Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a32456d-70ce-3c7b-bbcb-b10636a9e0a6.roa
File:                     3a32456d-70ce-3c7b-bbcb-b10636a9e0a6.roa (raw, json)
Hash identifier:          O9S3x9nYbMjh+LaDYJSMcmx2DObwcNcFQPLlVx+pFRo=
Subject key identifier:   A9:35:65:F6:B4:78:16:78:8F:55:CE:BD:F4:57:BA:B6:2B:F2:C8:54
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C2F4F5E99543791516900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a32456d-70ce-3c7b-bbcb-b10636a9e0a6.roa
Signing time:             Tue 24 Sep 2024 16:26:27 +0000
ROA not before:           Tue 24 Sep 2024 16:26:27 +0000
ROA not after:            Mon 23 Dec 2024 17:26:27 +0000
asID:                     397240
IP address blocks:        2620:74:1c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:2f:4f:5e:99:54:37:91:51:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:27 2024 GMT
            Not After : Dec 23 17:26:27 2024 GMT
        Subject: CN=69159d5e-98ac-402d-bba1-2131cd5063ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:76:1b:46:9f:93:71:6a:ba:be:f9:a0:17:f8:
                    a6:36:72:5c:b1:7f:f4:e1:e7:3b:92:fb:15:a5:cf:
                    c6:18:75:53:37:ee:3b:77:8c:58:58:b7:f5:59:cc:
                    da:82:7a:53:a5:08:be:b6:6a:22:79:8c:6e:df:e9:
                    df:42:db:7f:c7:61:0f:7d:fe:59:57:76:dd:9a:84:
                    d2:dd:17:e0:44:46:7c:48:5f:f2:cd:cd:d7:b0:1c:
                    a0:7f:2f:32:a2:f9:b8:22:a9:86:f8:f8:67:23:76:
                    33:64:6e:71:e7:40:46:b0:94:91:6c:89:21:5b:90:
                    b0:68:67:3c:b4:ea:46:fe:e1:3f:62:32:72:4f:f5:
                    1e:1a:98:c8:8c:a7:fd:7d:e7:52:21:98:f4:6a:c2:
                    14:a9:f2:17:32:18:91:72:a3:c0:23:aa:15:88:e9:
                    88:4a:74:83:40:89:53:2f:69:2f:9f:05:2b:89:d1:
                    65:36:f8:ee:68:89:fb:2e:c7:04:2e:a5:0f:8c:50:
                    8e:0d:72:39:ea:aa:67:2b:86:9f:59:3c:e0:90:ce:
                    23:3a:0f:ec:d8:64:e8:f2:c6:a4:fd:87:06:fb:39:
                    54:6d:18:49:e0:44:d8:4a:a5:d3:3e:9f:ca:03:ca:
                    6b:33:3f:cd:36:9c:36:52:8d:33:a8:12:dc:00:5a:
                    46:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:35:65:F6:B4:78:16:78:8F:55:CE:BD:F4:57:BA:B6:2B:F2:C8:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a32456d-70ce-3c7b-bbcb-b10636a9e0a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:67:ab:f2:96:61:b0:b8:29:b0:04:fe:eb:64:0c:96:ac:b9:
         9d:5c:3c:c1:df:91:92:e6:f8:3e:1a:b7:e7:3d:17:9d:56:cb:
         76:fa:1a:db:d7:94:92:79:61:d5:89:76:80:1d:9d:c1:08:91:
         d2:6a:d5:ec:fe:c9:7c:ef:28:ff:2d:d5:2c:f9:40:da:63:c7:
         3a:5e:92:08:67:d3:61:71:58:c5:f0:5d:b6:53:00:57:11:25:
         e4:8c:9a:1d:17:5e:fd:98:3d:62:cb:5e:af:5a:a5:38:c1:e9:
         dc:eb:40:fb:e8:cc:17:7b:fc:16:6c:55:cc:a1:4b:32:9d:85:
         65:05:f5:20:0e:ab:07:4d:3a:01:6e:ab:cd:23:74:d9:c2:12:
         e7:85:a0:55:be:89:38:b2:68:83:ca:a4:f5:67:6d:3c:84:b9:
         fa:f0:99:07:e6:a4:5b:48:d0:13:1f:18:b6:77:f6:07:00:9a:
         fe:44:8b:15:f6:c5:10:7d:74:60:fd:c7:6d:7d:34:28:79:b2:
         38:39:4d:be:3f:b3:78:98:e6:68:18:14:40:d0:be:7d:15:5a:
         8b:b9:46:44:0c:81:c1:10:2d:0c:38:70:05:02:26:08:8a:37:
         7d:0e:17:4f:dc:64:0c:15:c5:f0:12:3a:00:00:c4:de:02:be:
         e1:31:7b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:37 2024 by rpki-client on console-ams.rpki-client.org