Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4183af75-1938-31f2-89c6-cd66f9b00f0c.roa
File:                     4183af75-1938-31f2-89c6-cd66f9b00f0c.roa (raw, json)
Hash identifier:          F/Mz/8LIna/5KTTs3j7Atde0Ky7vKG/t9kuXI4rOonI=
Subject key identifier:   2A:40:2A:D6:92:5D:52:56:E5:53:93:61:B7:31:E5:C0:90:54:47:38
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858475A76293A42EA04C6284F2600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4183af75-1938-31f2-89c6-cd66f9b00f0c.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     36620
IP address blocks:        2620:74:20::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:29:3a:42:ea:04:c6:28:4f:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=fe0d21dd-499c-480d-835c-deced423359c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a1:d4:f6:6b:42:16:1d:d8:25:5f:27:48:49:
                    59:1a:73:25:f9:05:5d:c6:05:28:d9:82:4d:18:c2:
                    bd:2c:cf:b8:ee:d1:1e:32:1f:46:03:c7:b2:ab:07:
                    bf:b5:8e:6b:09:6b:e3:4a:25:73:d2:5b:5f:7f:a5:
                    60:70:6f:75:59:e1:19:f1:07:bb:ef:68:75:bc:21:
                    99:81:73:af:fd:25:f0:af:a7:38:0b:55:f1:0b:70:
                    6a:e0:f2:28:06:ed:c3:31:73:32:1e:f3:12:4d:5a:
                    73:12:d2:4e:94:dd:ed:38:ca:8f:a8:f4:c3:87:f1:
                    07:d8:ee:79:d4:0a:32:a7:05:9e:a0:14:61:f3:9d:
                    ec:3c:b3:52:82:29:f2:05:d8:a4:e1:1a:26:6e:78:
                    74:7a:70:0a:97:b3:ef:f9:39:16:be:fd:db:b6:92:
                    6e:48:b2:1a:55:96:1c:c1:0d:e5:c8:af:1b:4f:03:
                    16:07:90:05:3a:50:68:1e:e7:f3:b9:e4:ed:de:4a:
                    8f:76:4c:af:6b:11:97:61:3c:83:65:c2:10:b8:64:
                    46:a9:d2:6b:57:01:d6:ae:32:43:e4:e3:db:87:e8:
                    89:fc:fd:c8:08:85:53:66:37:79:11:18:f2:93:38:
                    26:d4:9a:fd:8b:18:07:41:fa:7e:de:94:2b:f7:37:
                    3a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:40:2A:D6:92:5D:52:56:E5:53:93:61:B7:31:E5:C0:90:54:47:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4183af75-1938-31f2-89c6-cd66f9b00f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:0f:d1:1a:75:b7:ed:f5:1b:8b:25:4b:79:d1:a5:d4:e9:fc:
         23:22:f7:90:e8:6c:24:24:9a:e7:9e:5a:f4:d3:fb:50:c2:51:
         9d:72:7b:27:75:99:80:d3:85:e9:bd:47:d3:fe:ce:a8:62:f6:
         6c:3e:84:f3:b1:42:df:50:8b:7b:0d:1f:61:3b:5c:01:45:09:
         82:cb:be:58:b0:51:81:a9:12:ad:de:9b:83:82:a1:34:08:8f:
         b4:25:c4:f8:11:d4:ef:65:22:30:15:ed:4a:99:88:c0:08:f9:
         7b:6d:88:9a:05:6c:48:b0:ce:03:7f:bb:d0:8f:f1:41:1f:ac:
         91:eb:b3:b9:41:31:8c:fd:59:ff:69:5d:43:ab:d3:db:90:91:
         e9:a7:00:ee:dd:1d:43:c2:a0:2b:95:f0:f0:ee:45:f0:96:9e:
         2f:32:08:48:de:ad:83:9e:e5:bc:8f:d3:6e:47:3a:d3:95:4a:
         48:c5:26:fc:5d:24:2b:04:16:b9:b3:3c:86:3b:21:36:6c:7a:
         2f:0b:af:e1:65:83:71:7a:91:0c:20:57:f1:14:d0:84:0d:bd:
         d4:8b:67:11:38:1e:33:05:05:8f:bf:55:11:18:ad:e6:63:87:
         b6:76:7a:51:91:0a:9d:1f:33:59:e0:18:ab:66:9d:88:0e:00:
         18:e9:26:3f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdadik6QuoExihPJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk
ZmUwZDIxZGQtNDk5Yy00ODBkLTgzNWMtZGVjZWQ0MjMzNTljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaHU9mtCFh3YJV8nSElZGnMl+QVdxgUo2YJN
GMK9LM+47tEeMh9GA8eyqwe/tY5rCWvjSiVz0ltff6VgcG91WeEZ8Qe772h1vCGZ
gXOv/SXwr6c4C1XxC3Bq4PIoBu3DMXMyHvMSTVpzEtJOlN3tOMqPqPTDh/EH2O55
1AoypwWeoBRh853sPLNSginyBdik4Rombnh0enAKl7Pv+TkWvv3btpJuSLIaVZYc
wQ3lyK8bTwMWB5AFOlBoHufzueTt3kqPdkyvaxGXYTyDZcIQuGRGqdJrVwHWrjJD
5OPbh+iJ/P3ICIVTZjd5ERjykzgm1Jr9ixgHQfp+3pQr9zc6SQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCpAKtaSXVJW5VOTYbcx5cCQVEc4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDE4M2FmNzUtMTkzOC0z
MWYyLTg5YzYtY2Q2NmY5YjAwZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAND9Eadbft9RuLJUt50aXU6fwjIveQ6GwkJJrn
nlr00/tQwlGdcnsndZmA04XpvUfT/s6oYvZsPoTzsULfUIt7DR9hO1wBRQmCy75Y
sFGBqRKt3puDgqE0CI+0JcT4EdTvZSIwFe1KmYjACPl7bYiaBWxIsM4Df7vQj/FB
H6yR67O5QTGM/Vn/aV1Dq9PbkJHppwDu3R1DwqArlfDw7kXwlp4vMghI3q2DnuW8
j9NuRzrTlUpIxSb8XSQrBBa5szyGOyE2bHovC6/hZYNxepEMIFfxFNCEDb3Ui2cR
OB4zBQWPv1URGK3mY4e2dnpRkQqdHzNZ4BirZp2IDgAY6SY/
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:33 2024 by rpki-client on console-fra.rpki-client.org