Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5473407f-1560-3248-a859-84614f8959ff.roa
File:                     5473407f-1560-3248-a859-84614f8959ff.roa (raw, json)
Hash identifier:          rcWEFumMXmqsWf32iAvwqz9lMev1CyG2PLHRV6jk2TI=
Subject key identifier:   5B:1C:09:CA:11:AF:D3:65:9F:36:63:1D:74:09:AC:2F:FE:F7:73:6E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847F15520B91D7D9B299908A400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5473407f-1560-3248-a859-84614f8959ff.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     396612
IP address blocks:        2620:74:2b::31/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:20:b9:1d:7d:9b:29:99:08:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=1647b7e1-b49a-48a6-a6a2-80549057bcd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0e:92:e6:e6:13:3c:33:36:be:13:b8:07:c1:
                    be:50:1b:f6:17:d9:4f:23:2c:a6:77:21:e6:73:d2:
                    70:a0:46:f7:ce:31:63:33:ab:a0:3d:53:7a:2d:8a:
                    fe:62:10:df:02:f4:6b:31:6f:f5:94:76:bf:33:3a:
                    45:ad:95:e9:9a:c4:a2:fe:33:0f:f9:c0:5a:4a:cd:
                    08:37:b8:fa:5b:6d:dd:b9:e2:95:a0:2b:f7:2b:0e:
                    4e:0c:c4:e0:95:b3:2b:63:32:62:3d:52:4f:47:cc:
                    66:2f:ac:ee:54:9a:a1:d3:56:f4:eb:54:c1:f8:28:
                    23:8b:62:5e:6c:84:0c:8e:7c:7e:08:a9:36:88:0b:
                    7b:31:fe:63:e9:81:ed:54:58:bd:f3:b4:ea:07:95:
                    74:52:87:93:30:f8:07:40:23:e0:e0:1c:91:f0:4f:
                    cf:05:0a:1d:2b:3c:82:b3:a2:20:9d:8d:1e:48:51:
                    73:99:42:53:be:44:a8:e6:23:db:33:ab:2e:fc:1b:
                    1e:50:3c:43:25:ad:a1:10:c4:b8:28:14:ce:ce:99:
                    c6:d6:fc:52:ce:e9:7d:23:ee:f4:cf:9a:2f:e3:65:
                    eb:4b:fd:aa:50:ba:96:03:d3:d2:fc:90:0f:5f:0b:
                    51:78:3f:c6:14:60:8c:e5:81:da:e2:54:5b:2d:e3:
                    6d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1C:09:CA:11:AF:D3:65:9F:36:63:1D:74:09:AC:2F:FE:F7:73:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5473407f-1560-3248-a859-84614f8959ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:60:23:27:a3:1d:31:35:c7:3e:cd:db:ea:d7:17:7c:fa:54:
         fd:aa:a4:03:f7:bf:36:cc:29:63:ee:cf:3d:b2:62:90:e4:40:
         dc:44:d5:08:30:3c:bd:5d:58:88:86:c5:8e:59:f0:b6:2b:5f:
         cc:03:9f:8c:a8:24:37:3d:c7:42:af:88:aa:ba:a0:44:b3:a0:
         6a:71:e2:d6:8c:fa:c4:5f:b1:0b:42:c2:31:33:b2:8c:9c:19:
         43:23:1a:7f:ef:b4:b8:83:b5:23:4f:e3:bc:a2:e8:6a:13:10:
         10:92:4d:54:64:30:8a:a2:6d:3b:c9:6f:32:12:3d:6b:8e:2c:
         66:6f:25:87:73:1e:b8:76:df:cd:e0:92:d8:81:ec:4b:b1:e0:
         1e:21:68:08:56:9d:86:0b:2e:cc:8a:48:51:2b:cb:c4:a7:c2:
         0a:bf:57:75:f1:29:f3:43:02:dc:17:65:7b:36:50:07:63:b8:
         e3:e2:e1:db:d5:44:bc:c8:1d:23:61:82:fd:9b:25:76:bc:74:
         98:07:95:40:1b:23:be:79:03:31:47:45:12:46:b6:7c:45:bd:
         bc:88:b9:bf:28:bd:06:56:6f:39:4c:4e:56:d4:68:5a:8e:cc:
         d8:e5:66:0b:ed:29:3d:dd:2e:15:ef:eb:7f:8f:ac:15:ac:66:
         25:3d:ab:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:35 2024 by rpki-client on console-fra.rpki-client.org