Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e437137-ec80-38e3-a86e-89ab811d658e.roa
File:                     8e437137-ec80-38e3-a86e-89ab811d658e.roa (raw, json)
Hash identifier:          ZlQ1MnQKjgUDOjGWEAmPFLoHMBEdd1FH5vVjqqAVvbM=
Subject key identifier:   16:7B:85:04:1D:34:D0:CC:0F:34:FC:3D:20:B2:35:7B:1E:84:BC:1B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285845A9B4152736D5823A72E5E678
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e437137-ec80-38e3-a86e-89ab811d658e.roa
Signing time:             Thu 25 Apr 2024 12:40:32 +0000
ROA not before:           Thu 25 Apr 2024 12:40:32 +0000
ROA not after:            Wed 24 Jul 2024 12:40:32 +0000
asID:                     7342
IP address blocks:        2620:74:85::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:b4:15:27:36:d5:82:3a:72:e5:e6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 25 12:40:32 2024 GMT
            Not After : Jul 24 12:40:32 2024 GMT
        Subject: CN=087bbb74-4edf-41ac-af45-33528cb6b98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:19:b7:3d:be:1c:73:f4:22:ed:a5:d9:bc:
                    61:81:71:7f:69:be:35:a6:2f:d6:0f:c3:c2:e2:5b:
                    a2:5a:41:7c:9b:81:ad:ef:fb:7d:c3:d9:74:10:37:
                    a3:52:64:bb:6a:a6:b1:53:f2:b1:b4:a8:1e:2c:2a:
                    bd:a8:64:39:8c:80:19:b7:4a:68:b4:d1:39:81:e1:
                    9d:3b:4b:fa:d8:58:0c:03:12:b4:b9:e4:6c:be:32:
                    36:1c:81:e4:10:b7:b5:ec:2f:e5:e4:e8:1d:27:24:
                    17:61:25:99:69:da:fc:39:aa:78:94:09:6c:01:39:
                    9f:24:1b:e1:75:e4:a7:16:a1:60:24:e8:dd:83:97:
                    c7:ab:7b:3e:8f:18:2e:70:af:64:f8:42:e4:ec:3d:
                    45:d6:7c:91:14:96:9f:aa:2e:52:60:1d:cc:44:57:
                    fd:1a:d8:3e:52:cc:af:50:ce:be:59:0b:d4:68:9b:
                    5a:3a:81:35:5d:63:34:2a:3d:53:05:ce:d1:c0:a5:
                    62:56:3b:c5:e0:4a:7a:18:70:e8:c7:5f:1d:b9:84:
                    18:9f:b7:c9:26:e8:e9:3d:fb:42:04:c1:2e:9d:12:
                    dd:cf:49:99:0c:6f:25:78:33:86:b8:a3:e0:2f:3e:
                    f0:13:7f:11:6e:30:23:c8:f2:4e:ff:72:af:81:a3:
                    f3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7B:85:04:1D:34:D0:CC:0F:34:FC:3D:20:B2:35:7B:1E:84:BC:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e437137-ec80-38e3-a86e-89ab811d658e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:85::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a3:54:f7:2b:97:ae:66:7e:de:8e:d8:7b:81:e0:a6:cc:a9:
         d3:dc:f8:7e:89:0b:cd:58:19:ab:d2:76:f3:8e:83:77:92:9f:
         e4:fe:57:7b:0d:0e:ff:ee:32:1c:a4:47:b9:94:1b:26:57:51:
         c6:f6:3a:29:40:3f:f8:f4:98:db:15:3c:20:55:52:75:6c:30:
         b7:c6:88:f5:ca:71:84:85:7b:3b:82:6a:73:8d:1e:33:1d:99:
         82:1a:fd:c2:de:f4:4e:4e:91:60:72:23:7c:2c:71:d1:7c:75:
         a9:f9:ac:97:79:6c:7f:19:88:df:77:30:36:e4:a9:09:d8:ba:
         d1:b9:cb:62:f4:65:85:c4:91:9a:0b:2a:e3:3b:8e:ec:19:b5:
         e2:7c:1a:a7:07:66:5b:76:c8:d6:69:bb:d0:bc:38:5c:6d:52:
         e6:be:b7:ea:b7:23:91:71:2f:62:0d:5d:73:0d:5d:f1:38:8d:
         14:2c:3f:7e:7e:ff:ff:f6:20:58:9b:00:5d:5f:bf:43:fe:f9:
         29:f9:9e:37:cd:ea:43:90:6f:48:14:ac:41:f8:42:11:14:ab:
         0b:e6:ed:85:f7:d9:da:3e:7a:b4:11:fc:cb:98:ea:23:21:f1:
         c0:a3:7c:7c:d1:ba:b7:4c:37:7e:f1:24:46:c2:05:1d:48:8a:
         c0:c0:22:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:58:45 2024 by rpki-client on console-fra.rpki-client.org