Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74ed7e83-d8dd-35ba-9c30-87b5212ae5da.roa
File:                     74ed7e83-d8dd-35ba-9c30-87b5212ae5da.roa (raw, json)
Hash identifier:          fquK1ogeY0//OArM1eANHgUGmJtpNV5yv1S7jLK+88s=
Subject key identifier:   BC:C9:91:71:3C:BC:94:DD:6A:8D:45:40:43:91:45:47:74:A3:EA:AD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C2CE3C484855384F40000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74ed7e83-d8dd-35ba-9c30-87b5212ae5da.roa
Signing time:             Tue 24 Sep 2024 16:26:26 +0000
ROA not before:           Tue 24 Sep 2024 16:26:26 +0000
ROA not after:            Mon 23 Dec 2024 17:26:26 +0000
asID:                     397213
IP address blocks:        2620:74:1c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:2c:e3:c4:84:85:53:84:f4:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:26 2024 GMT
            Not After : Dec 23 17:26:26 2024 GMT
        Subject: CN=1deb4c69-0ba0-4592-a166-287b47d75593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:89:2d:e4:42:e3:6c:a6:a7:66:9a:76:2d:b8:
                    01:60:72:59:24:7c:3e:c7:18:8e:d4:a1:2f:87:98:
                    0b:b5:75:fd:44:2e:b4:bb:b6:61:73:bd:ba:74:47:
                    70:93:e6:5e:69:90:fc:98:b7:97:41:4e:1c:29:96:
                    a8:b0:20:3a:0b:bc:22:c1:8d:41:aa:b0:c3:77:f4:
                    e6:55:c8:e3:bd:09:d8:5d:46:84:ca:0e:5b:12:89:
                    7a:5c:25:7a:b1:09:71:f4:d0:62:2a:bb:92:2f:4e:
                    5d:f3:89:43:a0:e6:34:9b:d9:56:8b:39:8f:9b:36:
                    23:cb:61:39:19:23:14:3f:b9:a8:5f:bb:09:7d:35:
                    2c:48:1b:0f:65:69:61:74:93:46:20:33:2a:39:ba:
                    f3:1e:5a:3f:04:4e:9b:0c:c9:01:5c:4f:ba:6e:45:
                    e7:4f:55:c3:2f:46:ce:15:e3:c9:e4:78:10:e4:29:
                    ab:08:2a:8d:9e:6e:8c:aa:7f:21:b5:50:48:07:12:
                    e1:1c:d1:45:92:98:e0:f6:df:73:96:a9:9c:96:ee:
                    8b:fd:6c:17:79:8d:ce:50:bd:a2:47:2b:ca:79:aa:
                    07:71:ec:46:91:79:5e:02:82:4a:b9:bf:f0:0b:2b:
                    b0:9c:a7:18:6e:2f:1b:ce:4c:28:46:7a:da:c0:e4:
                    1f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C9:91:71:3C:BC:94:DD:6A:8D:45:40:43:91:45:47:74:A3:EA:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74ed7e83-d8dd-35ba-9c30-87b5212ae5da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:60:a3:9b:82:0a:b3:68:cf:5a:ee:f1:03:ca:50:ad:46:5c:
         77:84:64:18:8c:2a:69:f7:dd:2f:f1:34:c3:9b:01:48:98:62:
         fc:c9:8f:cc:b7:3c:59:f1:96:ba:5d:13:26:62:22:ba:5a:d8:
         fb:93:fd:98:fb:05:cb:8b:3a:06:93:8e:75:65:25:0a:0a:8c:
         6d:56:7c:aa:54:d4:d3:dc:bc:c8:9d:23:3c:0b:6c:ec:c4:3b:
         f9:0c:3d:7e:88:7d:a2:25:5c:8b:80:2d:62:11:e7:39:14:16:
         50:de:30:fa:a6:f3:1a:83:56:ea:07:82:27:2d:15:aa:3d:8c:
         3b:66:61:8f:da:c3:11:e5:9c:b5:96:e1:08:34:8c:ed:f6:84:
         6b:73:ca:74:60:c7:6d:89:e7:e5:8f:b3:b4:83:57:eb:cf:13:
         3e:6e:87:d8:d3:f5:b9:ff:39:2a:96:3a:19:ec:05:94:d5:b5:
         91:59:53:ac:ca:0b:5d:aa:cc:71:58:ed:03:82:8f:24:c6:98:
         e6:d6:3b:a9:d0:54:da:e8:35:87:f0:40:bb:25:90:e3:0a:3c:
         5f:82:ab:0b:9e:ff:68:8d:cf:8f:5c:5e:3e:b6:21:e5:3d:7b:
         5e:78:33:72:11:bc:84:ed:5f:8f:a1:23:fa:9d:e4:b0:e2:d2:
         7e:1d:4d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:05:36 2024 by rpki-client on console-fra.rpki-client.org