Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b70a9d67-b5f6-31c8-a673-9673507f1355.roa
File:                     b70a9d67-b5f6-31c8-a673-9673507f1355.roa (raw, json)
Hash identifier:          xar4T6QPs4Ns5q6MRVKRDRAFMySHK1ev23GuqP0Jt8s=
Subject key identifier:   6A:9E:78:1A:39:14:D6:01:33:27:10:EB:94:D2:23:60:FA:C8:20:6F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584738F5F1EEE00FF3B9E25D7380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b70a9d67-b5f6-31c8-a673-9673507f1355.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     27544
IP address blocks:        2620:74:21::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:f1:ee:e0:0f:f3:b9:e2:5d:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=ddcf43f9-2410-4441-989f-c7775fb002f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:03:80:d8:26:f9:e5:85:fc:fa:dc:da:80:f2:
                    e8:a2:7d:c5:eb:7d:d2:2b:4d:a5:c1:8c:e8:64:bd:
                    de:06:44:70:14:cc:7b:d3:c4:75:d9:c6:f6:02:91:
                    f2:c7:12:b5:54:c2:f6:11:11:3d:c1:f0:f8:91:a5:
                    2e:59:96:69:38:74:bf:ec:22:54:73:49:76:08:06:
                    35:8d:ba:0d:27:28:ae:b1:b2:8d:4f:43:b0:59:e0:
                    94:7f:06:be:c3:99:44:ef:af:1b:13:db:2e:8d:bd:
                    1e:ad:20:21:fa:8f:9d:62:0a:80:5c:76:91:3a:78:
                    71:b9:61:06:f1:c2:c5:6c:ae:2a:db:4e:cb:5d:19:
                    1d:25:ad:fa:8f:e1:ba:fa:5b:e1:b3:22:6c:0e:62:
                    c1:82:94:65:88:75:1d:91:cb:ab:e1:24:82:e8:1b:
                    64:33:63:bd:70:9d:e0:35:36:3c:b9:cb:33:cb:d4:
                    b0:b2:0a:d7:13:46:17:c4:77:9a:62:2d:1c:98:a7:
                    8d:8c:91:10:65:6f:81:74:27:4f:ca:40:bb:36:a1:
                    c4:66:82:05:d4:09:be:5b:09:63:6e:28:03:92:69:
                    ed:57:73:1f:50:47:53:a1:a0:4f:7b:9c:77:b4:48:
                    dd:88:09:0f:33:4a:d2:1e:db:bd:30:c2:a4:11:86:
                    30:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9E:78:1A:39:14:D6:01:33:27:10:EB:94:D2:23:60:FA:C8:20:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b70a9d67-b5f6-31c8-a673-9673507f1355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:8c:c2:fa:c6:ff:ae:ba:94:3c:31:c0:d7:f9:bf:91:01:62:
         35:d8:99:7e:f5:40:ae:89:22:09:6e:a1:c2:ae:5b:d6:65:d7:
         36:6e:68:0e:f4:da:fc:71:3d:30:e3:4d:7a:b8:a5:b4:c5:2b:
         5b:45:4e:6b:7c:77:f4:b3:d3:c7:d5:b5:06:41:15:99:b1:11:
         5b:cb:73:e5:7c:2e:1c:12:56:c9:95:8e:98:27:d1:89:29:7a:
         e7:a1:4a:3e:c0:fb:14:84:43:90:86:fb:5a:c1:15:10:1c:df:
         36:a2:d3:fd:bd:aa:69:2a:71:82:58:b1:c8:7c:61:27:74:47:
         11:51:48:13:69:84:46:33:ec:d4:46:6d:14:0f:a9:77:ad:13:
         3c:e6:11:c8:e6:f4:6c:d9:4b:3f:a2:57:29:ec:b6:fe:6a:94:
         67:3d:57:63:e9:c2:d7:b4:16:e2:47:7f:06:84:f2:5f:14:6a:
         33:a5:25:3a:10:9b:a6:69:08:c1:82:a0:78:b4:5d:a3:31:27:
         0d:19:56:7c:7a:03:d5:4d:16:fd:7a:81:49:14:32:d4:c4:3e:
         73:52:a0:ab:ae:01:d2:2c:71:45:a4:82:42:f2:6b:3e:67:8d:
         7e:8e:9c:a7:0d:ca:68:a8:99:65:26:4c:1d:ba:f7:8e:d9:64:
         42:ad:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:22 2024 by rpki-client on console-ams.rpki-client.org