Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcf2fd9c-2042-3d41-a040-63b9e007be8f.roa
File:                     fcf2fd9c-2042-3d41-a040-63b9e007be8f.roa (raw, json)
Hash identifier:          SwTWcoUBVwn7hZKwJq56xNlDH18B36bmLHEw7AeAXFE=
Subject key identifier:   CD:9B:BF:F2:42:E7:C1:6D:63:69:77:63:74:4A:F0:AF:29:23:84:37
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847A30C0F07E8838D731F26A960
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcf2fd9c-2042-3d41-a040-63b9e007be8f.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     36627
IP address blocks:        2620:74:2c::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0c:0f:07:e8:83:8d:73:1f:26:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=7e2fa6bf-76a8-4e46-b452-458266f92d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:48:34:3a:b3:7d:ec:3c:67:b7:9c:6d:50:
                    08:d7:48:f3:0b:7c:f0:dd:20:3d:af:ed:10:4d:54:
                    af:a0:b5:91:0a:60:e6:3e:40:8e:d4:21:ce:ff:a2:
                    73:1f:73:2d:20:68:82:0f:29:c2:80:2c:6d:e4:08:
                    cf:c0:b7:fd:0e:6f:ca:1b:7e:a1:e8:2e:3a:e3:72:
                    c4:18:5b:9c:80:b1:08:18:a5:6c:1d:3e:23:4e:52:
                    5b:3e:60:a3:f5:45:0d:24:de:94:fa:10:08:5e:3f:
                    39:06:64:8f:d6:f4:26:c6:05:a1:fd:c7:7e:a3:58:
                    7e:7b:d6:20:8f:0d:98:79:62:9d:ca:5c:7d:3b:c1:
                    98:1c:5c:5f:96:3c:21:d0:9c:4a:a2:00:7d:5a:07:
                    3c:1c:7b:21:4a:98:58:61:28:fb:7f:88:bc:78:d4:
                    04:ce:70:38:8a:6d:26:ac:2e:75:0d:67:3e:f4:71:
                    fd:fa:91:98:14:18:77:63:69:2d:fd:df:44:5b:9b:
                    2e:d4:85:f3:e9:30:1c:11:13:9f:1c:4a:e0:9c:5c:
                    bb:a0:2c:1a:02:70:45:e4:45:66:ff:1e:f6:47:4a:
                    f5:bc:6e:80:3d:18:ec:2f:41:b8:62:20:69:b9:55:
                    e8:ba:3b:a8:6a:10:bf:c3:95:21:fa:03:f9:01:6d:
                    17:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9B:BF:F2:42:E7:C1:6D:63:69:77:63:74:4A:F0:AF:29:23:84:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcf2fd9c-2042-3d41-a040-63b9e007be8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d3:69:f2:57:fa:3c:39:fc:ba:ff:a4:30:41:15:94:c8:a0:
         d1:fd:9b:54:cb:42:e5:27:46:2d:65:7f:12:c7:f7:82:47:cc:
         94:8c:5b:ce:0e:5d:1e:43:fc:21:0a:aa:52:d0:f6:20:46:77:
         4c:69:46:ac:a5:e8:2d:b6:21:7d:d4:1b:24:77:c7:da:1a:50:
         81:43:50:25:c9:30:3c:7a:f4:67:de:a6:1a:46:81:f8:1e:38:
         ae:ae:24:a1:e4:18:a7:0f:e1:e3:18:e3:72:2c:71:c0:00:6f:
         e2:27:23:94:93:08:81:14:5b:48:bd:dd:08:f2:d2:59:8a:32:
         11:43:37:4c:55:03:3a:2d:db:02:fb:08:3c:c0:e6:71:c4:e0:
         50:25:31:5a:76:d7:a7:8e:05:f2:64:5e:a3:4d:21:7a:0f:76:
         fe:f2:24:2c:62:a9:0a:c6:32:cd:c5:bf:73:0e:a8:e6:4a:df:
         25:ae:3f:2c:34:cb:d9:5f:c3:24:87:df:9d:6e:1d:4b:d1:c4:
         fb:05:f0:60:a4:2c:5d:ec:b0:c9:cb:30:95:b8:02:80:b2:21:
         ca:1c:a4:b5:9e:73:1e:0a:2c:f3:53:55:1c:77:f1:56:92:ab:
         a4:62:aa:64:e1:c3:b6:ec:db:5d:dc:c1:f7:3b:c1:e0:e7:28:
         01:73:c8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:48 2024 by rpki-client on console-fra.rpki-client.org