Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/3d6f486f-3da5-3554-aee4-3f1a62659f74.roa
File:                     3d6f486f-3da5-3554-aee4-3f1a62659f74.roa (raw, json)
Hash identifier:          Jqvzscu9/xhKoERBtKIRyHW+8T7kwzYqE4r8r27bQhw=
Subject key identifier:   58:4D:62:8D:24:AD:91:10:16:71:58:3D:F3:14:66:A8:06:B2:8C:3D
Certificate issuer:       /CN=1140553e-654b-4538-9cd3-d94d30ee0482
Certificate serial:       010D0C9F432858473095FED27FB80B56C2E63500
Authority key identifier: 58:3D:4A:6B:4A:3E:7F:42:B3:36:1F:60:99:69:D0:A2:1D:19:71:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/3d6f486f-3da5-3554-aee4-3f1a62659f74.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     1734
IP address blocks:        2620:0:930::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/1140553e-654b-4538-9cd3-d94d30ee0482.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/1140553e-654b-4538-9cd3-d94d30ee0482.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:fe:d2:7f:b8:0b:56:c2:e6:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1140553e-654b-4538-9cd3-d94d30ee0482
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=c95444e7-24de-4eed-9fa1-6e108427d05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4c:40:78:be:4c:e2:dd:32:1d:66:0c:f7:2f:
                    49:96:9e:83:2a:3c:0e:66:c2:df:05:b2:ef:05:db:
                    fa:c2:55:54:2a:1a:0d:21:11:2e:93:b2:09:01:3a:
                    d7:96:00:75:ad:8b:93:34:ff:d3:0b:bb:45:28:97:
                    20:67:ac:0e:c7:df:09:79:87:0b:19:77:26:f0:f9:
                    32:c3:db:d5:47:cc:fc:70:de:69:75:de:b7:26:b5:
                    60:f1:12:6c:95:77:b9:ac:1c:f9:0c:c3:1d:d5:66:
                    d9:8c:c4:79:ad:24:55:fe:79:44:68:5c:35:db:37:
                    42:7e:3e:83:30:83:b9:a5:b4:99:b2:15:43:b7:1c:
                    f8:f5:45:7b:6a:a0:b9:15:23:cb:51:c6:bc:6b:53:
                    10:10:2e:5e:1d:da:ca:8f:e3:39:d5:15:69:86:81:
                    61:e6:d8:55:78:02:65:60:67:e0:02:c9:82:98:68:
                    5a:e6:51:85:4b:2e:2e:49:8e:f7:51:e6:98:7e:9e:
                    91:3b:c8:ca:f9:49:70:86:e8:cb:6e:52:71:29:a2:
                    85:30:3f:37:30:7d:a4:54:6c:6c:cd:a5:5e:cb:fe:
                    eb:53:24:f9:90:5f:cf:ab:e0:f5:f5:80:0e:07:39:
                    d7:e8:f0:a9:64:1e:03:16:e3:84:59:e5:4a:1a:4c:
                    d6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4D:62:8D:24:AD:91:10:16:71:58:3D:F3:14:66:A8:06:B2:8C:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/3d6f486f-3da5-3554-aee4-3f1a62659f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/1140553e-654b-4538-9cd3-d94d30ee0482.crl

            X509v3 Authority Key Identifier:
                keyid:58:3D:4A:6B:4A:3E:7F:42:B3:36:1F:60:99:69:D0:A2:1D:19:71:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:930::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:4d:38:ed:12:16:44:e9:bf:d4:60:c1:27:42:83:5a:5d:00:
         a3:f0:e4:91:61:10:37:70:42:70:a1:5a:5b:5e:92:a1:1a:bb:
         a2:09:d1:2a:8e:f1:03:6f:37:36:d9:cd:da:dc:e0:a1:dd:af:
         bf:e2:1e:02:f9:6b:f2:60:a1:08:00:b3:fc:ab:b8:0b:20:3c:
         b6:c1:1c:38:e6:30:b5:40:a8:e5:94:c5:92:43:02:c9:de:2b:
         ea:06:d2:53:e7:c2:64:55:37:22:b7:be:62:75:c2:3a:72:63:
         bf:41:d6:a5:2d:54:6b:26:80:27:3e:7a:27:f2:88:3a:30:e0:
         de:16:5a:e9:ca:5e:b7:66:03:1e:bc:b0:f2:60:22:7f:d9:05:
         d0:f0:51:d5:e8:93:26:4b:8c:ac:6f:4c:08:83:36:66:e6:da:
         95:ae:68:c4:fb:51:d5:aa:b9:1e:46:67:50:58:29:2e:56:95:
         46:40:6c:55:fa:b3:23:85:68:1b:89:9a:0a:c0:83:d7:a1:fb:
         69:14:41:96:9a:34:84:48:38:cf:0b:cc:4c:b2:2e:44:fb:7f:
         ed:64:77:53:21:21:c4:98:26:b2:4e:65:bd:0a:c7:f4:a2:eb:
         d5:1d:1b:af:53:26:a3:74:d7:ef:0b:98:1c:cb:d9:74:44:a1:
         f2:ae:f5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:38 2024 by rpki-client on console-fra.rpki-client.org