Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cd4e93c1-d02e-3d50-a0e0-38bfda3d98bb.roa
File:                     cd4e93c1-d02e-3d50-a0e0-38bfda3d98bb.roa (raw, json)
Hash identifier:          nj7SzlNtB8bFnQJE8dhsO0HkrImYy3BoSgn9waCARrY=
Subject key identifier:   17:75:CF:28:DF:AC:D1:D1:79:41:FE:B1:D3:12:60:14:1D:5A:D1:D3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C2E85B2CE3BD9D05D9340
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cd4e93c1-d02e-3d50-a0e0-38bfda3d98bb.roa
Signing time:             Tue 24 Sep 2024 16:26:27 +0000
ROA not before:           Tue 24 Sep 2024 16:26:27 +0000
ROA not after:            Mon 23 Dec 2024 17:26:27 +0000
asID:                     397231
IP address blocks:        2620:74:1c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:2e:85:b2:ce:3b:d9:d0:5d:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:27 2024 GMT
            Not After : Dec 23 17:26:27 2024 GMT
        Subject: CN=9377764b-8bb7-4f94-92e0-aa664367aaed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:87:01:bd:74:51:e2:06:7f:e0:74:4d:11:8f:
                    a9:c1:9e:b9:fe:ab:53:57:2e:e3:5f:f4:9a:31:f7:
                    cd:6a:44:19:11:3a:9d:22:38:ff:6e:49:e2:7d:8b:
                    75:2e:1f:b1:c0:11:27:70:32:5e:64:a6:f9:af:48:
                    85:08:10:24:de:39:5f:8d:b9:4b:fc:6f:27:16:c8:
                    88:46:f3:9f:02:ad:20:bf:b2:06:0c:9c:00:cb:9e:
                    f4:ba:9a:59:7b:42:e2:f3:52:40:71:f5:be:a3:2f:
                    61:cb:ac:33:50:bd:94:34:78:a4:06:8d:80:27:91:
                    bb:c4:2a:95:c4:97:81:be:c1:94:52:c6:7b:93:6b:
                    54:73:3d:36:99:5c:46:81:76:9a:13:85:5e:82:bf:
                    38:b6:27:ce:4a:60:41:d2:e8:1b:d7:5c:2e:20:66:
                    a7:f7:9b:a9:f4:16:2d:5f:9b:71:c7:2d:66:03:fc:
                    1d:b9:8f:14:ea:ce:25:28:73:de:98:64:c7:eb:d9:
                    99:2b:7e:19:19:e0:76:50:55:56:8f:5f:72:8e:0a:
                    70:72:d1:4d:50:b4:42:e8:5e:70:f8:0a:bc:77:fd:
                    13:ba:8b:76:11:aa:50:09:59:eb:c5:cf:e6:7e:50:
                    51:c0:0a:06:0e:af:3c:72:5c:4b:ec:9b:e2:62:8b:
                    d0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:75:CF:28:DF:AC:D1:D1:79:41:FE:B1:D3:12:60:14:1D:5A:D1:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cd4e93c1-d02e-3d50-a0e0-38bfda3d98bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:8b:c2:0f:d0:5b:f5:16:bc:25:5a:c7:77:d5:59:70:a2:8e:
         16:c1:6c:2c:7f:0f:11:0c:ac:3e:64:ca:3d:9f:76:b3:cc:48:
         de:7b:2a:66:7d:11:bd:8d:fc:9d:02:e3:1d:b2:12:88:d1:21:
         bc:7c:93:92:b2:6a:3f:8a:dc:91:35:0a:29:b0:ee:81:85:28:
         1d:50:e7:6a:61:6d:9f:74:84:19:18:75:82:e2:8f:e1:a2:c3:
         70:05:71:2a:e5:38:1b:a3:04:39:c7:bd:d7:1a:a7:c1:bd:b8:
         f3:61:5f:e9:d2:b9:46:32:65:9a:30:31:55:8d:70:2d:6e:68:
         80:5e:b8:27:21:b6:d1:94:cc:c6:56:f6:1a:c9:24:3c:fe:08:
         1a:9b:8c:3b:31:6c:41:73:a3:12:63:1c:27:6c:17:42:f7:1a:
         d3:17:a6:74:69:eb:36:42:c8:7a:26:ce:eb:0e:98:f9:c5:f2:
         78:81:c9:4f:59:89:0a:95:90:36:0f:d3:d8:2a:ad:25:1f:0e:
         6c:2a:8f:52:ee:0c:12:24:a4:1a:47:35:99:25:68:e6:34:42:
         2d:93:85:61:ab:43:b5:a3:04:b9:11:f3:f8:0e:5d:19:06:b5:
         e9:55:f6:5b:be:ff:f1:2a:dd:cc:75:5f:9a:a7:3c:51:bf:d3:
         26:c6:f5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:15 2024 by rpki-client on console-fra.rpki-client.org