Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e80abfa7-5b3a-3676-8086-5f7e018d8aa5.roa
File:                     e80abfa7-5b3a-3676-8086-5f7e018d8aa5.roa (raw, json)
Hash identifier:          INg6fAXmSACbPvJBXukYrdOVizruNVRJXUnk5QdeA3w=
Subject key identifier:   1D:3E:17:4C:B5:AE:E9:60:3F:58:E4:90:13:AA:CE:06:2D:E4:26:4D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584726D071FE4B1BE6DA061878A0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e80abfa7-5b3a-3676-8086-5f7e018d8aa5.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     397196
IP address blocks:        2620:74:2a::31/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:71:fe:4b:1b:e6:da:06:18:78:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=db750d2c-4996-471c-babf-5739d76a2e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:d8:45:c1:05:8d:c6:1b:6f:75:94:4f:2c:
                    1f:6f:93:2d:dc:60:29:7c:39:c5:80:2a:bf:4c:e5:
                    86:2a:38:89:fc:1d:85:2b:b2:8e:b1:36:e0:62:c5:
                    aa:72:41:1f:c3:d0:22:99:76:ab:6a:f5:2a:9c:8f:
                    3c:48:80:8b:e0:dc:6e:1f:ed:2e:e5:a9:7f:a3:53:
                    3d:1c:c9:27:63:c1:b6:09:56:b2:25:2c:90:aa:94:
                    eb:2a:a8:e5:7b:91:49:15:97:cd:cd:fb:c6:12:16:
                    35:02:42:42:f8:8c:1f:78:dc:6b:10:ad:f2:ce:5f:
                    4f:65:25:0c:cd:fa:25:40:88:9a:ee:ac:18:5e:36:
                    dc:99:88:d5:58:fd:00:76:77:05:05:02:71:d9:da:
                    3f:09:ca:fb:50:a5:f9:54:7d:f6:00:95:e3:05:e4:
                    45:68:07:48:a2:c8:3b:97:79:ee:3f:e9:b4:2f:8f:
                    58:c3:5e:d5:75:35:94:8f:34:b7:f2:1b:45:e4:a5:
                    42:15:67:bd:7f:20:98:b0:0e:75:ee:80:90:65:57:
                    0b:f9:7e:bc:38:45:02:96:eb:d7:97:fe:d2:2a:d6:
                    b0:2e:12:8e:fa:19:16:d9:c7:bc:9f:64:e4:6c:2b:
                    80:6b:2c:ba:2c:1b:d3:b0:76:4d:a9:82:c2:c2:d8:
                    fe:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3E:17:4C:B5:AE:E9:60:3F:58:E4:90:13:AA:CE:06:2D:E4:26:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e80abfa7-5b3a-3676-8086-5f7e018d8aa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:78:3a:c9:1e:4b:61:b4:cb:00:a4:e7:67:52:38:d0:a7:d1:
         8e:fd:81:14:8f:63:8e:55:2a:07:af:13:e5:0f:4e:41:0b:37:
         59:3b:0e:69:27:d8:38:aa:7b:c8:3c:c5:7f:0c:1c:6f:c8:24:
         d0:e1:e9:56:00:91:cd:8e:52:e7:76:91:56:75:8a:ef:1b:4b:
         5e:b5:b3:3c:ed:fe:b8:2f:64:ad:a6:a5:0a:60:78:a1:12:33:
         71:bb:74:34:c8:2f:2e:c8:2f:65:50:d1:38:0d:92:4e:e1:fb:
         e2:5e:1e:2a:da:0e:31:df:03:b7:94:c4:e3:a5:9c:d9:db:7a:
         05:c5:a7:98:5a:3c:50:f0:1d:a5:c6:77:37:d8:c9:38:ef:18:
         a9:cd:55:f5:a2:21:6e:35:d5:05:1d:7c:5d:de:e8:8d:aa:8d:
         c2:4b:6c:62:2f:ef:90:dc:95:ec:c8:46:b9:89:75:a1:43:0a:
         fc:de:99:9f:1e:e1:ff:e6:00:64:c1:c4:7f:3d:33:e6:f9:06:
         e0:20:ba:bb:c3:f6:ec:b8:68:a1:90:03:45:6e:e1:4a:4e:4f:
         0d:d2:a7:9e:1c:e7:aa:d8:8a:7b:49:10:99:a4:df:5a:08:b1:
         d9:f6:c2:4c:0c:40:92:aa:d8:91:8b:9d:be:eb:84:4f:c2:6b:
         d3:8b:70:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:26 2024 by rpki-client on console-ams.rpki-client.org