Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45e517bc-1fa7-3c78-8f33-44debf0285df.roa
File:                     45e517bc-1fa7-3c78-8f33-44debf0285df.roa (raw, json)
Hash identifier:          ++xIWBgUPbKFZT5QbQWxgwkPceX68T0j29Zt9dP0B1A=
Subject key identifier:   9D:B8:AB:38:D7:6B:8C:70:4F:72:69:7D:BF:1A:68:3F:34:C3:80:9E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847A30C0B94DD3B34A34D59EF00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45e517bc-1fa7-3c78-8f33-44debf0285df.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     20362
IP address blocks:        2620:74:2c::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0c:0b:94:dd:3b:34:a3:4d:59:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=8e4f58e1-7dd8-481d-b62b-bb8a72d3db9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:a3:4e:53:9e:de:3d:7f:f8:5e:23:83:30:
                    ef:9e:ca:6e:4e:13:e9:8b:32:3a:ec:e2:5e:18:d5:
                    9d:75:9c:ef:62:76:e6:11:0d:ca:e9:4a:73:c4:d2:
                    39:0d:7b:42:50:64:47:7e:c3:5d:bb:e3:d6:89:22:
                    78:f0:75:8b:69:4c:0d:1d:67:b5:22:75:4d:56:90:
                    4c:41:75:c4:3b:4d:90:a9:1b:16:8c:b2:99:70:36:
                    5e:62:c5:fc:4b:0e:46:fa:4c:6a:bd:9a:ee:48:19:
                    a7:2e:99:d0:28:0c:45:74:e3:20:ea:6c:86:87:01:
                    02:54:b7:bf:0e:01:a7:a5:31:8b:ab:cc:d7:c7:0a:
                    fe:51:52:e5:be:fa:14:51:01:bf:4b:12:f2:14:1c:
                    10:f3:fe:74:e8:49:37:ee:cd:0b:21:e8:51:f0:d2:
                    37:c0:d6:7c:51:6f:85:ec:8c:8e:5f:f2:ce:b2:77:
                    a1:67:de:99:a0:83:39:ca:3a:04:9f:ad:fa:a8:f9:
                    fe:f0:6d:4a:eb:aa:ca:d9:9c:ba:7f:38:fa:65:0b:
                    26:f7:9a:f6:4e:b4:83:5f:dc:ba:22:db:32:1a:1d:
                    0e:87:5a:6f:4f:9d:24:fd:99:15:08:44:a3:4d:d3:
                    39:9e:48:5a:79:7a:8e:42:e6:28:a5:58:f6:9b:a5:
                    59:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B8:AB:38:D7:6B:8C:70:4F:72:69:7D:BF:1A:68:3F:34:C3:80:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45e517bc-1fa7-3c78-8f33-44debf0285df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:8f:5f:ca:5d:f4:9b:57:80:71:53:3a:ad:db:1b:bf:40:fe:
         41:f0:9d:eb:91:46:6a:82:dc:48:b0:a7:85:8f:ab:90:15:bc:
         97:ba:6b:61:08:91:d3:10:c5:c8:81:55:3f:53:40:a9:10:29:
         9c:c4:48:6e:b2:ff:86:ab:05:44:6c:a7:02:6c:fe:e8:d2:87:
         20:05:76:d0:1b:b3:d8:b6:5c:7c:b5:9a:55:39:8d:f4:22:ec:
         f8:d0:10:a7:36:c5:eb:20:60:5b:b6:67:d1:17:59:87:78:26:
         6b:f8:0a:21:f3:b0:d1:87:de:19:83:66:30:06:26:cb:1e:07:
         d7:ef:eb:00:f0:f2:6f:9b:57:c2:77:a1:b6:78:6e:8d:ee:17:
         04:8a:05:65:b9:ec:b3:fb:c9:0f:7e:7e:5e:39:a7:35:34:95:
         a5:15:83:27:42:50:37:f1:94:d5:3d:d5:69:91:a2:67:07:02:
         9b:e2:d3:ec:b6:8e:bb:9c:36:d7:91:39:b8:33:d0:6e:96:bc:
         86:37:19:32:ba:62:49:91:3b:34:5e:6e:8e:93:9a:1b:78:2a:
         19:62:2c:a2:f0:83:29:22:87:00:b3:f0:ec:1b:71:69:9b:5c:
         47:43:c1:86:9a:2c:8f:de:b8:19:e6:b9:94:f5:98:5a:b2:51:
         79:72:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:34 2024 by rpki-client on console-fra.rpki-client.org