Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b756bd6-ba86-3b7f-9f70-9b46222363ea.roa
File:                     3b756bd6-ba86-3b7f-9f70-9b46222363ea.roa (raw, json)
Hash identifier:          9/TPjdZDhSOHqSnMxN+FPdGHtW5Pi/Bv2Z7kK6Uo7zI=
Subject key identifier:   42:A6:98:49:B4:72:CC:AF:E8:81:08:5E:5F:08:B4:8C:3C:00:DA:3F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285845A41D86566AF674ACE93F9340
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b756bd6-ba86-3b7f-9f70-9b46222363ea.roa
Signing time:             Tue 23 Apr 2024 12:38:08 +0000
ROA not before:           Tue 23 Apr 2024 12:38:08 +0000
ROA not after:            Mon 22 Jul 2024 12:38:08 +0000
asID:                     7342
IP address blocks:        2620:74:46::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:1d:86:56:6a:f6:74:ac:e9:3f:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 23 12:38:08 2024 GMT
            Not After : Jul 22 12:38:08 2024 GMT
        Subject: CN=870226f7-9d2f-4c74-b8e4-b11c8e0b49c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:8f:71:cf:c5:19:0d:bf:8c:f8:46:e4:6d:
                    c3:e1:ba:5b:1e:15:bc:8f:51:81:bb:54:a4:cd:9b:
                    a3:25:eb:03:8c:6d:ce:55:6e:3a:88:95:3d:2c:26:
                    0b:19:86:5e:ea:2d:30:91:c9:33:6d:38:ef:33:7c:
                    1c:ea:a9:71:f2:22:da:44:0c:af:1b:a4:75:26:21:
                    eb:66:20:79:ad:09:eb:1d:ad:4a:98:35:8d:58:4e:
                    5e:2c:f3:c4:70:70:1a:20:d2:f6:53:d7:a2:f3:8b:
                    2d:ff:91:41:62:5c:a5:99:7b:9a:c3:42:a5:65:b4:
                    4f:8d:a0:09:d1:cf:b4:2a:c8:55:4f:41:6a:e0:ae:
                    7b:86:ab:d4:a4:ff:7e:ed:1e:70:9c:44:6d:dd:ef:
                    1b:4d:8c:83:78:97:66:d8:85:ea:40:c6:17:16:45:
                    6f:e9:ad:11:fb:f2:f0:55:b2:ad:b7:88:ec:04:62:
                    cb:ed:d7:d4:2a:73:7b:c7:44:81:35:41:06:b5:50:
                    97:79:84:8a:64:a9:94:16:f6:77:6a:1d:23:fe:be:
                    f6:ce:15:90:2f:18:07:ed:c3:5b:19:68:65:94:11:
                    fa:73:a6:e2:64:36:ed:02:d0:61:7e:52:da:08:ca:
                    37:1c:b5:45:b0:cb:11:48:72:21:71:23:5e:64:0c:
                    f4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A6:98:49:B4:72:CC:AF:E8:81:08:5E:5F:08:B4:8C:3C:00:DA:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b756bd6-ba86-3b7f-9f70-9b46222363ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:46::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:cb:b7:be:dd:d3:d3:03:e7:37:db:d9:85:75:5f:56:ec:ff:
         73:0f:cb:65:ee:b1:89:cb:8b:8b:d1:8d:b9:d9:a9:af:bb:44:
         e9:db:5c:3e:0d:87:df:72:58:7e:d4:90:7e:0a:4c:d7:8e:07:
         60:16:dd:72:43:8d:30:85:71:64:1c:8f:4d:9b:f2:37:0c:4c:
         41:21:18:12:6d:43:72:f4:f4:ed:d4:39:f6:78:f0:9d:8f:5e:
         f5:69:e5:ea:70:99:93:be:fc:d6:32:fc:71:65:79:18:10:f8:
         f3:12:3a:36:ca:c9:2a:f6:0b:fa:cb:85:c6:e1:0e:f6:6a:a6:
         92:31:c3:bd:76:aa:9b:a7:ad:d2:91:8d:24:70:65:84:aa:3d:
         90:53:17:a0:2b:a3:9d:ab:79:50:c2:78:7a:d4:3e:1d:ad:84:
         cf:30:7b:30:5b:32:c7:84:a8:5d:76:e1:75:1c:27:5f:cf:b4:
         82:47:15:f9:10:0b:01:b7:83:fb:8c:f6:87:28:28:f5:2b:62:
         ce:be:cb:22:13:61:a2:cf:0f:7f:11:ca:54:e2:3c:dc:72:94:
         5b:2c:32:48:ba:25:7f:0a:7d:ee:17:fd:d8:58:33:10:89:1b:
         fc:4a:29:bd:4c:da:8d:59:b9:8a:85:cf:cd:04:4c:9f:db:54:
         12:4a:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:20:24 2024 by rpki-client on console-ams.rpki-client.org