Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2d072393-1135-3465-91b9-5c7c03a633a4.roa
File:                     2d072393-1135-3465-91b9-5c7c03a633a4.roa (raw, json)
Hash identifier:          h41npnKpIAKJstXgXz6QI6M6tT501QQQWL+9Zk4yHYo=
Subject key identifier:   1D:E2:3F:6B:41:4F:98:D9:6A:1E:9E:3D:3A:01:41:BA:B0:EC:27:E9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A105AF98B0AD8144144DD8
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2d072393-1135-3465-91b9-5c7c03a633a4.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        2600:6c90::/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:05:af:98:b0:ad:81:44:14:4d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=f257d6c3-6244-4218-9dce-5e2f2f78906f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:4d:9c:17:fb:8f:96:82:6a:2d:89:a2:78:
                    1c:3d:8a:10:4b:cd:75:93:da:da:b1:f8:54:bf:e6:
                    5c:cd:4d:1b:94:02:18:c1:e3:bc:66:05:9a:97:70:
                    a0:9c:ca:df:48:89:9d:14:cd:e2:68:84:6b:9e:a9:
                    86:72:c9:ee:58:98:2a:a8:5e:45:a0:c3:77:92:cc:
                    d4:29:1e:7e:9a:de:39:0f:7e:04:3c:b6:a5:f7:84:
                    98:fa:df:57:29:9b:e0:52:25:32:14:92:ab:35:6f:
                    50:f4:37:d6:4a:f4:8c:82:ef:47:f1:eb:3d:0d:23:
                    12:e0:d6:e8:30:8d:9f:ac:39:d3:bd:9f:b5:2c:fd:
                    7e:d8:31:62:6e:71:f0:b5:66:d4:78:cc:b7:06:b8:
                    88:91:87:c0:9c:5c:ce:dd:28:e7:1f:46:69:97:0f:
                    e2:2f:38:c3:d0:40:45:70:ca:ff:b4:d5:9c:7d:51:
                    42:15:aa:e6:d4:2d:30:3c:68:e2:e6:48:ea:18:96:
                    c8:c6:67:84:07:1f:91:de:bf:60:40:b8:49:9d:88:
                    4e:44:d2:d9:a4:2c:5c:57:ac:f5:c9:1b:e5:34:f7:
                    7e:73:38:c7:5c:15:20:82:95:36:19:e4:3d:57:db:
                    33:46:40:64:13:5c:be:ca:4e:c9:0b:5e:cb:b7:42:
                    24:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E2:3F:6B:41:4F:98:D9:6A:1E:9E:3D:3A:01:41:BA:B0:EC:27:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2d072393-1135-3465-91b9-5c7c03a633a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c90::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9a:02:cc:ca:08:89:34:c5:bc:54:d8:42:92:68:5b:38:03:
         38:45:dd:69:ae:1d:e7:7b:7b:bb:bb:43:65:3f:74:f9:70:eb:
         02:1f:21:77:05:91:25:ca:e9:16:01:2b:3d:f6:bc:52:55:c6:
         9a:dc:c6:3b:4b:c7:68:cb:c5:8b:2a:9d:97:fc:2e:ff:89:83:
         03:20:c6:92:6e:53:95:8b:8e:c9:48:79:85:9f:72:96:51:85:
         3d:4e:19:eb:8e:3d:e2:da:7c:1a:06:fd:e0:27:50:2b:28:94:
         0f:d3:c8:d2:12:ac:86:45:d4:2d:01:57:11:75:6b:9a:d5:17:
         7d:44:7d:f4:99:9f:f0:87:c0:15:38:a3:5e:f7:b3:42:0a:5f:
         17:1e:11:a1:b6:f8:a9:e1:f4:c2:20:72:83:8a:ae:af:57:39:
         c3:f6:68:ef:9c:12:58:21:d6:c1:4e:8b:a0:9f:bf:9e:f8:30:
         46:b0:a5:68:75:21:5d:e2:36:bd:11:54:61:42:ff:d1:95:6e:
         69:b3:96:96:f6:9d:5c:a5:3e:54:66:c1:9c:5a:60:22:4f:73:
         2f:82:a4:08:75:7e:35:83:ca:82:66:12:8d:1f:c6:d9:36:2e:
         d7:fc:91:d1:9e:0c:a3:40:f2:06:96:76:f7:36:18:dc:1a:d7:
         19:b5:0d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:04 2024 by rpki-client on console-fra.rpki-client.org