Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9bf4c20-84d9-3bce-9ba6-e7bed946cfd5.roa
File:                     d9bf4c20-84d9-3bce-9ba6-e7bed946cfd5.roa (raw, json)
Hash identifier:          KNpgEla8pzWWd9QFDqOxYCTLCmV1aatjPdVtiozKTRY=
Subject key identifier:   6B:3B:E6:14:CE:2B:B2:F0:FB:DA:CE:D3:02:5C:A0:94:40:C9:4A:3C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858475A7627D501994D22BAFD19C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9bf4c20-84d9-3bce-9ba6-e7bed946cfd5.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     25485
IP address blocks:        2620:74:20::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:27:d5:01:99:4d:22:ba:fd:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=5ba07f75-a9e3-4bb8-b7ae-b77f52ee7b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0d:4c:aa:e1:03:c6:4d:9f:60:45:f8:ab:10:
                    d3:28:e8:38:0b:bd:6e:8e:0b:b4:09:e4:12:be:76:
                    72:2d:9f:e0:f4:ae:0a:39:5f:55:12:c3:33:77:2a:
                    94:b9:2c:19:35:27:e4:ae:20:3c:65:64:01:93:b0:
                    f7:0b:6c:80:d2:0a:42:51:25:66:91:06:28:f7:f8:
                    2b:5d:e1:ac:58:df:78:5b:ff:93:c3:54:14:95:19:
                    cd:1e:30:08:34:01:0d:5f:ea:d7:6e:18:33:66:e9:
                    b5:32:10:50:21:40:1d:7e:93:f3:ab:b3:7d:23:9f:
                    99:c8:ee:a2:7f:06:1f:49:12:76:f4:41:3e:0e:84:
                    26:60:cd:db:d2:eb:da:21:fb:42:d5:fd:5e:a7:f2:
                    3b:da:69:6c:fd:78:6c:01:1b:7a:a0:b8:a7:c9:f3:
                    07:0d:18:90:cf:98:b4:a7:d1:95:a0:d9:a3:1c:b7:
                    41:cb:47:6f:57:2e:5f:0b:22:78:61:0d:92:cc:21:
                    f5:bb:d1:5e:61:a9:f5:48:5c:58:a8:24:77:2e:ea:
                    03:02:38:17:2f:a8:6a:f8:00:2c:16:23:6e:a4:d6:
                    2d:13:1e:69:12:4e:49:af:90:f8:7b:20:61:5a:62:
                    6b:3e:99:e4:3d:ad:3a:04:67:b6:4d:90:ea:ab:f8:
                    b0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3B:E6:14:CE:2B:B2:F0:FB:DA:CE:D3:02:5C:A0:94:40:C9:4A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9bf4c20-84d9-3bce-9ba6-e7bed946cfd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:84:29:f5:54:bb:a5:b5:06:ee:0b:18:ab:4a:f5:c6:d6:1a:
         06:e9:b6:81:e9:b2:a8:ae:e7:40:52:8e:cd:c0:b1:57:45:8e:
         75:9c:68:ee:86:6d:19:21:a8:cd:68:ec:41:90:83:8b:f2:0f:
         65:fe:92:b3:0e:f5:96:e2:39:05:fe:51:44:ec:9e:15:bc:4b:
         97:fa:d2:2a:06:5a:ff:6a:7d:b1:94:6d:7a:5c:91:b3:79:0f:
         fb:0c:10:d0:64:73:8d:3a:b3:41:d9:aa:b7:3a:0c:8c:6b:b5:
         1c:9c:d7:6a:3c:7b:3a:a9:94:84:fb:bf:de:e8:ea:0c:54:b6:
         1b:05:da:16:cc:1e:65:87:a8:da:b1:7f:75:16:8d:b6:25:81:
         8c:9b:11:a0:4e:dd:19:db:53:5a:5d:ca:72:ad:1b:2c:6a:df:
         31:9b:3a:16:10:68:91:03:9f:31:9c:09:6c:91:6d:0d:eb:c1:
         ea:68:81:df:02:1b:2c:5e:8b:bf:e5:c2:7e:ea:4f:cc:9a:48:
         4d:50:35:91:ab:76:1d:ff:26:3f:07:8b:3c:5f:6e:a1:bb:74:
         f0:f1:8b:1e:03:98:24:4b:0c:28:5d:63:12:0e:08:d8:94:76:
         ba:7e:51:9c:23:ba:bf:0f:1e:35:f2:25:da:6f:90:92:20:28:
         fd:51:36:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:46 2024 by rpki-client on console-fra.rpki-client.org