Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b68e73c8-24af-355b-87b5-1817843ba943.roa
File:                     b68e73c8-24af-355b-87b5-1817843ba943.roa (raw, json)
Hash identifier:          ns8HRueilPjuQXYDMQ4C+RVqWC+n1i4GJ0BXXIuvoUQ=
Subject key identifier:   76:2E:1F:5A:A6:8D:F7:AE:EE:6D:6D:B3:B5:52:4B:4E:1C:39:9F:DD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A1899B75F5856BA3F7A680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b68e73c8-24af-355b-87b5-1817843ba943.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2602:107:4720::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:89:9b:75:f5:85:6b:a3:f7:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=61a037b8-d688-4a13-b7fe-0f9b84046c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4f:b4:b6:54:77:88:ed:cf:d3:a1:cb:b2:00:
                    fc:6d:8d:26:0a:a7:0a:bc:3e:55:33:c2:25:cc:7c:
                    1c:71:f2:2f:9a:4f:40:bc:f8:41:86:6c:37:dc:23:
                    b5:1b:57:ed:ad:ed:a7:7d:54:00:6b:96:4a:b9:d6:
                    85:64:ea:9c:10:92:fc:5a:df:07:51:76:5b:03:32:
                    07:93:32:9d:03:86:6c:32:b5:03:eb:61:ad:ba:75:
                    20:ff:de:c6:75:cc:77:61:77:eb:70:85:91:d6:3d:
                    33:c7:fa:4d:8f:43:2e:67:a1:78:ea:a6:38:12:8d:
                    18:e3:80:48:e2:96:58:31:ca:22:5f:71:d5:ad:99:
                    fa:d3:33:68:e5:39:e8:88:76:04:20:13:8c:11:07:
                    60:cf:95:cd:9a:f2:18:32:d0:78:02:4c:a8:91:7b:
                    bf:8f:34:14:e5:e2:df:96:27:77:17:bb:c4:57:bc:
                    27:c2:5d:a3:84:5c:1d:ea:7d:9f:20:37:8c:a1:42:
                    a6:1c:60:6e:3f:54:4d:ea:aa:8a:bf:da:dd:04:4a:
                    d9:c5:d6:75:1c:e9:ca:06:1e:d3:f1:29:b1:a7:1b:
                    79:db:9c:54:0f:a4:e7:4c:24:f0:9b:5f:5f:84:cc:
                    6c:5d:23:fd:17:2e:59:4f:86:8c:a8:ae:85:f6:2d:
                    ad:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2E:1F:5A:A6:8D:F7:AE:EE:6D:6D:B3:B5:52:4B:4E:1C:39:9F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b68e73c8-24af-355b-87b5-1817843ba943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:4720::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ec:ae:8a:7c:d1:e1:fa:fc:bd:67:1f:0a:da:29:10:ad:b1:
         28:7f:5f:6f:bd:62:d7:5f:4d:cb:ac:66:6a:1e:d6:8b:30:0a:
         2a:86:f7:31:8c:7a:f4:f3:44:81:90:f3:bb:30:d6:39:3d:ef:
         50:2c:2e:d9:b3:52:65:de:a9:90:43:91:d0:e2:8a:5d:83:43:
         43:b6:fc:5c:85:3c:d8:a7:38:ae:e6:61:16:fd:9c:b8:fa:74:
         3b:2f:f7:11:88:c8:02:27:e4:d5:47:0c:a5:37:c0:95:8e:01:
         82:fe:1d:6d:ea:1f:b9:76:90:22:ec:56:2d:56:47:6a:fe:cb:
         89:eb:49:0d:6b:7c:f2:b6:67:12:e4:30:29:8d:f5:47:62:ff:
         c6:78:ef:ea:77:14:4c:5b:5b:2d:0e:2a:d4:86:5b:74:74:c6:
         24:a3:3d:9c:81:93:30:fd:24:db:e5:a0:e6:4a:f2:be:f3:72:
         1d:6e:81:7b:da:66:b2:d8:db:7d:50:fd:ea:d4:cb:0f:f8:2a:
         42:c0:7a:14:4a:b3:d3:54:cd:3b:0d:eb:df:c3:09:44:b2:be:
         cc:f6:6f:5e:50:e9:23:59:25:6f:13:f1:a0:b3:1e:19:89:ca:
         f1:36:82:69:2b:d4:88:67:c4:d2:f1:95:fa:42:82:1d:13:19:
         f8:fd:93:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:59 2024 by rpki-client on console-ams.rpki-client.org