Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b81880bd-ad23-3a87-a158-4f0d6be9eb3b.roa
File:                     b81880bd-ad23-3a87-a158-4f0d6be9eb3b.roa (raw, json)
Hash identifier:          mpzOcj52b/iYXUPW7XqH1TdlTSt2etLr3tnbubZCcXs=
Subject key identifier:   94:9F:7E:DD:3D:BB:C3:19:18:79:4B:3F:E2:69:53:10:61:4D:06:3C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285845A9BE150EEBE0C17D5BE87C80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b81880bd-ad23-3a87-a158-4f0d6be9eb3b.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     396828
IP address blocks:        2620:74:7a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:15:0e:eb:e0:c1:7d:5b:e8:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=5d7c3966-af0d-4143-8016-1e861d852b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:59:fb:9b:3b:8e:83:0d:8b:e8:c7:7b:b6:43:
                    15:65:df:c5:3a:4b:4f:cf:32:f3:a2:a1:f4:fb:10:
                    8d:f6:85:b1:25:32:0e:b1:4f:59:a1:06:27:a6:b9:
                    e5:ba:f5:ae:f5:12:9c:d3:b3:70:73:43:f3:fa:b4:
                    e0:32:78:f6:c9:94:4b:3c:ff:99:3b:f2:4e:27:e1:
                    3a:ec:17:46:82:63:e0:59:45:f9:52:c1:c4:34:ea:
                    26:32:ff:f0:b8:08:e4:62:f3:68:30:8f:56:ae:37:
                    c2:07:db:a9:79:24:df:b1:75:59:23:63:fd:40:4a:
                    ea:38:80:ad:e1:cb:31:9a:6a:6b:ef:08:4d:16:07:
                    4e:bc:7a:a1:db:cb:dc:71:89:8a:f5:a0:9c:0d:90:
                    62:f1:f4:ff:ae:b8:f3:cd:88:04:fa:1a:4b:05:86:
                    cd:bf:99:06:ed:da:2d:b7:b1:23:b7:b7:ff:18:ae:
                    a4:d4:38:1d:ea:bb:01:40:d1:62:dc:84:d2:e3:77:
                    e7:37:66:1c:8e:c3:fe:7e:d5:b7:6d:75:d5:69:f6:
                    aa:6d:ef:fb:0b:62:5c:86:c1:a7:19:ee:79:ad:61:
                    b3:90:d9:74:6b:6b:55:c6:4a:68:5e:84:c4:5a:00:
                    eb:c4:79:45:ad:0a:81:06:40:47:5a:2f:f6:c3:27:
                    51:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9F:7E:DD:3D:BB:C3:19:18:79:4B:3F:E2:69:53:10:61:4D:06:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b81880bd-ad23-3a87-a158-4f0d6be9eb3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:7a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:82:b4:42:09:2e:5f:56:d4:cc:76:c7:da:1f:7f:22:aa:18:
         72:cc:55:8f:e9:f2:5e:64:d4:b9:33:e6:54:ff:1a:07:7a:d6:
         18:01:31:6a:76:d1:9c:dc:9b:df:97:88:15:67:22:36:24:56:
         e5:7f:fe:13:fe:6c:32:8f:a3:99:2d:d8:26:53:d4:0e:e1:46:
         9e:85:c1:15:d2:30:6c:94:db:8e:3b:29:46:76:86:c3:bd:0b:
         02:b2:e9:45:63:83:e0:29:d0:ec:7a:ee:b0:9f:e9:54:93:e5:
         d5:49:51:6f:aa:b1:06:92:07:20:48:0c:64:ef:d6:ce:e7:1e:
         ac:d3:bb:be:dd:71:60:4b:cb:5b:21:cd:24:7b:44:e6:e0:28:
         30:9c:61:9f:fe:b3:7c:e6:75:65:6b:3a:a4:be:70:de:e6:8f:
         f4:09:46:94:e5:e6:2e:37:52:82:c5:03:81:97:12:ee:b1:1b:
         f2:47:b9:37:79:1b:b1:1c:44:05:b7:9f:4b:89:8f:07:f9:cb:
         1b:fe:82:ac:dd:5c:07:9b:85:bb:14:ce:e0:2d:92:58:21:02:
         b0:1b:40:50:a7:3c:cb:5f:eb:e8:cd:52:64:fc:78:e1:db:32:
         fb:ac:72:e6:1a:b5:9f:92:92:1e:af:4d:95:cd:15:88:df:1b:
         99:f0:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:57:32 2024 by rpki-client on console-fra.rpki-client.org