Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7cdfb894-8019-3ed1-9e16-0bdd5b4ca36a.roa
File:                     7cdfb894-8019-3ed1-9e16-0bdd5b4ca36a.roa (raw, json)
Hash identifier:          cHrYimpPvBKPPqj6zwDCBy2Ff2mcg7PeH52/lMM2zLQ=
Subject key identifier:   F5:F9:14:40:A0:88:B6:BC:51:FD:13:72:73:55:23:0E:71:56:9A:ED
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838EC48A79CEC722AB98DED1D00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7cdfb894-8019-3ed1-9e16-0bdd5b4ca36a.roa
Signing time:             Fri 12 Feb 2021 05:00:00 +0000
ROA not before:           Fri 12 Feb 2021 05:00:00 +0000
ROA not after:            Fri 05 Feb 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        2602:10d:c000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ec:48:a7:9c:ec:72:2a:b9:8d:ed:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 12 05:00:00 2021 GMT
            Not After : Feb  5 05:00:00 2027 GMT
        Subject: CN=345adec1-b828-47ac-9b5b-697439280d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:9b:14:e8:df:aa:d0:6b:bc:59:c8:24:68:
                    83:12:cf:cb:20:b7:df:c6:bc:46:50:12:13:dc:d2:
                    07:18:33:ef:e1:06:9f:ed:09:54:f1:51:4f:44:c8:
                    d3:6b:df:be:7c:75:aa:1a:e8:fc:92:38:f9:09:22:
                    d9:e8:50:0d:2c:50:63:fa:bd:74:f4:71:2d:a2:18:
                    a8:14:07:d6:ce:44:2e:53:7d:16:49:9d:9a:30:6f:
                    77:b2:cb:62:62:f0:8d:85:5d:42:9c:39:ff:b5:ac:
                    2a:aa:c0:d2:ba:12:5f:77:06:ef:46:ec:85:a7:1f:
                    63:85:ae:fa:f6:41:a4:d2:5b:33:c9:19:5f:71:f8:
                    72:e5:56:96:2b:d9:cd:7e:bd:87:31:ff:44:3c:28:
                    6e:61:c8:e8:16:f1:28:1b:03:05:8f:2b:af:c4:1f:
                    5e:dd:d8:44:0f:47:a8:ea:69:24:40:52:31:df:ea:
                    1d:01:43:ee:7c:1c:32:8e:e5:4f:38:c2:cd:e7:f7:
                    e5:f5:fe:95:82:c1:0a:46:b8:12:30:7e:1d:27:0f:
                    29:6d:27:10:21:21:73:79:d5:aa:26:f5:62:e4:41:
                    bf:f5:a3:f6:50:ba:a9:28:4c:b3:7c:bb:45:de:f9:
                    f3:9d:b8:a0:72:35:c9:fd:c7:ea:9e:13:41:4c:47:
                    cd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F9:14:40:A0:88:B6:BC:51:FD:13:72:73:55:23:0E:71:56:9A:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7cdfb894-8019-3ed1-9e16-0bdd5b4ca36a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:10d:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:08:9d:53:5a:4e:80:eb:ec:9b:95:e6:c1:2e:a4:41:02:bd:
         1a:e4:07:c6:11:96:f6:5a:2b:e2:9a:57:67:a3:c9:e9:3d:76:
         2f:7e:1a:c4:d2:a6:f4:2c:4c:c8:b6:9c:3a:2b:d3:4a:2c:e3:
         a7:b4:a9:9a:a5:e8:2c:d9:dd:d4:42:a3:b5:de:97:41:58:bd:
         ac:53:50:78:ab:2d:9f:ad:e9:17:6d:ff:d0:f1:a1:1c:0b:27:
         dc:87:bd:8b:d2:75:6b:de:08:8f:6e:5a:36:23:f6:b8:07:99:
         ad:50:1e:0f:a9:b4:74:58:f6:8c:28:e5:90:79:c4:d4:bf:4f:
         b0:22:2e:6e:fb:85:d0:b3:6e:d9:a9:e1:7a:98:83:60:c9:01:
         39:b5:9b:44:d3:a7:c1:da:ec:cc:0f:7b:90:23:37:46:1d:63:
         dd:7d:c8:9f:ac:24:0f:59:73:31:ff:b9:76:03:74:a5:0d:d6:
         fa:74:08:69:5d:1d:a6:7c:75:50:53:80:5c:05:82:1c:c8:e5:
         e8:e2:16:8b:9b:dc:ae:87:ca:45:6d:eb:39:10:e4:16:6c:f7:
         03:59:31:e2:b0:07:fb:a8:4b:ba:e6:f5:3b:a3:28:25:71:5e:
         99:1a:34:62:45:37:fc:c0:b9:5c:d3:af:a9:b3:ea:89:16:0b:
         f2:1d:76:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:12 2024 by rpki-client on console-fra.rpki-client.org