Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0106a4c9-fff9-3e6b-985d-8a9044052333.roa
File:                     0106a4c9-fff9-3e6b-985d-8a9044052333.roa (raw, json)
Hash identifier:          dopIo96YB7jed+fYfOwAtnuBeNeGGJ/FBN5qpDDviw8=
Subject key identifier:   8A:12:58:6F:7F:C8:77:61:F3:8D:43:63:A1:4F:9C:6A:34:02:41:18
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847686B93FC15B3EBAB5FDC12C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0106a4c9-fff9-3e6b-985d-8a9044052333.roa
Signing time:             Wed 02 Oct 2024 13:00:42 +0000
ROA not before:           Wed 02 Oct 2024 13:00:42 +0000
ROA not after:            Tue 31 Dec 2024 14:00:42 +0000
asID:                     7342
IP address blocks:        2620:74:4b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:6b:93:fc:15:b3:eb:ab:5f:dc:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  2 13:00:42 2024 GMT
            Not After : Dec 31 14:00:42 2024 GMT
        Subject: CN=c17df94f-70be-4bd6-b6a5-bf66068c76c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:01:a6:f4:dd:4e:b0:17:e2:b8:36:51:8d:
                    64:bb:cc:fb:3f:65:88:ca:63:b0:27:76:34:b4:7d:
                    66:17:05:9e:06:7f:bb:d6:b2:00:fe:dc:0b:62:a6:
                    20:d1:7c:90:8c:f0:e8:bf:02:6f:6e:7f:50:8c:78:
                    8f:c1:96:2f:bd:31:50:5e:5b:c0:ee:09:6e:50:ed:
                    5c:0b:54:f9:3a:0b:db:49:b4:5f:67:bc:8e:67:5a:
                    5b:38:89:3e:55:6e:ea:d9:27:53:b5:1c:e3:1f:2f:
                    54:2c:ea:52:85:c3:6e:58:9e:25:e7:e5:ec:bb:19:
                    fd:d7:51:5a:ea:90:d9:41:39:c4:5b:c9:8c:28:57:
                    a2:c6:47:b6:96:ce:20:d4:ea:cf:3d:18:c6:c4:e1:
                    72:bf:b4:ee:71:1d:ec:50:f8:c0:ba:2a:8a:35:81:
                    fc:83:0c:51:77:b7:60:79:04:01:e7:0e:f3:8c:dd:
                    2e:83:8e:9b:75:b7:cf:7d:18:95:b3:b8:24:6a:59:
                    f9:f9:c4:4c:d7:a9:3a:9c:23:30:2b:b2:c7:5f:d5:
                    4b:fe:5d:86:41:36:c5:9e:dd:f6:a6:bc:e5:92:1a:
                    fb:09:b7:25:72:41:88:83:a5:9b:35:5b:13:1b:99:
                    d3:b7:9b:af:8f:fa:bc:5e:bf:75:81:f2:b6:e4:b3:
                    27:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:12:58:6F:7F:C8:77:61:F3:8D:43:63:A1:4F:9C:6A:34:02:41:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0106a4c9-fff9-3e6b-985d-8a9044052333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:4b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ac:92:4b:c5:a1:03:dc:55:70:88:db:b1:8b:94:9c:43:2e:
         49:c6:38:8f:f2:3e:9e:1a:89:c1:54:84:89:da:1e:ab:bc:44:
         2b:3d:f0:ae:1d:53:73:53:ce:ea:67:2c:5d:f2:40:3c:c7:6a:
         12:d7:a1:05:42:07:db:36:53:5c:7f:2d:5f:44:f2:ff:47:c6:
         9b:0a:b9:7e:fe:06:b4:02:c8:36:c8:17:12:09:f5:92:00:fc:
         04:01:53:35:f8:fa:f2:88:9d:14:0d:75:45:d2:b4:b4:4d:a7:
         4f:ad:09:2c:18:fe:be:b3:71:42:94:6b:57:fd:4d:94:82:5d:
         c8:d0:01:4f:ef:7f:cb:f7:14:e8:6a:4e:4c:f7:ab:af:d6:8b:
         82:7b:0d:7d:5e:eb:72:46:33:b4:67:31:00:c6:f5:a9:27:73:
         c3:2b:74:6f:e5:f3:84:64:eb:d6:30:5e:09:38:7c:5a:f6:f3:
         aa:ea:5e:13:0b:f5:2f:a5:c8:f4:13:61:c7:37:c6:39:88:04:
         ce:06:a1:5b:f4:78:c8:04:9b:d5:bb:ed:6c:6b:2f:07:8e:71:
         cd:83:17:f8:21:a4:20:e6:c9:d8:d6:a7:bf:e5:e9:2f:8a:09:
         53:61:ea:a1:ba:a1:70:4d:90:f6:40:75:8e:da:e2:0c:80:22:
         74:41:86:25
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdoa5P8FbPrq1/cEsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTAwMjEzMDA0MloXDTI0MTIzMTE0MDA0MlowLzEtMCsGA1UEAxMk
YzE3ZGY5NGYtNzBiZS00YmQ2LWI2YTUtYmY2NjA2OGM3NmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7EBpvTdTrAX4rg2UY1ku8z7P2WIymOwJ3Y0
tH1mFwWeBn+71rIA/twLYqYg0XyQjPDovwJvbn9QjHiPwZYvvTFQXlvA7gluUO1c
C1T5OgvbSbRfZ7yOZ1pbOIk+VW7q2SdTtRzjHy9ULOpShcNuWJ4l5+Xsuxn911Fa
6pDZQTnEW8mMKFeixke2ls4g1OrPPRjGxOFyv7TucR3sUPjAuiqKNYH8gwxRd7dg
eQQB5w7zjN0ug46bdbfPfRiVs7gkaln5+cRM16k6nCMwK7LHX9VL/l2GQTbFnt32
przlkhr7CbclckGIg6WbNVsTG5nTt5uvj/q8Xr91gfK25LMn2wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIoSWG9/yHdh841DY6FPnGo0AkEYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDEwNmE0YzktZmZmOS0z
ZTZiLTk4NWQtOGE5MDQ0MDUyMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHWskkvFoQPcVXCI27GLlJxDLknGOI/yPp4aicFUhInaHqu8RCs9
8K4dU3NTzupnLF3yQDzHahLXoQVCB9s2U1x/LV9E8v9HxpsKuX7+BrQCyDbIFxIJ
9ZIA/AQBUzX4+vKInRQNdUXStLRNp0+tCSwY/r6zcUKUa1f9TZSCXcjQAU/vf8v3
FOhqTkz3q6/Wi4J7DX1e63JGM7RnMQDG9aknc8MrdG/l84Rk69YwXgk4fFr286rq
XhML9S+lyPQTYcc3xjmIBM4GoVv0eMgEm9W77WxrLweOcc2DF/ghpCDmydjWp7/l
6S+KCVNh6qG6oXBNkPZAdY7a4gyAInRBhiU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:28 2024 by rpki-client on console-fra.rpki-client.org