Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0b8c1cd-7db3-39cd-9a71-823604e1f099.roa
File:                     e0b8c1cd-7db3-39cd-9a71-823604e1f099.roa (raw, json)
Hash identifier:          aUBsMCO20Lat/DjpBTAOpWGAorLlhwW1zeraZ1i0Xxk=
Subject key identifier:   10:6E:9A:B3:81:D6:69:1E:58:85:D0:44:8E:0D:29:4C:D1:34:CA:7B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584738F5F288D4B2682B8F0B6900
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0b8c1cd-7db3-39cd-9a71-823604e1f099.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     20431
IP address blocks:        2620:74:21::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:f2:88:d4:b2:68:2b:8f:0b:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=f05d3a6e-37d0-4ae0-bfd7-2e33a8e81237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:9b:95:f3:a5:35:0f:6d:74:0d:34:12:e8:
                    d1:47:dd:8c:f6:69:43:1b:ff:d5:de:19:cd:85:be:
                    59:67:bc:47:4a:1e:98:50:86:aa:f0:9f:d1:ec:a3:
                    e3:59:3d:97:e3:0a:cd:23:ba:80:1e:a7:b8:50:68:
                    c3:4b:85:10:ab:66:19:d0:5b:73:52:85:4b:51:ae:
                    55:db:22:5c:85:2c:4c:46:00:97:6b:c4:73:39:d7:
                    d2:81:c4:e6:6d:ed:29:cf:a4:4e:ca:4f:a0:75:2e:
                    27:64:54:6c:9c:cd:9c:52:a4:00:aa:ba:bd:a5:8e:
                    5f:1e:f4:d8:fe:fa:cf:2d:2c:95:2d:34:cc:cf:ef:
                    71:24:6e:72:21:59:1f:8f:83:35:ba:49:15:81:0f:
                    19:89:91:2c:7e:1b:0e:88:f8:63:fe:42:26:e2:53:
                    4a:26:a9:6c:34:97:ca:0b:1e:a8:40:00:ca:8f:66:
                    66:79:43:4d:3e:3e:e7:59:b9:2d:ca:31:50:ab:ae:
                    6e:b7:d4:83:43:2f:81:66:35:f4:80:6e:bf:be:eb:
                    2d:df:6c:1d:99:02:e3:39:91:54:56:df:ed:3c:bd:
                    4d:30:78:8c:8d:fb:f3:c3:7f:86:f1:95:cb:1f:bb:
                    4b:89:40:f0:8e:b2:2b:4a:29:d3:ac:5c:fb:a3:aa:
                    86:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6E:9A:B3:81:D6:69:1E:58:85:D0:44:8E:0D:29:4C:D1:34:CA:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0b8c1cd-7db3-39cd-9a71-823604e1f099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e4:3f:16:9e:f8:9c:28:cf:09:a9:e1:e5:eb:e0:d7:e1:0c:
         8d:0f:ef:d5:82:cc:72:75:ae:f6:c2:c6:a8:48:a5:63:64:84:
         68:c6:18:76:04:c9:95:fa:00:b3:f8:50:b9:30:db:3b:cc:7b:
         7f:a4:ec:25:fb:1f:fa:34:61:c8:3c:24:12:f7:c6:6e:d2:7f:
         77:95:6f:a4:17:2f:e3:5b:44:1a:91:78:ae:f0:35:74:28:6b:
         3d:e3:49:b2:03:6e:4e:3e:aa:f7:75:1e:2d:10:47:60:4c:a3:
         96:1d:e0:58:65:2d:a9:fb:c3:1b:d1:0e:79:e1:a8:c8:c6:a6:
         93:d6:dc:2c:9e:97:8b:8a:6d:64:f3:be:60:4e:51:9f:5c:85:
         24:12:69:4b:bc:4a:51:14:76:bf:95:96:f0:38:ed:a6:71:f9:
         59:c7:7a:02:d7:e8:90:03:9d:d6:21:e9:8e:97:19:4a:63:89:
         a6:98:36:1d:64:02:14:94:0b:79:4d:47:9e:76:60:5d:6d:f1:
         12:1b:3b:9d:32:df:2c:c3:1f:65:a8:2b:b2:4e:3e:3a:ce:86:
         37:2e:42:e4:02:60:bc:25:ed:07:2c:d1:73:40:57:ed:53:2c:
         b0:c0:3a:b6:cf:5d:7a:55:6b:ed:61:c4:da:ea:e1:5e:55:f0:
         d2:ab:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:46 2024 by rpki-client on console-fra.rpki-client.org