Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47532b17-9044-3af0-b5cd-cf8eba5bdff2.roa
File:                     47532b17-9044-3af0-b5cd-cf8eba5bdff2.roa (raw, json)
Hash identifier:          exfinSGqUdLvc1IATleHjGWpvHCM9fOhM4Ab/+zX9/U=
Subject key identifier:   9D:FB:36:65:A6:0D:62:97:76:D8:AE:57:7C:2A:CE:E9:D2:5F:59:D9
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858475A762993285869B08C39D4C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47532b17-9044-3af0-b5cd-cf8eba5bdff2.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     396563
IP address blocks:        2620:74:20::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:29:93:28:58:69:b0:8c:39:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=dd799afb-5a83-4941-8513-3e23cff73212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3a:ea:68:4f:d6:a0:3c:19:0e:7e:cc:ff:e0:
                    f8:d2:1c:28:e3:eb:22:c6:ed:1b:84:de:4c:48:b1:
                    0a:4a:26:b8:d6:33:8e:00:7d:52:16:cf:63:77:31:
                    14:91:c5:50:05:72:d6:c1:14:7b:18:b3:ce:14:a2:
                    37:08:aa:03:82:2c:ac:19:24:0d:12:89:21:7f:28:
                    27:63:8c:49:36:84:ea:fe:44:6d:b5:3a:bd:03:46:
                    ef:49:75:08:28:d9:d5:f9:f3:95:75:eb:d2:a5:6f:
                    af:e1:df:4c:05:86:41:a9:da:77:82:8d:e9:0a:67:
                    18:ec:07:35:94:4e:09:57:1b:0b:53:87:e7:be:2f:
                    d3:36:de:17:fb:be:d1:af:f0:07:00:5a:55:09:02:
                    35:26:b8:02:f7:34:34:55:da:9e:10:ed:8c:ef:39:
                    49:a3:ee:bc:90:1d:45:c4:e5:6b:2b:d4:94:a8:cb:
                    f9:e7:30:39:4f:7c:01:da:1a:47:e5:a9:9a:37:0b:
                    f9:92:f9:9d:0b:b0:b3:d7:2b:92:43:7c:2f:27:45:
                    68:62:dd:aa:7d:70:b9:20:47:b1:cc:7b:4c:cf:4d:
                    a1:de:5c:0a:d6:83:d1:16:a9:e6:69:80:70:74:cb:
                    c3:e7:a7:cd:e8:35:92:a8:f6:79:93:d9:92:76:54:
                    f7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FB:36:65:A6:0D:62:97:76:D8:AE:57:7C:2A:CE:E9:D2:5F:59:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47532b17-9044-3af0-b5cd-cf8eba5bdff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:9b:8c:d1:2e:fa:bc:96:93:15:63:58:55:50:bf:ae:f7:65:
         aa:4b:16:70:1d:61:de:42:72:e1:10:c3:4e:5e:ef:26:df:a5:
         99:60:51:7f:c8:59:cb:7a:c6:a4:b8:31:75:73:ca:0a:e0:a3:
         a2:55:1e:82:12:c1:6f:7f:ff:d0:df:c6:26:32:d3:e3:12:00:
         1e:4a:1f:39:55:6d:19:92:53:88:53:83:d1:7b:4d:f6:c3:11:
         81:c1:41:82:54:c9:36:e0:43:39:c2:7b:70:b3:82:d4:4e:21:
         de:18:41:c3:2b:b7:39:8c:70:4f:b7:d1:96:35:76:e4:b4:84:
         c3:5a:94:e8:b0:78:af:9b:90:3b:6f:f0:0d:ab:fc:32:7e:d8:
         b2:19:1e:2c:38:3b:1e:12:bd:4d:8f:e5:44:0d:40:bd:3f:b5:
         a0:ca:6c:68:fc:7e:26:84:47:d7:d5:81:72:ef:25:d6:73:68:
         61:30:e8:0e:d7:f6:fa:6e:f4:2d:98:80:47:1c:8c:8b:ea:8a:
         af:2a:99:2f:7a:ec:b7:f3:2b:9e:32:ed:eb:b7:78:5e:79:b8:
         99:3d:5c:bc:0d:14:87:4a:af:6b:cd:43:8d:76:bd:fb:93:3d:
         d6:6d:b6:c7:4a:f7:79:d8:65:79:3f:ce:e4:2a:d7:1c:17:e4:
         c4:48:63:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:12 2024 by rpki-client on console-ams.rpki-client.org