Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4aef7006-6c0c-3bc4-966f-2e7e97d911b8.roa
File:                     4aef7006-6c0c-3bc4-966f-2e7e97d911b8.roa (raw, json)
Hash identifier:          7aXMDr+2agAcRLTAM6IspUEQKz2bjOamOTwa7i1NPus=
Subject key identifier:   C4:FC:0E:8D:56:AF:3F:F3:0E:5A:70:0C:91:2E:06:E0:8E:17:EB:E4
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847A30C09D625E04BDF31441E80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4aef7006-6c0c-3bc4-966f-2e7e97d911b8.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     396541
IP address blocks:        2620:74:2c::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0c:09:d6:25:e0:4b:df:31:44:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=e319cf46-54ec-4d38-8d76-2409fc02aefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7e:67:53:ee:09:62:d1:43:43:56:40:f3:46:
                    23:4c:23:3d:df:bf:05:f6:d3:a4:13:2c:f2:20:d7:
                    11:23:ee:19:dc:0e:42:a2:84:85:d8:35:5b:80:41:
                    02:2c:e5:ee:32:7a:7f:b3:2d:1c:5d:c3:22:c1:3a:
                    e2:8e:86:85:3a:f9:85:64:a6:d7:e9:7e:e7:36:1c:
                    dc:e8:76:45:83:f5:62:38:f7:61:bf:2a:3e:0d:61:
                    58:cd:b2:78:88:17:73:5e:52:1d:c3:74:10:c2:1e:
                    52:c0:91:2e:7e:ef:05:3e:54:4e:c2:73:5b:44:b4:
                    ee:42:8f:b8:6e:74:4d:4c:6f:b7:ab:37:ce:25:c7:
                    44:98:f5:ce:e9:4e:d0:f1:cb:c1:af:30:f9:d2:6d:
                    de:21:7b:2d:b7:c7:fa:c9:a1:8d:6c:86:b4:a2:ab:
                    dc:c5:56:c8:59:b4:16:61:75:0c:8e:4e:13:78:00:
                    e1:a0:e9:cf:8a:9e:19:d1:90:e6:48:24:94:9b:e6:
                    23:a7:97:e0:84:df:86:5c:c1:29:b2:db:0d:57:a9:
                    e2:17:7a:c6:90:0b:60:39:a8:03:cc:b7:86:a0:86:
                    64:2f:56:2b:33:8c:18:c7:e0:d3:f1:a3:a4:0c:34:
                    44:93:75:5d:70:8d:10:a2:26:fe:60:62:99:2e:be:
                    08:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FC:0E:8D:56:AF:3F:F3:0E:5A:70:0C:91:2E:06:E0:8E:17:EB:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4aef7006-6c0c-3bc4-966f-2e7e97d911b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:17:65:62:b1:6a:18:6d:b5:e3:c5:e8:cc:ef:4c:fb:e4:a7:
         8a:b7:8a:bd:4b:80:51:f5:5f:95:f9:d3:05:a3:69:6f:70:26:
         af:9b:1f:57:24:9a:4e:9f:00:e2:a6:3a:3d:3c:eb:63:a3:64:
         5d:f4:ea:e0:51:99:84:e0:f9:68:77:9d:2c:f3:d4:57:72:1a:
         8b:1a:46:da:f3:b9:22:7f:6e:e8:7a:e0:7c:aa:fe:b9:bf:59:
         6c:97:6d:4d:08:71:cb:dc:c5:27:f9:d4:b2:8f:52:8f:1e:b3:
         a6:f3:8a:b7:bd:0e:08:6c:90:e3:1a:90:2c:0e:32:73:93:a1:
         28:45:31:76:c8:4e:21:39:74:fd:eb:ee:e7:02:e7:6d:d1:a8:
         0b:87:f9:0d:1a:cb:cd:fb:29:a3:c2:b9:da:9f:91:f5:23:80:
         79:04:5f:31:70:36:3d:9b:24:21:02:5c:3f:29:58:99:d5:4c:
         e0:2a:d1:7e:4a:ef:e3:74:0b:6e:bb:3a:1c:1c:93:cf:74:5a:
         64:b2:88:4b:49:57:0b:8a:b9:08:18:5d:90:2f:a7:73:cb:36:
         c8:af:15:14:2b:82:ce:af:7c:f2:ba:c6:5c:f8:1d:3e:b5:85:
         98:31:d2:c9:a2:84:c2:69:cf:c9:6f:d0:05:ae:c3:19:d0:d7:
         35:6b:c1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:34 2024 by rpki-client on console-fra.rpki-client.org