Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af88d837-e4a3-3b05-8fdf-8b0eddc93aa3.roa
File:                     af88d837-e4a3-3b05-8fdf-8b0eddc93aa3.roa (raw, json)
Hash identifier:          /OQHe6JwR5kS26gVJW3WzFvv83yO3JWCnxLunFU6YLA=
Subject key identifier:   A0:19:E0:B8:AE:3A:05:D9:1D:5A:07:41:BD:DC:24:01:69:D1:6A:4A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847686B937D4147CE9000416600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af88d837-e4a3-3b05-8fdf-8b0eddc93aa3.roa
Signing time:             Wed 02 Oct 2024 13:00:42 +0000
ROA not before:           Wed 02 Oct 2024 13:00:42 +0000
ROA not after:            Tue 31 Dec 2024 14:00:42 +0000
asID:                     7342
IP address blocks:        2620:74:7e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:6b:93:7d:41:47:ce:90:00:41:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  2 13:00:42 2024 GMT
            Not After : Dec 31 14:00:42 2024 GMT
        Subject: CN=70c9dd04-2aa2-4a2c-9ade-e36d2084b10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1c:ca:9b:f3:70:b4:87:69:c2:5d:b2:0c:69:
                    fa:55:99:ce:8e:c7:60:5a:5e:73:53:0b:9f:05:be:
                    af:5e:ce:26:31:a1:45:a9:20:f3:79:9d:8c:14:ef:
                    9c:e6:12:ae:62:c0:9a:2b:8b:fb:68:66:ab:ed:0b:
                    96:0c:37:10:3c:fe:1c:9f:01:51:78:95:68:d9:d0:
                    40:2d:0c:1a:0f:54:da:5d:57:cd:e3:01:52:7d:b4:
                    c3:5b:da:10:52:9b:1c:41:4b:17:08:43:7b:4f:7a:
                    80:b6:6a:d7:cb:a4:0f:f0:95:71:aa:6e:d9:5a:b9:
                    b9:12:53:bd:69:aa:93:91:d5:c6:eb:38:a4:09:94:
                    f5:5a:bf:bd:0b:be:e0:c4:5a:e3:e9:42:61:f5:19:
                    ed:f5:13:ff:1a:6b:41:1f:f6:b2:97:68:5f:83:e1:
                    0d:e2:6d:85:0f:46:84:e9:4f:a9:17:66:d1:d0:49:
                    ad:1c:66:b6:1b:f2:29:29:de:41:64:3c:a5:8c:c8:
                    e8:89:bc:3d:d1:91:4b:83:92:ab:b8:64:66:f5:d4:
                    d1:ad:30:24:57:1f:06:d1:7e:d7:1f:dc:91:73:2c:
                    da:b8:2a:5a:d7:c1:74:9d:f4:dd:97:e7:f4:d9:c7:
                    94:15:6f:50:f7:74:0b:a8:e4:2a:84:be:f9:d1:fa:
                    38:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:19:E0:B8:AE:3A:05:D9:1D:5A:07:41:BD:DC:24:01:69:D1:6A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af88d837-e4a3-3b05-8fdf-8b0eddc93aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:7e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b4:2b:0c:3d:af:8f:f5:0e:54:35:51:bb:69:b7:3d:e8:35:
         e3:5b:99:7d:3b:ca:43:5c:53:cf:7b:42:a1:6e:f7:17:0d:92:
         55:4c:05:de:ca:3f:c4:e3:9f:5d:ef:fa:aa:67:6d:76:76:9d:
         57:66:4b:16:13:4e:89:f5:34:df:80:66:03:3d:61:e2:68:6d:
         1d:31:68:6d:ff:3f:cb:d8:c4:ce:f9:c0:43:87:b3:6e:d3:2b:
         c5:32:a3:05:c9:c9:36:80:24:fc:05:8b:49:8f:58:c8:37:a6:
         e4:2a:d5:fa:5b:84:6e:c0:bf:b7:db:54:51:c6:ac:27:43:7b:
         b0:72:ac:59:70:46:af:fc:57:55:d2:e1:22:38:a6:e4:b2:13:
         11:85:45:31:99:3e:44:da:2d:62:19:f8:e3:3a:f8:1a:2f:54:
         ad:6d:ce:cd:8b:f1:03:1c:fe:1d:03:c9:d0:cc:1d:b1:6b:90:
         47:4c:93:f2:63:65:6a:57:b5:8d:e7:d8:eb:62:97:29:f2:e2:
         b2:61:57:8a:15:c4:49:71:4f:33:71:5d:37:d8:17:a3:ea:18:
         fc:a1:11:e7:f9:d0:06:96:ac:42:30:15:c8:c3:0e:ec:36:54:
         c1:4e:e1:62:67:e3:c5:a5:51:aa:d4:36:43:35:4b:4b:0e:bf:
         03:4a:36:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:42 2024 by rpki-client on console-fra.rpki-client.org