Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2ac0a039-797e-31c7-b8e7-fc18ce8afb57.roa
File:                     2ac0a039-797e-31c7-b8e7-fc18ce8afb57.roa (raw, json)
Hash identifier:          oP5mXg0bYGYmy+GzGUePw542IQBoyuRwO8XrCl4JMgg=
Subject key identifier:   20:10:8D:D6:95:EE:7A:71:3A:AB:FB:D6:F9:FB:07:5E:BB:BE:93:04
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A14C50DBA2AA947403EB40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2ac0a039-797e-31c7-b8e7-fc18ce8afb57.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        2602:107:4710::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:4c:50:db:a2:aa:94:74:03:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=31070799-4dc4-46a9-bec9-b11832ec1f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:92:15:e9:a6:43:32:55:01:11:64:42:9b:
                    29:9f:d5:67:ea:cb:4a:de:bc:5c:e0:b8:10:57:1c:
                    ca:1f:de:15:56:c1:d6:16:df:58:0c:f0:9c:d4:b3:
                    e8:35:25:3e:0d:70:21:a9:40:ad:31:c3:ce:76:95:
                    c1:ac:72:14:f5:ee:56:ca:09:f9:eb:2c:30:35:5d:
                    df:ef:a3:1d:13:6e:03:54:00:fe:cb:c2:7f:5f:3f:
                    16:55:1c:ea:80:ae:62:85:db:f4:3d:a9:83:a0:e7:
                    c4:bc:2c:73:d7:de:04:da:b2:a6:ba:8a:9b:01:01:
                    f6:45:1e:8f:ff:2b:33:9d:2a:b2:2c:52:bf:bc:5a:
                    47:04:6e:e5:8a:25:ce:c5:1e:04:25:81:1d:d1:7d:
                    bb:2d:44:86:bc:bd:eb:13:1e:91:f8:38:ad:aa:32:
                    da:05:8b:8e:5f:95:04:dd:cb:51:4a:61:60:8d:e6:
                    46:36:b9:cc:8c:f2:01:5e:54:34:b5:06:eb:71:28:
                    ec:bc:b7:64:e3:84:6a:f2:20:ec:9c:1a:6a:d2:ec:
                    c6:fe:e4:7a:83:2d:72:c5:e5:cb:30:67:92:75:d0:
                    08:c5:57:f8:7c:99:4e:0c:2a:ba:08:7f:ec:c3:ed:
                    33:65:3b:d6:99:d9:20:97:ec:e2:be:82:52:98:90:
                    0e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:10:8D:D6:95:EE:7A:71:3A:AB:FB:D6:F9:FB:07:5E:BB:BE:93:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2ac0a039-797e-31c7-b8e7-fc18ce8afb57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:4710::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:25:1a:73:07:ab:dd:83:cb:84:33:41:6a:a1:80:07:a8:6b:
         2b:1d:10:60:e5:bd:0b:96:74:b8:2d:01:6e:27:b5:68:20:3f:
         e4:4f:a5:da:43:14:fa:0d:0e:c3:c7:f4:ba:ed:0f:3b:8c:c0:
         cc:3e:a8:12:d2:60:70:86:8f:a9:e1:60:fb:a4:76:ac:98:18:
         db:82:54:41:5a:51:e2:4c:2f:e5:a7:24:43:41:97:e1:2e:38:
         dc:d4:92:03:9f:f2:61:3d:67:ff:64:5e:89:64:03:db:1c:07:
         66:a0:12:b1:8f:16:38:fb:de:e4:8d:f1:42:4c:cc:7a:34:51:
         1a:e6:26:d8:cb:f1:1b:b2:7c:a0:a2:67:ab:5c:90:a7:b7:49:
         2d:91:81:b9:d9:3c:70:0c:a6:48:68:ea:80:99:8e:a4:1a:0d:
         37:54:52:d9:64:99:90:ed:cd:dd:88:97:96:60:88:e6:86:05:
         b0:7c:cf:48:95:52:64:ed:25:01:45:bb:d9:63:b8:87:ba:1c:
         ce:9f:09:cf:51:8b:29:35:7d:3e:ae:21:da:5a:98:c2:b2:18:
         40:81:03:a1:ee:d9:7c:ab:5b:27:5f:11:62:3d:f0:e0:19:ef:
         e1:03:47:e7:54:6c:71:ee:51:dd:96:4f:05:a4:9b:80:04:2e:
         e0:9d:20:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:04 2024 by rpki-client on console-fra.rpki-client.org