Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce2c1ab7-55b3-3679-a582-63105f44cb11.roa
File:                     ce2c1ab7-55b3-3679-a582-63105f44cb11.roa (raw, json)
Hash identifier:          SFOFrcQM4xwof7HdsUKmv0T1Zit1iBt/F17p5z2dsuI=
Subject key identifier:   9C:E9:88:86:18:15:90:25:85:B4:20:F6:22:92:DF:52:EB:56:13:F1
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847F15520DD73EC1E664FD55B80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce2c1ab7-55b3-3679-a582-63105f44cb11.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     397209
IP address blocks:        2620:74:2b::31/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:20:dd:73:ec:1e:66:4f:d5:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=0787b253-9acb-472a-aa9d-4338cdb8d7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:ca:33:8d:ab:65:06:74:64:2a:a1:1c:3d:
                    19:aa:f1:7d:67:0a:37:e0:59:66:0f:64:84:f4:1e:
                    f0:3d:d2:ea:82:4f:45:12:52:74:18:24:3e:2c:78:
                    b2:33:26:94:63:04:70:10:19:a7:87:cc:23:69:36:
                    1e:ec:2a:f9:6d:25:93:98:da:3f:a8:36:c3:bf:3c:
                    8f:a9:76:07:c4:fd:1e:b6:2f:3c:bb:69:9c:f6:44:
                    2b:7a:00:83:c4:af:75:85:ff:f4:30:4f:3c:3a:33:
                    dd:8c:2a:5e:71:63:2d:45:91:7c:80:e1:b5:97:28:
                    da:b8:55:3d:43:41:ee:9a:9a:4a:9c:a7:1f:b7:8f:
                    20:e3:90:bf:27:8c:dc:39:37:da:8f:a6:2e:a3:38:
                    aa:f0:36:c3:ef:75:07:e0:bf:24:86:ed:14:3e:ae:
                    22:23:9c:0c:13:34:cd:f8:38:65:75:f2:9e:91:91:
                    a4:a0:97:91:41:42:9a:2f:23:bf:3f:c8:8e:14:c5:
                    44:17:1c:95:a7:1f:22:5c:c9:e0:36:65:64:ec:c0:
                    35:88:34:32:41:ac:9d:4c:d0:1f:58:a0:18:53:09:
                    1b:49:34:9a:0f:16:88:b0:8f:06:1d:c5:10:ae:48:
                    5d:9d:e4:02:5f:93:c8:ac:07:86:07:8e:bc:e2:d9:
                    53:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E9:88:86:18:15:90:25:85:B4:20:F6:22:92:DF:52:EB:56:13:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce2c1ab7-55b3-3679-a582-63105f44cb11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:00:5f:91:44:a3:79:af:60:ff:7f:5a:74:ac:ed:db:c8:
         bb:37:7a:5d:7c:d5:9c:d9:c1:49:15:9e:2e:6f:e0:6b:7f:3d:
         4b:fd:c5:ca:32:87:dd:2a:6a:d7:6b:e4:ae:53:db:c4:6f:83:
         cb:2d:c3:fa:5c:c5:49:e4:1a:ea:84:c5:69:13:55:4e:69:8c:
         65:69:75:9e:d0:21:d3:37:ea:81:e0:f0:e5:82:00:4b:54:f5:
         91:3d:f5:3a:bb:ed:4d:be:e2:b5:28:52:b2:f6:0e:86:5a:a0:
         ce:29:52:ea:c2:82:18:03:97:f1:40:ea:1f:ec:b9:be:a4:eb:
         3e:ef:de:8b:1b:a8:ae:3a:17:9f:18:d0:15:6d:a7:0d:0c:fe:
         65:99:41:fa:84:f3:bd:43:57:89:ba:77:5e:59:16:14:40:a4:
         35:b6:8e:72:86:16:e5:d4:dd:54:4f:d4:e9:7d:e2:98:56:d8:
         2e:ee:f0:1c:b5:64:bc:69:84:d9:ab:3a:ff:05:49:cf:9d:cf:
         c3:87:88:e7:e5:8e:ad:ab:71:bd:3c:85:40:ca:6d:87:aa:3a:
         d9:9e:55:a9:59:c1:91:a7:ab:5a:83:e3:13:5d:bf:be:d7:01:
         f3:ad:70:74:f7:87:13:f3:35:e7:84:84:a3:13:f1:6c:4b:e4:
         a6:60:06:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:45 2024 by rpki-client on console-fra.rpki-client.org