Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aab20ba5-5396-39a6-96e4-8f6604c8e135.roa
File:                     aab20ba5-5396-39a6-96e4-8f6604c8e135.roa (raw, json)
Hash identifier:          sfNcS/ecUJI6QDRoh0Gf+GAGjWoxv4y852fmP2ab5ps=
Subject key identifier:   51:68:97:79:90:F9:BA:50:57:5E:CA:E1:6F:4A:23:F3:2F:E2:2B:0B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584726D064BEEBC2D773E50E6CC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aab20ba5-5396-39a6-96e4-8f6604c8e135.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     40647
IP address blocks:        2620:74:2a::31/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:64:be:eb:c2:d7:73:e5:0e:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=36f2b970-31bb-4326-ad07-da81257d5960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:30:6a:fc:1e:8d:19:b3:0b:83:73:50:11:41:
                    3e:2f:ac:f4:66:a8:b2:9b:23:2d:9c:3c:b8:64:30:
                    36:ba:b8:41:d2:7e:ed:9d:d7:39:c9:80:60:11:6e:
                    10:f6:4b:be:96:ee:d8:86:e8:cb:73:94:aa:61:2b:
                    bc:dd:29:9e:d1:53:30:a8:5c:e9:ac:6f:c3:5a:32:
                    ad:1b:32:ae:6a:04:2d:b9:c3:c8:6b:7a:1e:09:ab:
                    68:49:ce:c3:d3:de:04:3d:a3:d7:8c:c0:aa:43:c7:
                    f4:05:97:34:08:b0:07:97:9a:f0:eb:f3:74:9d:fc:
                    5e:17:86:29:61:6c:23:16:47:f6:77:22:6e:ab:16:
                    0b:2f:d5:1a:59:0e:e4:e4:46:6f:3a:f0:d1:ec:0b:
                    37:68:b6:87:e6:b3:04:a7:00:b6:4a:b7:cd:d0:67:
                    dc:5a:cd:fd:1c:b4:0e:3a:d1:fe:49:61:b1:28:bc:
                    bb:d1:e1:8d:52:88:28:39:e7:b0:7c:e1:e2:b8:23:
                    ec:f1:3a:dc:d7:e4:73:1a:8d:d0:0e:6e:2b:19:02:
                    f3:26:a6:c3:19:2f:2c:a5:32:67:27:f8:da:3d:50:
                    52:f2:d7:df:4b:1f:a2:4c:80:00:1e:d8:00:fb:61:
                    a3:47:a5:3a:15:4d:42:e6:ed:c7:c9:f8:fa:f5:f4:
                    b9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:68:97:79:90:F9:BA:50:57:5E:CA:E1:6F:4A:23:F3:2F:E2:2B:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aab20ba5-5396-39a6-96e4-8f6604c8e135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:eb:72:3c:69:98:bc:63:7d:9b:21:b0:81:fc:2a:85:6d:a5:
         b8:b2:ab:09:84:1b:04:c2:9a:cd:ff:ea:cf:64:fa:1e:f1:3a:
         2d:7f:56:8f:fa:df:89:91:c0:46:b6:a2:07:a7:14:07:8c:ed:
         9a:1e:74:a7:48:dc:b1:6a:79:e3:d6:cc:f5:84:35:34:f9:81:
         42:68:8b:f5:60:57:eb:09:33:48:21:b5:d8:e2:b6:97:3b:b9:
         ce:97:6f:a7:82:04:b8:5c:0f:f1:84:06:af:71:2f:f6:3e:20:
         ad:57:e7:be:28:69:69:9d:13:30:af:cd:a2:49:26:ed:c1:18:
         51:e0:32:8f:6c:f6:2c:25:ca:44:22:45:df:85:68:4a:d6:f4:
         22:5b:d9:da:b7:70:7e:ac:eb:2c:21:65:57:f0:6c:f4:74:2d:
         4d:f9:29:f8:02:93:91:c8:b6:75:eb:18:f4:8d:3d:a0:8a:aa:
         ac:89:a7:e6:66:11:6c:2d:88:d2:73:c8:57:8b:11:0f:c1:62:
         a4:b3:db:27:f4:b4:5b:6c:ae:11:e7:ad:1c:39:d8:dc:77:64:
         96:5a:ba:ac:46:f1:48:e5:b9:f6:80:ac:c5:f1:5e:dd:a0:27:
         17:5a:a4:a6:63:2e:1c:da:b8:3c:7f:6e:81:fe:04:c0:62:a4:
         3a:97:81:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:42 2024 by rpki-client on console-fra.rpki-client.org