Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/986ea2cc-e115-3767-b91b-733727b4fb79.roa
File:                     986ea2cc-e115-3767-b91b-733727b4fb79.roa (raw, json)
Hash identifier:          KtsrTcj9tCWaWigFL1j3WFp2CPRVs802lPbkR9RtjGk=
Subject key identifier:   E7:A7:F1:9B:60:FE:5D:9B:E6:29:3C:C7:C4:2F:18:CF:73:39:A4:D8
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858475A7628D79BC08397B6ACC200
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/986ea2cc-e115-3767-b91b-733727b4fb79.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     396613
IP address blocks:        2620:74:20::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:28:d7:9b:c0:83:97:b6:ac:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=73b41c63-636a-4c93-bce4-0c0f6eaa5e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6e:e6:bc:cf:e4:ef:90:bd:49:89:11:6c:af:
                    21:ae:55:1e:c2:13:c8:d1:a6:3b:79:40:ed:11:70:
                    47:02:80:db:2f:2f:0c:d4:63:a1:aa:a7:9a:71:47:
                    2a:de:91:fa:93:c2:1e:2f:1f:1f:ff:07:50:9c:42:
                    8b:d6:51:a5:2c:fa:c8:6c:b5:66:e8:b4:08:b3:11:
                    eb:f2:e4:51:f7:56:e8:13:69:68:b3:78:86:37:54:
                    4a:ef:fe:ed:0f:45:8e:ca:a6:24:0f:79:88:9b:f6:
                    d5:cd:fa:d5:47:37:dd:b7:82:a8:79:75:95:f8:26:
                    c2:ef:eb:06:13:e9:09:8b:85:a6:76:98:c2:22:5d:
                    31:d0:4f:e7:7c:74:5a:06:6c:b1:83:a1:c3:7d:88:
                    e3:19:38:88:33:1d:2a:b9:80:03:72:22:2b:8e:ae:
                    36:3e:ce:66:7e:08:c7:cf:89:91:72:0f:05:a5:de:
                    66:56:75:2d:25:73:cf:53:2b:84:a0:c7:62:0d:6e:
                    0d:7b:10:0c:1b:48:97:0f:83:38:0c:b0:29:f2:df:
                    62:d1:4f:56:4d:a4:49:c7:f2:d4:4e:2d:95:1d:08:
                    1a:b1:2e:d1:18:dd:1e:bf:3e:0f:00:a7:50:d2:dc:
                    ce:4f:ee:90:d9:33:3e:09:cb:c0:aa:09:db:90:30:
                    14:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A7:F1:9B:60:FE:5D:9B:E6:29:3C:C7:C4:2F:18:CF:73:39:A4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/986ea2cc-e115-3767-b91b-733727b4fb79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:9d:03:d0:a0:f5:70:a9:76:92:cd:c5:9d:ec:9e:5b:3f:bf:
         b5:54:9b:a9:4e:13:a9:5a:7e:01:d7:cc:77:9b:80:19:3e:f7:
         41:7c:93:ac:25:c1:77:d3:5b:be:d9:4b:21:42:7b:76:f5:d4:
         c5:85:d8:42:ea:62:02:67:81:67:4d:28:3d:0b:b0:1b:7d:fb:
         59:fe:2a:c1:e4:1c:8f:68:63:f0:80:50:f5:0f:f9:03:d3:c1:
         32:e7:04:2b:00:27:3e:01:cc:3b:86:4d:8a:8b:12:8f:2f:97:
         8e:86:4a:ef:e7:09:e1:0b:f7:19:21:3b:ea:7d:71:f9:fc:1d:
         a8:90:fb:4d:f0:86:d9:e8:8c:2c:a9:46:fe:2b:ea:0c:59:31:
         0b:ac:71:eb:47:a4:c2:b5:a1:e6:06:dd:e9:a3:08:f5:02:36:
         0d:41:1e:6b:00:0e:6d:fe:d3:03:a0:cb:5f:97:f8:0e:d5:c8:
         38:94:00:1e:e9:b4:c4:71:bb:36:20:54:b8:e6:62:06:aa:1b:
         89:b6:c1:a0:db:af:4f:d7:f7:e5:98:cd:d8:44:b6:c1:b7:f2:
         a3:6a:f0:2e:54:aa:4e:75:27:e6:91:d7:61:21:a9:ab:28:09:
         b1:ae:91:cc:1c:e7:74:41:f0:16:eb:0b:f3:5d:1c:29:d1:1c:
         f4:af:30:1c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdadijXm8CDl7aswgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk
NzNiNDFjNjMtNjM2YS00YzkzLWJjZTQtMGMwZjZlYWE1ZTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG7mvM/k75C9SYkRbK8hrlUewhPI0aY7eUDt
EXBHAoDbLy8M1GOhqqeacUcq3pH6k8IeLx8f/wdQnEKL1lGlLPrIbLVm6LQIsxHr
8uRR91boE2los3iGN1RK7/7tD0WOyqYkD3mIm/bVzfrVRzfdt4KoeXWV+CbC7+sG
E+kJi4WmdpjCIl0x0E/nfHRaBmyxg6HDfYjjGTiIMx0quYADciIrjq42Ps5mfgjH
z4mRcg8Fpd5mVnUtJXPPUyuEoMdiDW4NexAMG0iXD4M4DLAp8t9i0U9WTaRJx/LU
Ti2VHQgasS7RGN0evz4PAKdQ0tzOT+6Q2TM+CcvAqgnbkDAUwQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOen8Ztg/l2b5ik8x8QvGM9zOaTYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTg2ZWEyY2MtZTExNS0z
NzY3LWI5MWItNzMzNzI3YjRmYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQApnQPQoPVwqXaSzcWd7J5bP7+1VJupThOpWn4B
18x3m4AZPvdBfJOsJcF301u+2UshQnt29dTFhdhC6mICZ4FnTSg9C7AbfftZ/irB
5ByPaGPwgFD1D/kD08Ey5wQrACc+Acw7hk2KixKPL5eOhkrv5wnhC/cZITvqfXH5
/B2okPtN8IbZ6IwsqUb+K+oMWTELrHHrR6TCtaHmBt3powj1AjYNQR5rAA5t/tMD
oMtfl/gO1cg4lAAe6bTEcbs2IFS45mIGqhuJtsGg269P1/flmM3YRLbBt/KjavAu
VKpOdSfmkddhIamrKAmxrpHMHOd0QfAW6wvzXRwp0Rz0rzAc
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:41 2024 by rpki-client on console-fra.rpki-client.org