Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd67ddd1-a432-367e-917b-469914bddcb2.roa
File:                     fd67ddd1-a432-367e-917b-469914bddcb2.roa (raw, json)
Hash identifier:          NU5iUgFw+a2wa1auC8IgiskEgRwa8/bWVMHkKjedcYs=
Subject key identifier:   16:81:F1:BC:71:18:56:49:B7:AB:D3:C7:46:74:63:9F:50:5C:FE:40
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858459091FE353D225A3F1EB54880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd67ddd1-a432-367e-917b-469914bddcb2.roa
Signing time:             Tue 16 Apr 2024 12:36:38 +0000
ROA not before:           Tue 16 Apr 2024 12:36:38 +0000
ROA not after:            Mon 15 Jul 2024 12:36:38 +0000
asID:                     7342
IP address blocks:        2620:74:3f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:91:fe:35:3d:22:5a:3f:1e:b5:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 16 12:36:38 2024 GMT
            Not After : Jul 15 12:36:38 2024 GMT
        Subject: CN=63e4674e-e5c1-4ea2-8ecc-eb121ab95861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0b:04:b3:44:61:3f:d1:03:20:0d:2d:be:2e:
                    4d:66:54:81:b9:b9:aa:c9:70:26:d1:c3:ce:e4:87:
                    3d:63:dc:cb:af:d1:4f:c9:1a:4d:08:7a:53:07:43:
                    69:ea:07:aa:1f:21:05:2d:27:5d:62:84:25:31:3a:
                    aa:d7:82:6b:6a:07:e2:3a:95:ea:80:3f:20:51:62:
                    4d:ff:c2:4d:e3:c3:4b:22:02:48:17:62:56:7b:a8:
                    f0:7a:e7:36:e3:01:f1:e5:4f:26:3b:dd:0a:c9:fe:
                    a1:ff:31:7d:c6:1f:99:7e:ee:fa:4a:ce:fc:e9:c2:
                    99:68:d0:93:38:f4:08:29:f1:f8:3d:e5:68:a9:0b:
                    cb:35:0d:7d:db:dc:88:a0:97:bd:77:e4:a6:0b:c0:
                    f5:3d:d5:71:d7:88:c9:cf:09:56:f9:e5:7a:3a:bc:
                    18:9d:f9:68:90:8a:b3:54:b8:ba:c0:e3:b1:d2:fb:
                    ca:bf:e3:60:88:8e:71:15:ab:64:6d:55:90:27:fb:
                    c8:f1:71:1c:d0:1e:f7:af:98:31:90:f5:d4:da:90:
                    b7:98:f7:12:9f:cc:db:b8:36:6b:ea:4e:05:be:90:
                    b9:57:0d:64:20:a3:fa:6f:29:4b:25:a6:cd:29:56:
                    f6:83:39:42:fe:fe:e2:a1:9e:49:c0:1f:df:ed:4b:
                    4f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:81:F1:BC:71:18:56:49:B7:AB:D3:C7:46:74:63:9F:50:5C:FE:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd67ddd1-a432-367e-917b-469914bddcb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:3f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:f8:0b:f7:8c:2f:90:55:74:2a:7c:17:c1:18:a3:88:dc:1b:
         ec:95:1d:83:18:46:2b:fb:ab:45:66:25:bd:fb:17:2e:4f:f9:
         64:b7:54:dc:8e:4a:25:e5:b3:29:6b:96:0d:70:d5:5c:9c:90:
         bb:92:e0:72:20:ac:0e:7d:e3:b7:8a:01:15:ec:2c:cf:5f:cf:
         a0:38:1b:92:c1:d6:08:ac:f6:79:fd:73:d8:a8:cd:19:db:d4:
         4a:53:d1:48:75:9d:0f:ba:d9:5f:9c:e0:c0:ec:6f:bd:7d:0a:
         ca:31:e1:0b:e4:78:d6:16:7e:7e:d4:92:29:09:ef:2d:90:d0:
         9b:3d:b5:86:ba:de:8e:7c:cc:01:26:df:8c:46:b5:ec:ca:e5:
         97:bb:af:0b:60:25:46:d0:33:eb:a9:f4:5f:dc:fa:4e:93:e9:
         6e:76:86:6b:63:fc:3e:f2:0d:9d:46:12:4a:72:3d:a9:44:ef:
         f2:74:55:d2:83:be:c1:c7:5d:68:49:fd:7d:39:6a:df:c9:6f:
         30:19:45:a1:24:28:43:c8:db:ea:96:50:09:46:73:28:9a:fc:
         a7:45:87:a7:95:87:85:f6:06:f5:53:ed:6f:2a:b4:a8:2d:73:
         b1:67:ec:d6:30:e4:df:7d:ef:b4:70:ce:1b:ba:0d:11:90:ab:
         1d:71:b0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:40:09 2024 by rpki-client on console-ams.rpki-client.org