Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/84860586-bf9c-3ddf-aa5b-797e9014591f.roa
File:                     84860586-bf9c-3ddf-aa5b-797e9014591f.roa (raw, json)
Hash identifier:          Y6bKRn/hcMFafQuA8VUS9rLc7C3wlwUO4wcduubdbxY=
Subject key identifier:   7C:42:B7:71:98:2B:48:1C:94:6E:0B:41:D0:F7:6B:06:9F:49:A7:28
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584726D0672F689B89BC017E0FE0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/84860586-bf9c-3ddf-aa5b-797e9014591f.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     396560
IP address blocks:        2620:74:2a::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:67:2f:68:9b:89:bc:01:7e:0f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=d4769d37-289e-4100-832b-dd3ce50cd597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:61:4d:40:46:0a:ae:d5:46:af:95:d4:6f:4b:
                    f7:b3:d1:18:70:82:24:90:66:ff:c6:06:6a:70:16:
                    9f:ae:c7:d7:65:ea:dc:5c:fd:31:89:7d:ed:76:21:
                    c0:74:51:4a:79:e7:be:e7:6b:31:3d:9c:fe:c9:fa:
                    57:07:04:37:04:04:0b:99:af:dc:df:3a:fe:84:33:
                    8b:38:02:39:ae:a0:c5:65:46:77:c8:91:1d:62:e9:
                    ea:a7:e2:80:8c:8d:8a:db:71:d3:35:98:7e:ac:5c:
                    89:16:c1:9e:7b:c9:d1:65:df:2f:4f:56:e3:92:c5:
                    72:c9:98:31:4c:f6:d3:7b:1e:4e:30:8d:1b:0a:3f:
                    c2:9f:10:dc:1e:d2:0d:61:bf:4a:a7:52:00:39:14:
                    c2:1f:ce:2b:95:38:08:dd:9d:a4:8f:bc:6c:66:16:
                    c0:83:04:8e:dd:2f:37:c2:00:62:de:49:0a:05:dd:
                    fd:9a:8a:2e:34:d0:5a:cc:d0:5d:15:91:50:21:a6:
                    02:eb:41:47:70:96:d4:52:eb:f1:0c:09:57:eb:f0:
                    a8:83:83:01:b9:3b:44:3a:28:02:cd:f0:ac:3f:f0:
                    2f:b1:d0:99:33:7f:b9:05:ac:06:08:3a:97:df:30:
                    52:87:53:c9:db:63:07:19:a7:25:d0:88:88:e2:e2:
                    54:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:42:B7:71:98:2B:48:1C:94:6E:0B:41:D0:F7:6B:06:9F:49:A7:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/84860586-bf9c-3ddf-aa5b-797e9014591f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ef:53:97:81:c4:ec:6e:c4:75:ae:c1:10:2a:7d:50:f2:59:
         85:02:2c:e9:87:f1:ee:0a:d8:a4:ee:be:d0:20:c9:17:18:42:
         4b:c1:9c:b5:15:0f:56:84:5b:a6:88:9f:ea:e4:20:38:9f:30:
         a5:4c:f8:af:1a:ac:08:ef:ce:c3:ac:ed:58:ba:48:56:57:8c:
         ca:a3:b1:6c:7b:d7:f5:3d:e5:4f:98:cf:28:e9:ae:a4:b0:cb:
         b9:c8:55:2a:4e:d8:fb:a7:29:54:7f:07:8a:5b:0c:9c:23:f3:
         88:68:44:4e:6e:1a:2c:b3:df:0d:f1:8c:39:0d:01:8d:04:ef:
         65:01:f1:66:c0:6b:46:42:57:5d:e3:6f:9e:bf:51:13:e0:07:
         45:57:62:fe:63:6c:87:32:40:8d:5a:c6:67:87:a4:ce:94:2c:
         c4:99:ae:a4:97:e2:f8:c0:e8:26:4b:d7:b7:58:89:35:5f:fd:
         15:85:f7:85:58:58:ae:ec:86:36:00:81:7c:c8:3c:35:03:72:
         da:5e:bc:5e:8d:8d:90:4c:2f:bc:26:41:95:6b:6b:dd:e5:64:
         1d:eb:99:94:7b:8a:6b:85:19:f3:e1:50:35:e5:42:71:5b:9a:
         c8:44:90:1e:56:d1:d8:c3:c0:97:48:22:e2:2c:65:a4:76:0f:
         e7:a6:08:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:17 2024 by rpki-client on console-ams.rpki-client.org