Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/519ca85a-ce70-3677-9d25-ddec94d10b92.roa
File:                     519ca85a-ce70-3677-9d25-ddec94d10b92.roa (raw, json)
Hash identifier:          xhBJTr3sr9Kr8g0sF9Y9B2f7jQ1WUKqW3UtleaWUEgA=
Subject key identifier:   E1:C7:E9:26:8C:9E:E6:7A:C7:0D:AD:21:B8:B5:AB:5E:69:05:5C:0F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C2BD5CB1F11EF2A131B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/519ca85a-ce70-3677-9d25-ddec94d10b92.roa
Signing time:             Tue 24 Sep 2024 16:26:25 +0000
ROA not before:           Tue 24 Sep 2024 16:26:25 +0000
ROA not after:            Mon 23 Dec 2024 17:26:25 +0000
asID:                     397234
IP address blocks:        2620:74:1b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:2b:d5:cb:1f:11:ef:2a:13:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:25 2024 GMT
            Not After : Dec 23 17:26:25 2024 GMT
        Subject: CN=cb756173-ca96-4dcc-a814-e97d14404cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:69:31:ba:fa:a3:4a:04:80:80:e7:91:12:2e:
                    99:55:5e:31:42:d0:22:4d:81:54:e5:e0:1c:0e:cb:
                    95:51:4c:2d:11:62:7d:45:7f:e2:60:fa:06:b9:c1:
                    d1:95:80:d9:97:db:22:45:2d:12:67:da:97:e4:0d:
                    17:8d:c9:0c:67:55:f9:2d:5d:ff:e2:a6:56:d1:f9:
                    1e:c0:8a:5e:2a:d1:55:d1:f9:a1:db:88:63:58:3b:
                    bf:7b:52:72:8a:ca:fe:c7:76:36:40:be:bb:a5:0f:
                    50:84:c9:57:00:ca:e7:cb:29:72:82:fe:05:c6:7e:
                    bc:6d:18:de:60:cd:f8:82:51:04:77:f2:b5:7e:5b:
                    27:04:e2:0e:19:fd:87:99:c8:fe:1f:b4:6f:b4:2c:
                    7b:15:fb:b9:1e:93:d8:e3:01:bf:6a:eb:6f:53:ef:
                    93:52:aa:65:32:0d:32:d2:2f:1c:0f:93:42:10:e4:
                    3f:38:95:f3:d5:8e:38:ed:2d:07:50:c5:05:2f:56:
                    00:71:d9:ba:d4:27:6d:eb:ac:4f:12:f1:74:0a:66:
                    99:24:0e:ff:2d:0f:67:db:bf:4b:7a:0b:ac:c7:cc:
                    18:99:d1:b5:29:0e:f1:3b:c6:5c:b4:f8:7b:30:a2:
                    31:b3:dd:0b:15:68:34:4b:fc:25:7b:d9:5f:98:21:
                    95:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C7:E9:26:8C:9E:E6:7A:C7:0D:AD:21:B8:B5:AB:5E:69:05:5C:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/519ca85a-ce70-3677-9d25-ddec94d10b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ed:a9:69:b0:2c:28:46:cc:89:e6:a3:97:1d:09:62:38:f5:
         76:f4:d1:cc:44:fa:60:5e:d7:96:11:3f:1e:3a:74:5d:6f:44:
         ae:3d:ff:9e:c7:b0:53:a0:88:38:82:c3:57:a3:82:1b:db:a5:
         2d:6b:8a:9b:2f:38:43:7b:6d:f2:cd:00:67:a6:b4:5e:85:8b:
         bf:11:5c:77:96:e4:4f:d8:d4:09:66:68:4c:7a:18:09:3c:c7:
         6a:13:98:ea:65:e9:f2:27:3b:b8:b5:35:32:30:91:e7:14:0a:
         5d:d7:32:6d:c2:f6:8f:04:29:38:8f:17:1b:4a:3e:a8:b2:3b:
         b9:15:4f:a6:6e:f1:16:0b:97:75:54:3b:0d:e3:f1:4b:e1:26:
         72:2b:95:c9:65:c4:f0:00:0f:1b:89:6a:53:15:78:23:d7:8e:
         49:d1:a8:76:26:1d:83:fe:89:39:23:43:0a:f7:a8:c1:d5:19:
         83:bf:8c:4b:07:d6:3f:7d:77:97:37:bc:89:ee:c5:ec:56:85:
         81:d8:78:51:4f:02:90:7c:d6:e2:02:66:ab:bd:3f:1f:44:38:
         1e:8a:28:52:35:cd:26:c4:ed:e8:90:36:be:b4:67:9b:ba:7c:
         61:a4:73:36:09:fb:2d:c9:0e:e5:f2:93:15:15:c8:5a:f9:92:
         cf:91:23:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:39 2024 by rpki-client on console-ams.rpki-client.org