Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c6fcb95a-2f7e-31fb-8c24-5344238efbcd.roa
File:                     c6fcb95a-2f7e-31fb-8c24-5344238efbcd.roa (raw, json)
Hash identifier:          xGhuEB/aTYRLoYTWregdGL/1twuWuMBL/tQTLXd5aNk=
Subject key identifier:   75:A0:22:BA:84:0E:5C:EC:6D:B9:B2:D9:E2:CB:78:B8:EF:AB:2B:02
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584726D0640C93049058E7787400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c6fcb95a-2f7e-31fb-8c24-5344238efbcd.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     36626
IP address blocks:        2620:74:2a::31/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:64:0c:93:04:90:58:e7:78:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=71214f77-d8be-4004-9ca5-bbe481dee377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:1f:78:2f:c0:ed:fe:a1:46:91:93:8f:3c:
                    66:25:ff:44:f9:7e:5b:c9:fd:34:28:f9:c7:20:60:
                    dc:42:c7:f8:c4:03:e4:56:01:5d:26:fc:f1:3a:f1:
                    9d:7a:89:36:e7:e1:6a:e8:eb:13:32:83:1c:7f:5a:
                    2d:0b:8a:07:4b:79:e3:0a:3d:70:72:9a:c4:9c:10:
                    b0:61:ff:19:1a:0e:a1:12:54:cf:5e:58:8f:79:33:
                    e1:e2:54:b2:73:56:6c:9e:3f:2a:a1:fe:48:13:ce:
                    52:8a:f9:65:37:7a:cf:13:42:98:7e:9f:51:82:c4:
                    9d:cb:2a:04:24:a0:56:47:6b:61:96:4a:a5:62:d2:
                    90:37:f6:d5:98:96:8d:c4:79:cc:8c:e6:5b:c1:cb:
                    b6:85:07:7f:ac:27:ea:7e:8a:2f:01:7b:a7:6b:c2:
                    44:cb:22:21:4d:54:61:9d:87:cc:36:49:58:b7:3f:
                    8a:f0:6e:cb:0b:68:64:3c:23:f9:e4:80:37:56:9a:
                    61:6e:b2:35:96:35:63:80:91:8e:c6:21:d6:c7:90:
                    dc:76:c3:e9:96:6c:77:42:d0:2b:7e:3e:a7:85:fd:
                    64:9a:cd:3f:be:8d:86:56:9a:07:92:59:ee:52:09:
                    57:ec:70:5a:0c:cd:84:41:d8:eb:69:3f:dc:7f:bc:
                    33:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A0:22:BA:84:0E:5C:EC:6D:B9:B2:D9:E2:CB:78:B8:EF:AB:2B:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c6fcb95a-2f7e-31fb-8c24-5344238efbcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:18:56:c0:a1:4a:c6:ab:37:6d:1c:2e:94:c4:a1:7b:cb:78:
         4d:4e:8a:ef:a7:76:63:66:49:74:d8:04:b9:a1:3a:bc:3b:38:
         2f:9d:f6:e2:eb:d5:a1:f6:a4:94:00:98:11:f7:d0:e6:89:f0:
         49:80:94:26:01:0e:e2:e5:95:54:98:db:36:79:8d:a4:6d:ea:
         9b:47:56:80:18:fe:fb:7b:2b:5e:6f:41:14:2c:bf:d7:14:26:
         94:db:dd:fa:05:a7:be:b4:49:c8:a0:d8:62:bd:34:8c:f7:47:
         48:ac:f5:13:1a:78:ee:24:db:7c:94:9f:4a:e5:24:4a:bd:2b:
         e5:6e:31:0c:3d:a9:65:b9:07:30:32:a3:65:88:ec:f9:8b:f1:
         2e:ee:c2:c2:eb:f2:1b:50:40:7f:1e:23:50:8c:e6:c9:04:eb:
         dc:40:c6:fc:a4:82:d5:b0:8e:f8:93:06:86:c4:09:82:a9:cd:
         40:54:c4:f3:9d:96:60:02:8a:71:0c:e6:d8:35:a7:4d:6e:92:
         58:a7:9d:2e:f1:9a:2d:e4:fc:71:0f:4e:3c:d9:78:c6:bf:6c:
         4b:43:a8:e1:80:18:ee:36:2e:7d:6c:4b:4d:43:ed:b9:cd:89:
         63:5f:5a:be:47:f0:e9:95:2b:d9:21:bf:a7:17:23:a3:76:9e:
         ce:e2:8d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:44 2024 by rpki-client on console-fra.rpki-client.org