Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a24d1f9b-3211-3955-9582-5d075204bab5.roa
File:                     a24d1f9b-3211-3955-9582-5d075204bab5.roa (raw, json)
Hash identifier:          fDyRQi8pd/ZVnG97oyXZcDC2KADdfUP6NZC3Qa6r4Ho=
Subject key identifier:   12:A3:F8:F3:F2:90:81:0A:B9:EF:B3:ED:BA:B9:FA:8E:9C:71:05:84
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847F1552799E1E1EE10D5004800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a24d1f9b-3211-3955-9582-5d075204bab5.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     36630
IP address blocks:        2620:74:2b::31/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:27:99:e1:e1:ee:10:d5:00:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=f5c0b74c-088d-4e37-9156-c6d502078588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:ae:03:2d:b1:c3:a8:c1:2e:72:e2:ee:76:
                    bf:cf:2d:81:1e:90:cb:3a:53:f2:c2:38:df:14:f7:
                    37:20:4e:23:48:4a:ab:72:e7:22:b8:fd:2f:60:0f:
                    9c:03:76:a6:d3:f4:5c:f4:c3:78:40:55:ed:bc:e4:
                    90:c1:24:5a:22:36:10:ae:8a:82:26:da:23:64:84:
                    2a:94:93:03:e0:71:9c:9d:e7:a0:e1:4f:fd:47:bb:
                    a4:23:43:bf:e6:36:d5:05:bf:2e:93:c3:c0:73:70:
                    23:84:1c:2b:1c:20:46:51:9f:d1:76:15:73:2b:ed:
                    92:1a:aa:6c:cd:94:d3:15:0d:00:ae:44:25:95:3f:
                    93:4b:93:9d:b3:e3:c7:65:a6:b4:f3:91:cb:41:a1:
                    48:e7:37:be:3d:a8:d4:39:b2:d2:3a:3d:5d:f8:53:
                    ad:b7:13:6e:f3:db:97:7b:cb:03:a2:37:08:1d:0b:
                    70:c9:ae:ce:94:0d:31:4b:84:3f:74:68:89:ae:85:
                    09:34:0c:cb:6d:d5:67:0c:59:89:6b:1f:f5:05:3c:
                    78:f1:a4:9e:b7:63:a6:51:3d:8f:27:9c:fb:24:f0:
                    92:d3:09:12:76:3d:e5:3b:f3:6b:c9:ee:12:a9:5d:
                    be:f0:89:52:e9:17:ae:17:c0:e1:09:19:bc:71:75:
                    3d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A3:F8:F3:F2:90:81:0A:B9:EF:B3:ED:BA:B9:FA:8E:9C:71:05:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a24d1f9b-3211-3955-9582-5d075204bab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:be:bb:7a:6c:f8:1a:14:2a:1e:e6:49:41:b1:ee:d2:36:f4:
         9a:59:8b:0c:12:d0:e8:93:5e:5d:16:7f:49:9d:18:eb:38:13:
         0b:77:1a:81:3b:1b:35:80:35:69:22:db:f8:6e:98:c1:1e:54:
         db:5a:70:10:40:19:46:d9:3e:50:2d:f2:49:c2:95:23:1e:34:
         6c:03:93:42:38:b9:55:1d:3a:6e:89:5e:33:cf:08:0d:67:76:
         a2:7e:2f:d4:9e:3a:75:85:d2:fa:16:fe:a3:59:29:68:df:b1:
         bf:ce:09:1d:9d:13:5f:06:6c:ce:9f:0a:54:85:c1:92:ab:39:
         3e:7b:61:48:f2:d4:fc:ce:4e:e1:43:51:4d:59:6e:fd:53:69:
         e6:28:62:7c:d9:63:50:36:3b:c0:0f:39:54:df:aa:61:6d:15:
         b1:d0:2e:da:f2:86:24:75:fb:41:a3:ed:dd:5d:1c:f8:90:41:
         71:3b:c1:33:fc:35:76:b3:cb:0b:3c:28:7f:2e:d8:fd:e0:bc:
         5e:86:d9:a0:f2:69:9a:c4:56:e5:69:a2:cb:0e:a5:3a:d6:77:
         78:42:0d:75:7e:8e:da:f3:bc:4e:0d:99:56:f9:ed:71:e7:61:
         5d:e4:74:e4:51:0e:fa:53:47:bb:c7:d0:5d:e2:8d:90:19:a8:
         15:4e:15:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:41 2024 by rpki-client on console-fra.rpki-client.org