Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0696a76-e917-3734-8932-13d9dc4e111b.roa
File:                     d0696a76-e917-3734-8932-13d9dc4e111b.roa (raw, json)
Hash identifier:          xfuNI3E5fsDepaHk5Nr/tIcNSdtUhOQQT/4p232H0vU=
Subject key identifier:   02:59:E1:E3:4C:BD:DE:72:D5:C5:40:CC:1F:31:27:45:AE:A9:9D:73
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328583DF2043C7B3D96D459103D2100
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0696a76-e917-3734-8932-13d9dc4e111b.roa
Signing time:             Fri 17 Dec 2021 14:41:54 +0000
ROA not before:           Fri 17 Dec 2021 14:41:54 +0000
ROA not after:            Tue 20 Aug 2024 04:00:00 +0000
asID:                     0
IP address blocks:        2620:74:94::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f2:04:3c:7b:3d:96:d4:59:10:3d:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 17 14:41:54 2021 GMT
            Not After : Aug 20 04:00:00 2024 GMT
        Subject: CN=b222fbed-ebaf-4f65-9b3f-92d3f1d98ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9d:cd:ad:6b:2a:14:31:f2:b7:8b:1a:4a:c0:
                    b7:55:89:8c:48:7b:a7:72:d2:d2:57:3b:73:84:e0:
                    aa:32:88:ee:39:ee:f1:f9:82:66:73:eb:91:9d:cc:
                    a4:1f:b5:3a:a1:a3:13:da:d5:3a:7b:db:33:10:a3:
                    e2:eb:55:13:fb:19:82:d2:2b:6c:a9:80:f0:3b:ec:
                    ce:35:89:e3:4b:26:a5:4a:59:f3:cd:44:75:83:cb:
                    81:50:9e:f8:53:fc:e8:cc:2a:8b:c0:1f:29:a8:44:
                    a7:54:14:a5:20:1d:de:71:79:84:ee:19:c5:a0:e9:
                    f2:72:33:c7:9b:45:60:12:87:9a:8a:f0:4f:13:b1:
                    84:ab:20:5f:0f:fc:3a:5e:8b:cb:20:83:64:a1:8a:
                    11:af:07:5c:f1:32:27:96:e4:fa:22:83:fb:b6:38:
                    3c:f4:be:60:90:95:ac:89:b3:ed:4a:ce:d9:e3:8c:
                    36:3b:ce:1f:ca:25:f8:4b:5c:5f:ca:43:68:51:1f:
                    2a:6c:a1:fe:83:73:d8:ae:e4:75:28:f5:1a:8a:c4:
                    aa:fb:54:88:12:fc:0d:fc:d6:e4:0b:bd:b1:50:f4:
                    5f:55:3a:96:99:cb:ae:0e:71:c4:9c:06:1f:bf:9b:
                    13:ea:e8:d4:79:99:8e:66:06:5d:10:66:61:5a:64:
                    88:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:59:E1:E3:4C:BD:DE:72:D5:C5:40:CC:1F:31:27:45:AE:A9:9D:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0696a76-e917-3734-8932-13d9dc4e111b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:94::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:c3:80:73:da:e8:29:75:41:e4:52:1b:52:05:68:66:57:f2:
         4a:ca:d0:a6:3d:63:74:8b:12:4b:27:19:9d:92:c0:3c:3a:2d:
         49:94:0d:fe:ec:41:01:e6:4b:8c:54:32:ec:a0:3b:af:87:7f:
         d2:86:ce:ef:f6:9d:cb:13:8e:fe:9b:e6:6e:9f:c8:4c:96:65:
         e3:c5:7e:69:17:6c:04:6a:4d:1f:f1:8e:bb:e7:2e:b2:bd:84:
         a6:80:ac:27:58:63:eb:9e:1b:cf:12:76:53:6e:b1:57:51:c9:
         b9:23:e3:c6:67:ab:76:4f:7a:29:f2:de:33:75:8e:fc:a9:de:
         e7:d0:4b:ba:ca:37:ad:00:47:de:ce:aa:98:ed:9b:23:ff:6d:
         44:d8:ce:a9:6f:a5:6d:7f:4c:dd:70:80:da:a5:1f:60:ad:1b:
         dd:9d:76:0b:d8:65:cd:03:2e:80:ad:e5:cb:7c:d4:d2:97:87:
         5d:c1:9c:f5:b3:50:13:fd:3f:86:56:10:e0:9e:8e:38:30:a9:
         d3:bc:1e:8e:85:ce:06:a5:22:10:95:68:d7:f9:86:5c:7f:80:
         30:63:35:67:9a:db:f1:b3:41:70:34:36:93:cb:cf:74:5b:aa:
         4c:41:de:6b:ff:91:fb:90:dd:96:bf:07:4f:4b:64:66:ec:be:
         ce:ff:09:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:12:12 2024 by rpki-client on console-ams.rpki-client.org