Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/58ff9e0f-4c70-3be4-a64f-c7c43e8fcaa6.roa
File:                     58ff9e0f-4c70-3be4-a64f-c7c43e8fcaa6.roa (raw, json)
Hash identifier:          u7grhwOu8mE2in5STYIGu7G0YFYhcQ4l7x+ERiKYWKE=
Subject key identifier:   07:23:BA:36:11:F5:C7:D6:07:7F:A9:3F:60:A9:FF:D6:A7:EC:10:BE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858472C65E66E7BC1E680272332C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/58ff9e0f-4c70-3be4-a64f-c7c43e8fcaa6.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     0
IP address blocks:        2602:107:2400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:e6:6e:7b:c1:e6:80:27:23:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=e0114e7a-a766-44f8-bd98-21e62a81dbf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ea:f0:d3:08:71:97:c8:26:b5:6d:df:14:3c:
                    28:22:82:34:ea:3b:64:f3:8e:1e:88:28:c9:31:92:
                    fb:56:42:d0:c7:0f:2a:ee:b1:77:61:7c:fd:44:c4:
                    36:3b:ce:fb:c7:fa:aa:8d:cd:12:2d:92:fa:49:b5:
                    47:05:8e:cd:1c:06:51:35:d2:15:7c:6c:c4:02:48:
                    a7:5d:9c:18:cb:35:f2:0f:fb:dc:e8:84:7a:b3:a5:
                    d1:1d:02:8c:fc:3b:88:ad:1e:24:4e:c5:17:2c:ff:
                    af:4b:99:f1:52:03:c3:9b:6f:d8:60:f5:1b:2b:b6:
                    78:2c:72:b6:ac:63:ce:cb:cd:58:4d:68:dc:b4:c9:
                    7f:cd:ed:d4:2c:ae:0c:47:c5:4a:a7:dd:23:df:f9:
                    27:51:bf:cc:fb:6b:98:78:62:5b:08:dc:08:90:98:
                    5b:2d:a8:6e:04:22:d2:07:c7:99:06:d3:d4:4c:df:
                    7c:77:35:41:90:be:1f:e2:be:9f:3a:03:72:65:56:
                    a3:83:c2:29:fa:40:55:95:fe:30:05:b4:e3:fc:8e:
                    1f:34:59:bb:51:55:76:8f:a3:c1:7f:dd:67:0a:22:
                    59:a0:6d:52:b6:9c:84:fe:fa:5e:44:f8:62:bd:0b:
                    b1:37:f3:8d:bb:11:6e:41:47:60:71:49:2e:b1:f9:
                    df:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:23:BA:36:11:F5:C7:D6:07:7F:A9:3F:60:A9:FF:D6:A7:EC:10:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/58ff9e0f-4c70-3be4-a64f-c7c43e8fcaa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:2400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:d5:d7:a0:31:ed:d3:37:da:e1:ab:58:44:33:a6:5e:0e:6b:
         86:a0:3d:95:1e:e1:22:77:bf:88:4c:fd:4e:a3:a3:d6:04:a7:
         54:f1:83:b3:d2:13:1a:54:53:52:e3:ff:27:5a:5f:29:bc:3c:
         54:7a:33:55:43:e0:f8:97:c4:dc:24:8c:cd:22:01:0f:4c:ad:
         14:07:37:4b:59:e4:30:31:3a:6f:eb:b0:e0:a2:a1:14:3a:5a:
         eb:6f:29:b1:4b:49:83:4f:a8:f0:8f:f1:49:27:90:a9:c8:14:
         03:05:29:97:a7:e8:7e:05:67:c3:0e:8c:21:06:cb:3c:19:cd:
         79:34:16:f4:f3:5c:58:06:de:56:89:78:5f:13:00:4c:72:a4:
         56:55:14:b1:69:35:73:9d:d6:2a:3b:e3:09:4e:96:39:15:36:
         1a:5d:33:b0:63:f0:bb:69:9f:27:70:1a:a7:49:3e:a9:b3:c3:
         7c:4c:0f:f4:f4:41:f1:8e:57:9c:e7:ca:fa:91:2d:db:01:35:
         a2:b8:e2:f9:eb:97:39:3e:6f:d8:5d:0a:e9:99:ef:45:04:79:
         bd:58:e0:9d:57:ca:4b:59:fb:87:ca:cf:f0:f3:63:de:a3:2a:
         4d:31:e5:9d:a2:e2:ce:72:28:7c:6f:99:9b:a3:72:25:28:02:
         f7:b7:76:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:14 2024 by rpki-client on console-fra.rpki-client.org