Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17f4ccf2-d68d-30b7-923e-9f94e6d91df0.roa
File:                     17f4ccf2-d68d-30b7-923e-9f94e6d91df0.roa (raw, json)
Hash identifier:          418truiDAkB+PbptWEl1J6cCdAsNNVom+ktoPh0EoTs=
Subject key identifier:   CB:8A:99:06:B8:14:34:82:34:93:E3:C7:F0:EE:52:3A:DE:43:60:12
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847A30C08BF85C59719ED62B180
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17f4ccf2-d68d-30b7-923e-9f94e6d91df0.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     36630
IP address blocks:        2620:74:2c::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0c:08:bf:85:c5:97:19:ed:62:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=0ac03516-d43d-4cfb-871e-e3d23db57369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:56:7f:84:f4:f0:77:24:38:6d:b0:c0:c2:08:
                    02:ee:9b:bd:a6:c8:3b:1a:c9:bb:b4:8b:a1:d6:74:
                    a8:29:30:26:50:12:9b:7f:50:f6:85:3f:a0:aa:50:
                    e5:b6:fb:37:32:79:ce:de:2b:0c:43:7b:0d:06:78:
                    b3:bd:98:68:7f:f6:ff:ff:df:28:e8:cf:b5:c3:79:
                    73:c4:be:db:70:f0:94:97:b3:09:b1:c7:9f:36:89:
                    c5:c9:48:1c:b8:a0:06:9f:9d:65:9f:87:23:fb:b6:
                    a6:0a:a0:cb:4a:c0:72:f4:11:ea:18:b6:f4:41:3c:
                    b4:e6:1e:f7:cb:ca:ae:00:03:6c:0b:52:26:48:25:
                    5e:5d:98:3b:9c:8f:54:f8:02:bc:bf:1c:77:e4:c9:
                    f8:67:ef:43:18:c9:bc:5c:f1:5a:68:3f:80:c3:26:
                    21:47:27:55:4c:92:41:c3:33:97:dc:38:d1:90:0d:
                    2a:ee:e1:1f:af:03:e6:4a:cf:1e:f4:d3:79:33:30:
                    7b:97:e8:d6:8f:da:ba:df:e0:90:5e:3f:a4:29:2d:
                    49:54:88:78:6f:43:e2:c3:63:b7:e6:97:9b:37:6f:
                    fa:d4:74:a9:c9:51:f2:d5:aa:86:c5:7c:76:29:47:
                    35:f2:f4:93:36:02:96:5b:21:43:60:25:7b:ef:99:
                    a7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8A:99:06:B8:14:34:82:34:93:E3:C7:F0:EE:52:3A:DE:43:60:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17f4ccf2-d68d-30b7-923e-9f94e6d91df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:94:6d:c6:5d:60:84:66:a4:2e:2a:d9:a2:62:63:34:49:b8:
         bd:28:e8:ad:df:35:83:6f:fa:d3:97:66:8f:8e:65:7c:24:59:
         db:54:1c:cb:86:b9:c7:dc:dd:bd:a7:5f:90:cd:73:e2:22:16:
         8e:2e:9d:3f:e0:d7:bc:62:1a:0d:d2:e8:2e:f1:27:f0:d3:da:
         3c:05:2a:bc:6c:47:ac:8e:be:3c:7b:8f:ca:39:01:fc:92:a4:
         3e:b9:3d:7e:60:77:72:ec:b8:82:c3:af:10:99:a3:2b:62:2f:
         9e:25:5a:30:e8:cf:b6:46:01:d1:21:f3:ba:4c:d8:6c:55:b4:
         98:a7:a6:5c:d2:94:f5:d5:d3:4a:1e:85:f9:ea:d0:52:55:a6:
         9a:6d:ea:8c:4a:af:d0:5b:da:ac:f3:5b:7d:c5:a7:3e:97:e3:
         c5:f2:60:2b:75:b2:d2:44:96:02:f6:89:e8:c4:6a:0f:e8:fe:
         6d:3a:8e:e7:cd:7b:a6:82:39:22:49:4a:cb:5b:7c:2c:c9:2a:
         55:e9:d4:16:6c:c8:c2:e5:95:93:4f:5d:36:c8:a7:b5:c8:97:
         66:b2:00:3a:14:e0:67:5a:d8:da:c4:9d:d1:ac:5e:3c:9e:4b:
         8d:78:46:e3:c1:87:4f:76:8b:45:4f:ef:f7:6c:6a:4e:4b:95:
         5b:9e:02:58
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEejDAi/hcWXGe1isYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk
MGFjMDM1MTYtZDQzZC00Y2ZiLTg3MWUtZTNkMjNkYjU3MzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFZ/hPTwdyQ4bbDAwggC7pu9psg7Gsm7tIuh
1nSoKTAmUBKbf1D2hT+gqlDltvs3MnnO3isMQ3sNBnizvZhof/b//98o6M+1w3lz
xL7bcPCUl7MJscefNonFyUgcuKAGn51ln4cj+7amCqDLSsBy9BHqGLb0QTy05h73
y8quAANsC1ImSCVeXZg7nI9U+AK8vxx35Mn4Z+9DGMm8XPFaaD+AwyYhRydVTJJB
wzOX3DjRkA0q7uEfrwPmSs8e9NN5MzB7l+jWj9q63+CQXj+kKS1JVIh4b0Piw2O3
5pebN2/61HSpyVHy1aqGxXx2KUc18vSTNgKWWyFDYCV775mncQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMuKmQa4FDSCNJPjx/DuUjreQ2ASMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTdmNGNjZjItZDY4ZC0z
MGI3LTkyM2UtOWY5NGU2ZDkxZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAelG3GXWCEZqQuKtmiYmM0Sbi9KOit3zWDb/rT
l2aPjmV8JFnbVBzLhrnH3N29p1+QzXPiIhaOLp0/4Ne8YhoN0ugu8Sfw09o8BSq8
bEesjr48e4/KOQH8kqQ+uT1+YHdy7LiCw68QmaMrYi+eJVow6M+2RgHRIfO6TNhs
VbSYp6Zc0pT11dNKHoX56tBSVaaabeqMSq/QW9qs81t9xac+l+PF8mArdbLSRJYC
9onoxGoP6P5tOo7nzXumgjkiSUrLW3wsySpV6dQWbMjC5ZWTT102yKe1yJdmsgA6
FOBnWtjaxJ3RrF48nkuNeEbjwYdPdotFT+/3bGpOS5VbngJY
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:07 2024 by rpki-client on console-ams.rpki-client.org