:3f:34:
         90:4f:5a:85:28:3c:cf:90:da:36:66:90:07:b2:55:ee:c0:d2:
         a0:5d:7a:14:b0:3d:d6:a6:7d:37:35:d3:f3:36:d5:50:9e:2b:
         a7:4a:a9:17:e5:95:e9:17:03:fa:f9:02:29:17:d8:84:03:ae:
         5b:23:0a:85:91:74:ac:55:52:80:88:3d:31:57:7c:bc:98:d4:
         8c:c9:36:95:79:64:23:f9:9f:20:3c:b7:f2:53:ce:5c:41:64:
         79:0e:0e:8d:2d:88:fd:89:bc:1e:b7:a6:59:28:fd:c2:bd:2d:
         53:1f:cf:7a:6d:99:93:89:b8:2c:e2:68:cc:ac:45:58:c4:09:
         04:bb:8f:e6:62:82:6b:c1:9f:76:a8:4c:70:6d:62:9d:d6:55:
         71:8a:aa:59:9b:65:b7:72:36:5c:bf:d9:3e:12:65:0d:74:0c:
         6e:37:50:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:41 2024 by rpki-client on console-fra.rpki-client.org