Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12023c89-51df-3696-84ce-0c11f8fda1fe.roa
File:                     12023c89-51df-3696-84ce-0c11f8fda1fe.roa (raw, json)
Hash identifier:          nIIPGQKv0qVjCvMrV8+atA45U8Elc5XUHiO1QXRG2yM=
Subject key identifier:   4A:E2:DC:46:73:09:41:51:13:BC:2E:C7:AC:D4:E0:2E:97:B4:0B:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476B296DF7784029798B2D4500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12023c89-51df-3696-84ce-0c11f8fda1fe.roa
Signing time:             Thu 03 Oct 2024 12:34:55 +0000
ROA not before:           Thu 03 Oct 2024 12:34:55 +0000
ROA not after:            Wed 01 Jan 2025 13:34:55 +0000
asID:                     396609
IP address blocks:        2001:500:121::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:29:6d:f7:78:40:29:79:8b:2d:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 12:34:55 2024 GMT
            Not After : Jan  1 13:34:55 2025 GMT
        Subject: CN=9309d22e-3646-46a5-ac90-407fbc8fed7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:cc:09:13:b1:fd:e1:20:3e:0d:7b:a6:cc:
                    63:76:0f:e9:6a:78:fc:3f:08:3f:2e:0c:4c:3e:38:
                    f8:15:5e:3a:0b:ab:9c:9a:4b:d6:4f:fd:56:e3:ff:
                    b4:11:1f:bd:62:7d:06:57:63:35:da:2a:a9:d1:c9:
                    bb:9e:fa:40:d1:03:ca:1e:16:c1:d0:3f:a7:74:97:
                    83:4e:f0:0b:9d:4b:32:80:e1:a4:1b:9c:d6:c4:4d:
                    f8:18:5a:2c:de:05:94:07:bf:a4:52:00:45:1b:6f:
                    06:8c:13:b2:59:fd:92:ed:0d:08:e1:e6:4c:0e:32:
                    e2:65:7b:86:94:37:82:a8:5e:4c:74:42:ce:03:4a:
                    68:2e:4c:17:1b:43:d4:73:59:bc:7d:69:56:56:a4:
                    2f:06:1d:22:cb:37:59:99:c2:14:e1:82:39:fd:5a:
                    b5:7e:4f:a0:da:03:2b:75:23:9b:f3:c8:12:f9:84:
                    d6:a9:a1:cd:d4:4e:e0:f0:73:da:69:8f:25:4f:a1:
                    c1:63:f3:57:0d:11:73:e2:64:1f:bf:d5:c9:04:55:
                    17:0c:39:f1:8a:b6:fd:8a:6b:02:b5:53:13:60:19:
                    6c:e6:51:67:d6:1c:8d:aa:62:24:00:52:01:46:4e:
                    35:18:2f:f0:61:f7:2e:a2:c3:63:99:eb:ec:09:dc:
                    51:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E2:DC:46:73:09:41:51:13:BC:2E:C7:AC:D4:E0:2E:97:B4:0B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12023c89-51df-3696-84ce-0c11f8fda1fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:bb:6c:29:0b:22:c0:36:30:26:72:1b:f9:ca:d5:31:9b:f5:
         bc:8d:5f:d1:92:fe:ba:99:95:d8:d6:c0:65:e6:9b:ef:5d:4f:
         22:1a:da:27:3a:f8:37:84:ff:92:8e:1b:03:48:e7:ca:0a:fb:
         b6:de:84:ef:8d:88:93:2a:43:51:e2:7d:e1:52:ac:4b:7b:af:
         ae:4a:87:7d:df:32:71:77:2b:1d:14:24:18:09:a9:1f:17:42:
         cb:95:af:c0:0e:c9:03:31:06:9b:74:23:08:fd:c5:71:80:4f:
         e6:d0:86:55:2a:bd:f3:ff:05:be:fb:ab:bd:b9:01:30:70:4c:
         1c:ad:e6:32:92:25:49:68:7d:b8:75:e5:20:82:31:1b:35:b3:
         11:74:e1:e2:49:11:d9:a9:76:17:8c:e0:4b:82:c0:f8:34:04:
         f5:5c:a5:54:e1:38:b7:27:fe:93:e3:d8:d9:9e:91:98:db:0b:
         53:0e:6d:cd:32:bf:4c:d9:77:88:c7:ab:81:62:dc:30:67:bd:
         98:2d:6e:de:66:c5:c4:11:e5:96:e7:ee:bd:bc:36:5e:77:92:
         c8:1f:b9:eb:64:9b:f8:2a:fb:08:03:e7:33:ab:56:ae:6b:fd:
         59:bd:4b:c5:6b:8f:79:6c:e5:1c:f9:77:7d:5f:06:54:6c:57:
         d2:08:f4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:23 2024 by rpki-client on console-fra.rpki-client.org