Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2578eeb8-b64a-389c-8ff9-957a1652926d.roa
File:                     2578eeb8-b64a-389c-8ff9-957a1652926d.roa (raw, json)
Hash identifier:          vGR3tvorLOW5nDwCyaaiY7rAO/8gKCbh/7oCVE4+60g=
Subject key identifier:   D2:87:91:9F:87:CE:E2:70:3F:C7:09:AE:73:C2:27:88:E1:E8:3C:AA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584738F5F29CE50AF779059EC700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2578eeb8-b64a-389c-8ff9-957a1652926d.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     396617
IP address blocks:        2620:74:21::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:f2:9c:e5:0a:f7:79:05:9e:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=ed54691a-ec9b-478b-ab26-cdaedfc94177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:21:89:0f:86:9a:6e:d5:70:4e:97:8c:1b:26:
                    e4:84:82:9b:ee:03:ca:f8:b3:29:4d:16:c6:85:c0:
                    7c:f6:ce:06:d6:c2:0e:72:41:cc:78:29:86:b6:29:
                    73:eb:dd:0b:c8:56:e4:df:67:77:a3:4e:82:1f:33:
                    c9:76:22:de:73:51:64:4b:56:60:4c:e4:be:ba:b6:
                    fb:cc:40:ca:d9:fd:3d:95:cd:69:88:35:28:92:ab:
                    0a:1a:a4:5b:12:ff:21:96:4e:95:bb:0a:36:c3:ad:
                    dc:a7:c1:fa:fe:52:1c:25:c9:1b:1a:9d:fb:82:16:
                    88:7e:a3:4c:c6:2f:4c:75:b5:c1:86:ea:14:fc:85:
                    99:b2:02:74:89:3c:9d:db:8f:dc:f2:6a:c8:4a:6a:
                    2e:41:9f:ab:da:ca:82:b0:ff:0f:f0:86:21:88:9d:
                    67:a3:08:84:f7:e1:a5:af:77:fe:f7:66:28:95:b4:
                    2c:f5:98:c2:4e:c8:6e:57:ab:0f:99:95:a6:43:cc:
                    f1:5b:ac:08:79:65:8e:6f:41:66:9b:ff:f9:9b:c1:
                    4f:74:69:10:13:f4:50:e9:0e:73:11:4a:4f:83:41:
                    85:c2:08:13:31:6b:ee:88:8b:03:2f:e0:8e:0c:f9:
                    93:a4:57:a9:97:ea:48:75:ef:92:2d:60:cf:00:ad:
                    c5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:87:91:9F:87:CE:E2:70:3F:C7:09:AE:73:C2:27:88:E1:E8:3C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2578eeb8-b64a-389c-8ff9-957a1652926d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:7f:c9:10:52:1f:46:4a:ea:ce:59:bc:83:d7:6f:f3:14:24:
         eb:bd:e3:31:2d:16:4d:9a:98:60:4c:6d:79:c4:93:12:e8:13:
         cf:85:9e:76:fa:f3:92:30:2f:4f:53:3d:13:9c:05:52:99:eb:
         4a:2c:fb:11:55:d1:ee:20:3e:9c:6b:55:8e:04:db:2d:2a:7c:
         e3:89:4b:05:bb:9b:fc:e4:4c:fe:51:4e:5a:82:5a:ce:81:6e:
         26:5a:98:42:be:00:4e:64:01:4d:9d:92:f0:19:62:e6:78:c5:
         c1:af:8f:88:89:56:c5:e4:99:31:81:98:51:42:05:63:20:73:
         8d:e1:a3:82:b9:bc:13:bb:27:43:bb:55:70:67:cb:7c:5d:00:
         79:bf:f9:fe:c3:38:dc:65:3a:87:c0:15:d0:14:35:ca:ae:35:
         1e:cd:a1:a6:bb:b4:5d:78:92:14:15:fd:b4:6b:f3:0a:1e:11:
         a0:4b:ce:33:39:c8:fe:bd:5b:84:0f:39:c4:5e:0a:2b:16:ed:
         f6:86:67:0c:e1:ee:90:90:53:f8:42:1f:a3:5a:3e:30:12:7b:
         86:0e:9f:9d:72:5e:a9:2c:67:73:ab:0a:b1:e5:c8:25:e7:49:
         fe:b7:eb:0c:42:02:3a:2c:b2:b9:a4:7f:d8:ba:a2:d5:b8:48:
         00:4d:28:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:09 2024 by rpki-client on console-ams.rpki-client.org