Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/31ca2f3b-bbca-3482-91af-458a6570d0a8.roa
File:                     31ca2f3b-bbca-3482-91af-458a6570d0a8.roa (raw, json)
Hash identifier:          5IWIp1NQYo6RoFRqKl+KVESX11ZIWmfs0IepPXb1Q9A=
Subject key identifier:   3F:55:5B:CC:20:59:77:A2:9A:E9:D9:08:89:86:C6:2B:D1:F1:A8:FF
Certificate issuer:       /CN=741b6a9d-4a31-4062-8784-4f1a436ab121
Certificate serial:       010D0C9F43285847B3CC0B3A9EE5B9D7773D3080
Authority key identifier: B3:FC:7F:0C:CA:DC:F9:E4:0E:B5:62:6C:EB:65:03:14:8C:02:CF:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/31ca2f3b-bbca-3482-91af-458a6570d0a8.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     400478
IP address blocks:        2620:b1:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/741b6a9d-4a31-4062-8784-4f1a436ab121.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/741b6a9d-4a31-4062-8784-4f1a436ab121.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:0b:3a:9e:e5:b9:d7:77:3d:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741b6a9d-4a31-4062-8784-4f1a436ab121
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=772a1544-2f6d-4e38-be4d-71696844966b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:17:a1:00:5b:3f:4b:fa:2d:18:cc:57:41:0a:
                    dd:bc:0d:8a:11:ae:f6:5d:11:d9:d2:4d:b0:62:a8:
                    f5:ba:b8:4e:13:30:97:a7:90:ab:4a:27:b0:21:c7:
                    d9:2c:7f:58:a7:c0:80:3b:ca:b3:43:62:53:2a:08:
                    f2:13:03:7f:b4:f0:89:af:8f:41:21:d4:5f:c8:83:
                    46:b9:a0:a3:e6:54:67:0e:a2:c0:98:b2:21:94:d5:
                    d5:cb:d8:57:7e:10:fa:77:e1:89:18:1f:12:1d:c3:
                    cc:75:f4:36:ef:eb:42:be:1e:25:22:d3:18:ee:f0:
                    ba:f8:50:53:91:fe:eb:56:d5:b8:b2:08:82:01:26:
                    1c:b1:b2:dc:44:4e:93:f2:c7:26:ee:8e:65:79:cb:
                    39:6e:9f:f0:94:ea:de:8c:c7:f8:14:3b:b4:f3:61:
                    57:24:5a:f7:e1:d6:dc:ac:52:5e:79:94:14:37:47:
                    3e:e7:cd:97:51:4c:22:3a:bc:28:ce:ae:ff:4a:2b:
                    17:d4:c0:97:19:a3:9b:d3:ae:f8:87:8b:ee:25:43:
                    f1:7d:6e:4c:c4:96:6a:84:20:73:c1:8c:89:a1:ec:
                    5b:36:2c:e1:d2:df:b3:3d:ff:b2:df:68:ac:8c:c1:
                    ed:e2:af:20:e0:b2:e4:38:a7:2f:bb:ab:de:35:73:
                    5d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:55:5B:CC:20:59:77:A2:9A:E9:D9:08:89:86:C6:2B:D1:F1:A8:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/31ca2f3b-bbca-3482-91af-458a6570d0a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/741b6a9d-4a31-4062-8784-4f1a436ab121.crl

            X509v3 Authority Key Identifier:
                keyid:B3:FC:7F:0C:CA:DC:F9:E4:0E:B5:62:6C:EB:65:03:14:8C:02:CF:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b1:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:86:bc:8e:c3:bf:5f:31:8d:9d:83:7f:26:10:a4:eb:bd:fb:
         16:bd:dc:ec:e5:bb:87:01:af:c1:77:de:4f:57:07:c1:5c:6e:
         ce:eb:4e:0a:2d:f1:04:c6:17:f9:bb:30:c6:0e:0c:a1:ad:18:
         42:74:a8:e0:4c:e7:57:ea:7e:aa:a9:3d:93:1e:c2:fd:d5:8e:
         df:2d:bd:5a:ee:67:ed:cc:89:cd:1c:8a:7d:e5:f0:08:39:bb:
         00:3f:07:31:b1:28:57:b6:11:91:d5:62:c2:64:90:6c:47:86:
         79:5c:88:b5:13:80:b6:e2:14:a9:d9:7c:66:6d:0c:43:66:b0:
         ca:f2:02:22:8f:40:65:2f:be:5e:94:3f:00:5d:44:a9:8c:99:
         a1:a4:dd:f9:61:09:3c:0e:8f:69:ea:aa:f8:9e:5c:8f:6c:72:
         3e:75:36:ce:42:ee:ff:f7:d4:3b:ff:59:64:a7:e8:cc:f1:24:
         75:3f:45:be:9b:e1:83:38:88:d1:51:7a:16:36:b8:29:1e:dc:
         84:35:88:56:97:bf:00:87:d2:89:ac:98:df:eb:b3:ef:8b:4e:
         ce:d9:91:13:bd:88:6d:52:79:f1:44:4e:16:d3:eb:f1:04:ca:
         0e:af:15:87:bf:a7:af:df:11:c0:9a:2e:20:e2:d7:65:73:22:
         36:fe:c3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:12 2024 by rpki-client on console-fra.rpki-client.org