Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83be0e98-52a8-373a-a887-5264943fc0d8.roa
File:                     83be0e98-52a8-373a-a887-5264943fc0d8.roa (raw, json)
Hash identifier:          U+PapNQuUqDHxJ4Utv03eKzcrC4+Y6vrFZI7orMzvl8=
Subject key identifier:   52:4B:B0:90:BA:48:4A:45:63:FD:89:84:0D:FC:F0:1F:A6:61:EE:E3
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858477BF672B5C6A85B7F73908700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83be0e98-52a8-373a-a887-5264943fc0d8.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     7342
IP address blocks:        2620:74:a5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:72:b5:c6:a8:5b:7f:73:90:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=8b8a2e9c-0bf1-4884-8e88-7b4f61e1602a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2c:04:d1:b5:27:9b:ae:80:ca:56:ba:ab:58:
                    7a:32:5c:19:ed:a0:b8:bb:dc:af:af:56:a7:b2:c8:
                    1b:98:3a:7c:40:e2:e5:e7:37:fb:63:ee:6a:3f:96:
                    e7:8f:64:34:d5:78:ee:19:d1:be:4d:67:3a:51:1a:
                    87:bb:f7:45:e0:5b:e5:14:80:dd:4e:d1:de:8c:27:
                    74:24:5a:e0:cc:95:b0:a2:40:91:33:d3:65:27:3a:
                    22:1c:58:cd:c3:72:4a:07:b8:13:a5:aa:2f:55:68:
                    ec:63:30:46:61:dc:5f:13:a7:f0:83:ee:9d:89:34:
                    5c:2b:01:7e:db:0f:7a:91:0d:3c:91:29:b9:54:3d:
                    61:27:c3:14:08:59:83:94:90:cb:e1:c9:06:8e:23:
                    a9:c5:cd:21:49:49:ff:40:2b:a9:41:8f:7b:1c:40:
                    a1:dc:f5:48:7c:d3:fe:f3:2d:33:d7:2f:cb:ee:80:
                    bf:f4:fe:62:8d:1a:7c:38:06:01:10:46:28:a1:88:
                    18:fa:8c:3f:81:9a:8b:a6:42:2b:fe:df:c8:da:fe:
                    9f:f4:79:b3:36:b5:93:57:7e:d8:5d:ac:29:7a:cb:
                    5f:76:c1:1b:28:fa:a1:2b:af:67:7b:90:cd:09:0f:
                    54:02:34:6e:2d:39:7f:9a:b8:8c:94:0f:19:4f:47:
                    2a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4B:B0:90:BA:48:4A:45:63:FD:89:84:0D:FC:F0:1F:A6:61:EE:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83be0e98-52a8-373a-a887-5264943fc0d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:a5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f3:1b:9d:cf:9f:0c:fa:87:48:59:3c:84:99:dc:3b:99:9b:
         9c:5e:60:04:bb:6d:a0:1c:85:2c:f8:5f:02:cf:b4:15:d1:b2:
         05:15:99:1f:c3:d5:b1:c8:37:45:e1:a8:c0:08:c6:e9:ba:e3:
         e9:1a:c3:34:83:e1:a4:5f:33:f6:a4:06:b7:59:e4:31:4d:2b:
         90:f4:89:66:5b:72:e4:9a:86:34:b2:0b:b4:e4:cf:09:27:4d:
         48:a3:d8:29:97:84:d9:dc:61:c5:2f:a1:31:49:13:2b:9b:7a:
         a9:3a:9c:ea:b6:50:f4:57:f2:49:8b:8e:a9:78:2d:e8:87:6a:
         62:f7:9a:dd:7e:3a:12:1b:43:bf:7f:4c:56:52:72:27:df:57:
         24:4e:36:c9:46:f2:af:f1:c1:9e:64:62:76:61:11:07:00:84:
         75:8a:71:90:9f:c9:63:8d:0e:45:fc:5b:b3:8e:f5:72:20:b7:
         18:ef:ea:c3:84:a1:2b:1c:7b:86:7b:db:b1:e1:c1:3c:b8:4f:
         43:f0:08:5b:ac:9e:61:d9:f1:9f:32:a4:e6:ef:fc:1d:e7:b7:
         55:16:3d:bf:9f:68:9f:6d:fd:65:c7:7a:3e:26:40:5e:09:e8:
         bb:27:81:97:6b:33:78:4f:d3:a0:8d:25:d5:15:d0:ab:53:57:
         37:35:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:17 2024 by rpki-client on console-ams.rpki-client.org