Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4627ebd9-5b23-32a2-97ad-0d5fa546f740.roa
File:                     4627ebd9-5b23-32a2-97ad-0d5fa546f740.roa (raw, json)
Hash identifier:          xkDkzPozpPcJ8eN2/Ba9EmZzVePPJtLJAyExQVxFT2Q=
Subject key identifier:   3A:A2:03:1C:D4:49:C2:CB:0B:8F:41:A1:3C:C1:7D:4F:62:7B:99:70
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285847E8F4C60B19D6E53D97F1BEC8
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4627ebd9-5b23-32a2-97ad-0d5fa546f740.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     20115
IP address blocks:        2600:6c7f:9420::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:c6:0b:19:d6:e5:3d:97:f1:be:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=5aeb5683-5123-4068-888b-5678366bbdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a2:81:c0:22:b4:ee:cf:51:45:78:f3:6a:c1:
                    8d:1a:9a:9a:f2:ff:da:47:20:94:bb:6c:64:9d:c0:
                    b8:4f:f0:8d:b5:9a:30:fc:9b:87:35:88:b8:ae:47:
                    8a:33:47:eb:d5:c7:b2:01:48:cf:53:89:b8:85:28:
                    10:e3:52:38:6b:ef:ed:08:4a:5f:df:b7:d6:f8:e7:
                    c4:8a:a3:25:c3:1a:7a:0c:6b:c8:ad:4f:67:bd:5a:
                    fe:a8:6a:9a:7a:d3:f6:c2:d3:4d:5e:0c:e9:95:89:
                    f1:e0:6d:a8:83:bf:4c:7a:5b:80:81:5e:c6:41:f6:
                    f5:7e:d6:03:1f:a4:ae:8e:c3:8e:3c:75:49:d7:ff:
                    5e:92:98:58:5b:26:24:83:75:e9:c0:d1:8f:e7:ce:
                    e4:1c:52:a9:01:00:e1:3f:46:8b:37:85:a0:3d:4b:
                    1c:2c:70:01:88:02:05:91:65:6d:03:e5:a6:20:5e:
                    64:f5:e6:70:48:03:39:10:f6:f1:6a:d4:eb:5e:4d:
                    d5:68:29:3a:5a:dc:8c:7f:57:b9:9e:ab:7a:b2:b0:
                    19:cb:bc:82:21:f6:e4:39:45:a8:ee:7b:96:2b:11:
                    01:64:e6:62:1f:a4:6e:e5:cc:23:0e:80:52:2e:7d:
                    0d:e5:b2:e7:37:6d:6f:66:a9:2d:c7:69:e5:29:a4:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A2:03:1C:D4:49:C2:CB:0B:8F:41:A1:3C:C1:7D:4F:62:7B:99:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4627ebd9-5b23-32a2-97ad-0d5fa546f740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c7f:9420::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:8d:f2:be:75:b4:97:e0:07:aa:d0:c5:df:29:8f:75:83:76:
         83:5f:26:af:cf:b8:b5:ed:3c:b3:ac:3e:2b:20:86:17:ef:e9:
         d4:bc:3b:8e:e2:44:12:1b:b2:21:99:84:07:a8:e3:6f:89:37:
         a0:fd:b2:c9:01:c3:86:8c:cb:ea:3b:21:e6:a3:5b:4b:f5:e5:
         62:aa:6b:79:e4:30:f2:e6:b3:1c:6d:8f:d6:a5:79:c1:0e:f4:
         28:25:b8:b5:a7:61:66:7e:73:73:40:a8:92:b1:4b:83:aa:5b:
         d8:5e:62:d1:02:7d:32:0c:07:29:10:98:6a:40:c7:2f:24:9a:
         2c:b1:24:7d:c5:95:91:ab:de:c8:59:88:53:1b:39:bd:5c:5c:
         6b:fe:21:77:76:c0:79:48:7d:d4:26:fb:a7:f1:f3:22:bf:dd:
         83:9d:4f:be:24:de:0c:4c:c0:c1:f0:da:f3:4f:65:f9:1e:8c:
         bc:84:1d:46:05:f9:62:bd:7b:a0:ff:eb:3d:c8:94:48:dd:78:
         7e:99:e1:80:44:41:db:a2:4e:97:71:52:56:d0:59:d8:b1:bf:
         a5:b0:59:24:77:98:4f:9f:03:fa:76:50:e2:eb:06:25:87:fe:
         1e:2e:2b:37:ad:0d:3c:07:5f:7e:75:ea:e3:00:c4:62:a5:74:
         97:d9:58:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:07 2024 by rpki-client on console-fra.rpki-client.org