Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c3d9330-159f-351b-9508-625aad2b6f04.roa
File:                     0c3d9330-159f-351b-9508-625aad2b6f04.roa (raw, json)
Hash identifier:          6Ni4I++EeUx5IvZHFjfML2XSa3xhUAtCfct3a1WB2sE=
Subject key identifier:   38:26:F3:E0:D8:16:28:5E:D6:52:50:CC:D1:DB:E5:FF:2D:85:5F:3D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C2AACAF805737F8E97930
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c3d9330-159f-351b-9508-625aad2b6f04.roa
Signing time:             Tue 24 Sep 2024 16:26:25 +0000
ROA not before:           Tue 24 Sep 2024 16:26:25 +0000
ROA not after:            Mon 23 Dec 2024 17:26:25 +0000
asID:                     397221
IP address blocks:        2620:74:1b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:2a:ac:af:80:57:37:f8:e9:79:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:25 2024 GMT
            Not After : Dec 23 17:26:25 2024 GMT
        Subject: CN=8855d997-e686-4f2f-8b80-c7f9656cbd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:b4:a1:7d:cd:c3:b8:23:f4:93:24:f3:e6:
                    67:51:f5:01:ee:4c:9b:a5:2d:76:6f:ac:04:ed:71:
                    c4:c0:98:62:20:85:40:cc:29:b7:d1:b7:9f:64:9d:
                    78:ef:7d:5f:07:2e:6c:46:08:97:15:a2:0c:78:e2:
                    36:d3:0d:f4:da:97:8f:90:75:e5:29:07:c2:48:60:
                    6c:83:f3:42:f5:f4:a1:0d:c5:88:17:a7:83:22:e9:
                    7a:b6:41:d8:88:4a:76:fc:4a:fd:cf:c3:77:71:d3:
                    c0:b6:9b:0d:c6:bc:01:24:76:41:f9:2b:70:98:5c:
                    0d:5f:cd:69:e8:93:86:3d:9e:88:49:2c:88:a0:f4:
                    1d:10:1b:1b:7b:75:22:d7:ba:17:8e:47:28:1d:dc:
                    c1:73:a0:8a:5b:96:68:da:94:b7:15:ca:8a:13:5b:
                    cb:8d:5b:7c:f8:43:26:9f:aa:60:b5:dc:95:b4:42:
                    5a:3e:8f:cd:08:fa:d4:f9:37:a8:1b:01:e4:d4:5f:
                    ca:2c:92:14:1e:a1:4c:c2:24:e6:80:11:1a:bf:c8:
                    f0:16:56:f4:0e:06:5c:fe:eb:1d:e0:f2:e7:39:96:
                    cf:7a:1a:b3:64:85:cc:99:6d:24:51:f4:73:ac:2e:
                    3e:14:54:b9:0f:a4:a0:e8:97:0f:95:6a:a8:72:c7:
                    13:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:26:F3:E0:D8:16:28:5E:D6:52:50:CC:D1:DB:E5:FF:2D:85:5F:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c3d9330-159f-351b-9508-625aad2b6f04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:da:00:da:c1:3a:0c:b9:fe:3f:ba:91:92:a7:a5:1d:ed:3c:
         a7:c3:f7:5c:c7:15:3b:88:e0:ea:96:4e:4a:6e:a9:80:98:cf:
         35:12:d3:f3:7e:51:d4:1f:38:fa:8b:e0:58:b1:96:d8:57:b6:
         21:2e:05:81:1d:62:34:46:34:0a:3a:bb:52:c0:95:7f:9e:a8:
         8e:ad:74:66:65:7a:6f:38:c8:59:a5:bf:18:b1:70:40:12:ae:
         bc:2d:01:b7:e3:3a:ca:8e:b9:8b:77:56:0e:91:3b:cc:b4:0c:
         29:20:bc:58:74:80:e5:22:37:31:18:63:0a:5d:3a:92:51:b2:
         44:a9:41:c3:cd:a8:6d:3e:29:7a:0c:7a:14:d9:c1:8c:f2:eb:
         78:2b:5b:12:a5:c8:6c:f8:1c:25:55:eb:9d:6f:5c:ed:13:ca:
         cc:34:d9:08:3c:cb:d7:18:b3:8b:f3:ef:a1:9b:41:d0:f9:16:
         e4:60:78:3c:3c:b9:4e:3e:35:15:08:82:f8:f6:18:61:a4:fc:
         5e:5d:52:08:19:d9:21:c1:fa:8a:3f:1f:56:1c:b0:46:c9:30:
         ff:3f:f5:32:d2:2c:33:90:f6:e7:7a:12:82:2f:19:90:d0:d4:
         86:f8:01:57:b7:d2:81:10:f7:c7:d0:c1:b1:86:43:c8:71:09:
         c9:b6:94:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:56 2024 by rpki-client on console-fra.rpki-client.org