Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/96fa6797-c6d7-38fb-ab66-134cd7699874.roa
File:                     96fa6797-c6d7-38fb-ab66-134cd7699874.roa (raw, json)
Hash identifier:          g5SHP6boTg14BWOxIaWRE/aUdTzDiyuRlNnFvwNWIPA=
Subject key identifier:   F8:83:95:6A:77:C6:C3:5F:A0:4A:4A:CF:96:64:67:CB:AB:D1:C0:C7
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285845A41D85A74D422CCB3C189456
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/96fa6797-c6d7-38fb-ab66-134cd7699874.roa
Signing time:             Tue 23 Apr 2024 12:38:08 +0000
ROA not before:           Tue 23 Apr 2024 12:38:08 +0000
ROA not after:            Mon 22 Jul 2024 12:38:08 +0000
asID:                     7342
IP address blocks:        2620:74:60::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:1d:85:a7:4d:42:2c:cb:3c:18:94:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 23 12:38:08 2024 GMT
            Not After : Jul 22 12:38:08 2024 GMT
        Subject: CN=b6e672b6-b0c8-419f-9835-1c2a266feade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4a:bc:fd:4d:4a:7d:bf:7c:5c:31:e4:90:50:
                    7f:c7:10:5a:32:2c:aa:ca:84:ea:a6:60:77:31:5f:
                    90:77:d6:90:b5:05:4c:bf:f0:5e:29:37:98:89:d0:
                    2b:b9:d1:c7:fd:00:ab:e0:0b:a9:e3:8f:10:0d:1e:
                    61:e8:ed:f9:dc:41:ad:7c:a7:ac:4f:b4:6e:60:e0:
                    7e:ac:fa:bc:4f:bb:1b:32:f7:3e:93:bf:b8:c2:6c:
                    59:34:0e:94:e8:20:7d:74:29:0c:11:51:bc:a5:12:
                    5a:22:8c:13:b5:c1:d8:14:35:e9:4a:45:ab:d6:0a:
                    19:e4:1b:c1:88:e6:25:5b:25:b1:3b:2d:46:ca:1a:
                    e9:a3:c2:e7:74:6d:ee:32:b7:5f:0b:23:6f:6e:7e:
                    2a:94:3d:87:8b:21:77:4d:06:59:5d:aa:cf:37:f2:
                    ba:36:12:e5:bc:99:6b:9a:d3:46:7a:dc:03:6c:2c:
                    90:a6:97:38:34:aa:9f:ef:b7:32:45:20:25:f1:5d:
                    2b:94:7e:bf:89:52:e9:09:af:40:a7:65:2b:47:f4:
                    fb:60:b2:42:15:cf:95:a5:cd:e2:0a:a0:13:cd:9e:
                    81:9e:64:88:f2:fc:b2:1c:0e:c2:cf:6e:4e:b5:e7:
                    68:58:db:6d:f3:a4:67:c7:43:a3:56:0b:dc:c7:9e:
                    74:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:83:95:6A:77:C6:C3:5F:A0:4A:4A:CF:96:64:67:CB:AB:D1:C0:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/96fa6797-c6d7-38fb-ab66-134cd7699874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:60::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:3e:4b:d0:be:e1:56:16:92:f9:fc:a1:d4:66:55:7a:48:20:
         ef:53:00:ca:62:87:f9:d2:2a:b2:77:58:da:ad:87:7b:cc:ac:
         ad:1f:76:72:ca:de:3e:ea:32:be:ee:88:8b:f8:e0:5a:4b:ed:
         1c:45:15:5f:15:4d:1a:2d:e7:ba:9b:a5:29:dd:69:4a:88:98:
         5d:9b:c9:62:e7:c7:76:2c:7f:20:89:8a:c3:df:ac:2a:48:5d:
         b1:3d:22:53:b2:ac:27:04:30:e1:d5:51:a3:a9:ac:38:e4:9d:
         5d:04:01:06:6f:9a:ad:62:9e:58:b7:70:87:37:b7:ee:23:df:
         3d:c1:14:9b:c3:fe:56:77:89:d4:2d:a8:0e:41:79:98:f0:6e:
         a2:8c:70:2e:4d:01:99:4e:c4:78:20:fd:69:2e:e8:c1:00:e6:
         3a:2a:79:ce:62:28:9f:24:ff:5a:90:b4:e7:55:cb:36:2e:f8:
         c0:94:d4:4b:92:d9:ec:da:51:a7:61:86:bf:69:2c:aa:d4:9a:
         65:73:31:bd:35:b3:35:80:d1:d3:d7:ab:da:d5:be:85:01:b2:
         03:56:71:7e:33:d8:36:92:f1:13:03:38:63:0b:03:6d:12:f9:
         28:04:20:c7:93:5f:c1:19:2d:fc:48:c2:e4:85:fe:b8:a8:2f:
         fa:f5:ca:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 14:59:29 2024 by rpki-client on console-fra.rpki-client.org