Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a433e7ab-5e99-3495-9719-fa80119b9f97.roa
File:                     a433e7ab-5e99-3495-9719-fa80119b9f97.roa (raw, json)
Hash identifier:          2YxYMB06jlE02FaT6e6Ttsc6Sa7My2ecIKS6jbR/QYE=
Subject key identifier:   6A:31:54:4F:39:E8:04:D6:C6:A4:3B:5E:47:EA:C2:8F:22:56:0D:3F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584774FB99FC153E16280AA431C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a433e7ab-5e99-3495-9719-fa80119b9f97.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     10796
IP address blocks:        2602:107:6400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:99:fc:15:3e:16:28:0a:a4:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=e527b84d-06b7-40eb-81dc-91d2889e10c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:92:05:b0:00:20:4e:26:87:99:ed:d9:64:c6:
                    9d:e1:f5:7f:7b:f6:6b:8c:16:95:27:14:0e:14:2c:
                    0d:58:9e:02:4f:ae:fc:4f:3e:c4:4e:74:18:f0:dd:
                    4c:02:d9:1b:66:9c:0f:ca:3c:41:d2:2a:98:fa:33:
                    a5:7b:c6:0f:c1:8a:70:f8:ec:18:b8:d7:e5:a8:82:
                    dd:08:01:1c:09:c3:47:d8:82:26:31:03:9f:f5:80:
                    8c:e2:3e:b9:13:97:2e:5b:9a:dd:cc:83:be:97:80:
                    22:b5:44:b1:4e:8f:95:20:0c:33:d4:a3:c0:24:26:
                    55:52:94:6b:bf:37:18:1e:cf:be:24:e1:34:db:9b:
                    58:af:a1:de:cf:53:2e:50:42:62:8d:94:bb:88:ce:
                    7d:a3:17:16:af:94:52:0c:88:bc:91:04:c3:c2:81:
                    58:7b:44:e4:25:18:42:2f:fc:10:1e:65:78:6c:29:
                    eb:a5:39:82:2d:aa:cb:e9:dc:4a:50:35:e1:71:6b:
                    62:12:b4:a8:02:f4:ae:a3:f9:b0:63:f3:b8:d3:28:
                    22:84:c5:7d:fe:95:55:86:43:0d:de:f5:d5:f8:54:
                    a3:18:c3:09:0a:58:bf:0d:d2:b6:52:a5:e4:06:a5:
                    55:38:77:11:38:af:d3:58:f6:10:d2:13:b5:38:bd:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:31:54:4F:39:E8:04:D6:C6:A4:3B:5E:47:EA:C2:8F:22:56:0D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a433e7ab-5e99-3495-9719-fa80119b9f97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:6400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:68:00:05:fc:ee:de:3d:ab:d0:d7:9c:a0:a8:8d:15:c4:1a:
         ff:1d:37:b3:2d:9c:7a:f7:a7:51:5b:07:6f:cc:6c:0c:c8:ba:
         e8:49:71:cc:63:ed:3c:f1:73:9f:ba:cc:c9:aa:f1:57:2d:6b:
         55:37:f0:40:5a:3f:d1:ce:37:fd:7a:84:33:14:2f:28:0f:99:
         ad:c0:67:26:2c:20:2d:fb:8c:c5:04:e8:ee:c2:79:f9:1c:1c:
         71:f6:b8:02:92:b7:b2:59:0a:59:22:00:ee:79:8d:3b:18:30:
         46:a7:78:01:85:d8:a7:2a:44:e2:62:5b:8b:53:d3:9d:b6:b9:
         ed:79:5b:3d:60:d6:44:00:bb:8d:d9:d1:10:b5:03:75:03:11:
         b4:03:72:88:dc:82:e8:43:f8:6e:0e:51:02:2a:0c:ef:2b:43:
         8c:40:af:f3:24:4d:11:3f:6c:77:1a:2d:04:30:da:e6:6f:f0:
         ba:6b:62:04:22:3f:17:d1:ea:69:09:45:76:91:16:64:22:dd:
         9a:e1:d5:83:39:b9:b4:c4:d9:d1:35:49:41:fa:66:79:e5:b2:
         08:d9:28:ad:31:ee:57:e1:b5:f6:18:49:5f:1c:e2:a3:0e:7c:
         e3:54:be:20:c6:d2:5d:68:05:2a:f2:64:e9:4b:5c:06:25:56:
         04:42:68:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:16 2024 by rpki-client on console-fra.rpki-client.org