Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda59871-a0dc-3ed0-824a-0ce4665f8984.roa
File:                     eda59871-a0dc-3ed0-824a-0ce4665f8984.roa (raw, json)
Hash identifier:          q2owf/S/SU9LbpEGONkWn7K/npNldeDD5e8XyGQD6tU=
Subject key identifier:   A2:A2:91:F3:8B:BD:C5:42:1E:81:B9:F1:A8:88:6F:82:D5:CA:23:F5
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858478E1BCB3751BA5E27DAA48F80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda59871-a0dc-3ed0-824a-0ce4665f8984.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     0
IP address blocks:        2620:74:36::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:cb:37:51:ba:5e:27:da:a4:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=d867b422-21fd-47f9-ac72-4c40f7cda12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cd:65:8a:8d:63:2a:5e:ab:64:ba:4b:70:a5:
                    33:f8:60:0e:7a:a9:75:02:bd:d9:c6:c2:ab:0a:fd:
                    dc:09:c7:5a:38:26:9c:1d:0d:50:06:7c:72:4d:13:
                    2d:48:48:9f:68:0d:69:ef:b5:e8:7e:ce:33:78:b4:
                    4e:29:a1:2e:6b:cd:1d:af:88:40:42:06:ee:36:a2:
                    4c:cc:21:d7:a5:77:2a:14:db:86:d2:7e:2c:94:35:
                    ad:fa:b6:ee:1f:b9:e9:26:85:22:f5:6d:22:b6:93:
                    f0:74:82:7c:6a:de:20:d2:50:e6:9a:df:42:5b:cb:
                    4a:07:ab:d9:9f:cb:bf:30:c8:72:9f:de:34:f4:8a:
                    ae:26:32:95:3b:84:3b:d3:58:81:c3:ce:a2:c1:78:
                    0e:90:2c:dd:8d:0f:1f:0c:71:e1:c4:ca:ce:7a:b8:
                    6a:23:f8:7d:44:fc:f6:5c:bd:3b:b6:71:bf:cb:2f:
                    d8:ed:46:c4:06:a7:0e:e4:4e:29:ec:ce:09:1b:ab:
                    eb:9f:74:80:e2:88:fb:fa:1c:7c:63:fe:41:4d:6a:
                    3a:04:9f:c4:f6:3c:f6:78:a7:bb:47:2a:ea:9b:b6:
                    71:f0:c2:91:c8:49:23:42:5e:de:6a:82:c4:a6:bc:
                    4a:75:3c:f2:7c:01:71:2e:fb:83:af:06:7f:3b:75:
                    4b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A2:91:F3:8B:BD:C5:42:1E:81:B9:F1:A8:88:6F:82:D5:CA:23:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda59871-a0dc-3ed0-824a-0ce4665f8984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:36::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:31:b7:f6:5c:ae:04:66:91:a5:ae:4e:e1:bd:9a:91:10:02:
         19:af:db:a1:1c:7f:7e:a1:d4:de:cd:7d:b9:43:bd:d5:55:5c:
         2d:40:74:82:e7:ef:06:f2:a3:bc:7f:89:4b:b1:9c:c1:44:f8:
         d0:9d:27:44:b9:51:65:e9:1c:37:d5:b4:cd:db:6d:7d:c7:db:
         63:bb:87:af:9a:7b:cf:24:36:df:af:42:68:c9:bb:b5:77:5b:
         74:c2:01:69:a3:5c:50:cc:4e:9a:f1:49:5d:58:10:d1:9e:c4:
         36:40:49:99:b4:2e:8c:57:d9:94:0d:3a:69:51:72:01:3b:05:
         95:10:84:f8:74:91:dc:78:10:19:51:55:a2:66:0f:65:dd:81:
         de:7c:c2:13:0c:7b:78:d1:2e:46:a9:d1:5c:d9:d0:3b:94:94:
         ae:77:55:5a:2a:7d:39:ea:82:d8:f2:e7:24:08:9f:a0:b8:d2:
         51:d2:c9:46:eb:31:e8:bd:08:c8:38:e6:6e:34:72:9d:c1:c9:
         f5:7a:76:b4:ab:97:17:41:77:5b:dd:0b:2a:53:53:95:9c:43:
         dd:ad:da:cf:e5:b3:63:b8:24:8e:5f:13:28:b1:e9:2f:50:6c:
         bd:04:2e:bc:ea:dc:c3:d9:ad:ce:b5:dd:a5:a4:14:ff:dd:bf:
         f6:8d:70:1b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeOG8s3UbpeJ9qkj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk
ZDg2N2I0MjItMjFmZC00N2Y5LWFjNzItNGM0MGY3Y2RhMTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc1lio1jKl6rZLpLcKUz+GAOeql1Ar3ZxsKr
Cv3cCcdaOCacHQ1QBnxyTRMtSEifaA1p77Xofs4zeLROKaEua80dr4hAQgbuNqJM
zCHXpXcqFNuG0n4slDWt+rbuH7npJoUi9W0itpPwdIJ8at4g0lDmmt9CW8tKB6vZ
n8u/MMhyn9409IquJjKVO4Q701iBw86iwXgOkCzdjQ8fDHHhxMrOerhqI/h9RPz2
XL07tnG/yy/Y7UbEBqcO5E4p7M4JG6vrn3SA4oj7+hx8Y/5BTWo6BJ/E9jz2eKe7
Ryrqm7Zx8MKRyEkjQl7eaoLEprxKdTzyfAFxLvuDrwZ/O3VLWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKKikfOLvcVCHoG58aiIb4LVyiP1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWRhNTk4NzEtYTBkYy0z
ZWQwLTgyNGEtMGNlNDY2NWY4OTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAA2
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF4xt/ZcrgRmkaWuTuG9mpEQAhmv26Ecf36h1N7NfblDvdVVXC1A
dILn7wbyo7x/iUuxnMFE+NCdJ0S5UWXpHDfVtM3bbX3H22O7h6+ae88kNt+vQmjJ
u7V3W3TCAWmjXFDMTprxSV1YENGexDZASZm0LoxX2ZQNOmlRcgE7BZUQhPh0kdx4
EBlRVaJmD2Xdgd58whMMe3jRLkap0VzZ0DuUlK53VVoqfTnqgtjy5yQIn6C40lHS
yUbrMei9CMg45m40cp3ByfV6drSrlxdBd1vdCypTU5WcQ92t2s/ls2O4JI5fEyix
6S9QbL0ELrzq3MPZrc613aWkFP/dv/aNcBs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:44:28 2024 by rpki-client on console-ams.rpki-client.org