Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1938f346-fefc-3c0b-a7d0-86089e02356e.roa
File:                     1938f346-fefc-3c0b-a7d0-86089e02356e.roa (raw, json)
Hash identifier:          vx5Jy/2h3lEZXmWLJJ43AsGCyXvkSRJrm9LDWE63Ntg=
Subject key identifier:   E8:F3:9D:BD:D0:53:8F:68:A6:E6:4F:01:47:19:69:85:D0:7E:DF:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0885AB60349D77CD839E0E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1938f346-fefc-3c0b-a7d0-86089e02356e.roa
Signing time:             Thu 14 Nov 2024 13:35:45 +0000
ROA not before:           Thu 14 Nov 2024 13:35:45 +0000
ROA not after:            Wed 12 Feb 2025 13:35:45 +0000
asID:                     396573
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:5a:b6:03:49:d7:7c:d8:39:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:45 2024 GMT
            Not After : Feb 12 13:35:45 2025 GMT
        Subject: CN=60348924-3ecb-4818-971d-62cabcce7d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b5:1e:99:85:cc:d1:9f:2c:55:a1:9c:3d:ca:
                    cf:f7:48:e0:6c:e0:d4:7f:22:9c:db:56:17:08:dc:
                    b1:3e:a5:71:a3:3d:e7:1b:69:c2:16:9c:29:b3:33:
                    ba:bd:69:2c:bc:aa:14:21:52:74:97:c9:6b:27:0e:
                    4b:66:45:c7:40:6a:9d:fa:22:48:ad:5f:8d:86:67:
                    a4:63:7d:97:56:a5:76:3d:24:1a:c4:06:99:af:5a:
                    fb:d8:a5:38:a3:0e:dd:ca:0f:fe:a6:ad:c5:72:86:
                    ac:14:15:95:23:61:ab:55:d3:af:22:06:c5:79:cf:
                    61:7f:70:59:1e:b6:1c:9f:1d:c9:ff:d4:f5:59:c0:
                    a8:d8:85:a1:b7:52:9c:5c:c6:8d:fc:bb:6b:00:c6:
                    fb:b7:89:f7:f2:80:95:dc:99:bc:41:25:a6:9b:2e:
                    67:58:ca:27:6d:c8:90:f1:ec:b1:52:06:56:94:8b:
                    f9:32:50:5f:6e:1b:28:41:7b:b0:31:df:fd:b1:50:
                    9f:0e:92:5d:3c:0e:67:96:ad:6d:6f:ff:cc:cf:a1:
                    b7:ef:f2:06:23:3b:f5:73:b0:28:7a:16:09:bb:85:
                    25:65:35:81:6c:fc:bf:f1:7f:1a:d3:8c:9a:fb:18:
                    18:e1:2e:fd:1f:df:2d:c6:4c:e1:9d:3d:74:fa:cb:
                    4a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F3:9D:BD:D0:53:8F:68:A6:E6:4F:01:47:19:69:85:D0:7E:DF:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1938f346-fefc-3c0b-a7d0-86089e02356e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:3b:3d:ba:8a:34:9f:9a:e6:c5:51:e4:5d:0c:2e:b3:af:58:
         45:c0:0b:38:60:ce:18:22:52:00:aa:a9:b3:71:76:2b:02:d8:
         96:7a:3c:9b:93:b6:0e:09:63:bd:e3:bc:f9:99:4d:0a:8a:bc:
         dd:31:cc:57:cf:e6:01:19:18:6f:f7:8e:96:2d:3b:23:fa:83:
         b5:24:ae:d7:df:8c:7b:0f:eb:ed:b6:93:69:95:3e:ff:63:f2:
         c9:38:14:82:92:6c:86:91:db:59:a7:aa:a3:db:e8:9c:3f:f1:
         c0:58:68:14:02:df:ec:ff:b8:cb:10:95:7f:92:dc:b0:ef:1f:
         24:49:16:6e:79:d1:10:fb:55:63:c3:78:25:c3:68:ec:39:d1:
         db:a8:6e:1f:9f:57:71:26:9b:a5:64:9c:18:29:df:e0:50:39:
         2f:0c:20:f1:8f:85:95:d6:ee:66:5e:c2:bc:11:a4:fb:59:07:
         47:74:19:52:e4:d6:58:a3:f3:ef:91:06:88:4c:4d:e1:30:5a:
         ae:19:3a:bb:8f:1c:f1:4d:4c:90:27:56:13:fa:33:ff:77:df:
         3c:5f:f2:44:90:b8:c4:b5:f6:9a:69:ec:15:d9:d8:39:53:82:
         aa:77:ae:c7:a8:07:65:0c:7b:35:35:6c:9a:5b:bc:f7:8a:0c:
         02:2a:e2:65
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfgiFq2A0nXfNg54OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTExNDEzMzU0NVoXDTI1MDIxMjEzMzU0NVowLzEtMCsGA1UEAxMk
NjAzNDg5MjQtM2VjYi00ODE4LTk3MWQtNjJjYWJjY2U3ZDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rUemYXM0Z8sVaGcPcrP90jgbODUfyKc21YX
CNyxPqVxoz3nG2nCFpwpszO6vWksvKoUIVJ0l8lrJw5LZkXHQGqd+iJIrV+Nhmek
Y32XVqV2PSQaxAaZr1r72KU4ow7dyg/+pq3FcoasFBWVI2GrVdOvIgbFec9hf3BZ
HrYcnx3J/9T1WcCo2IWht1KcXMaN/LtrAMb7t4n38oCV3Jm8QSWmmy5nWMonbciQ
8eyxUgZWlIv5MlBfbhsoQXuwMd/9sVCfDpJdPA5nlq1tb//Mz6G37/IGIzv1c7Ao
ehYJu4UlZTWBbPy/8X8a04ya+xgY4S79H98txkzhnT10+stKJwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOjznb3QU49opuZPAUcZaYXQft9wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTkzOGYzNDYtZmVmYy0z
YzBiLWE3ZDAtODYwODllMDIzNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQByOz26ijSfmubFUeRdDC6zr1hFwAs4YM4YIlIA
qqmzcXYrAtiWejybk7YOCWO947z5mU0KirzdMcxXz+YBGRhv946WLTsj+oO1JK7X
34x7D+vttpNplT7/Y/LJOBSCkmyGkdtZp6qj2+icP/HAWGgUAt/s/7jLEJV/ktyw
7x8kSRZuedEQ+1Vjw3glw2jsOdHbqG4fn1dxJpulZJwYKd/gUDkvDCDxj4WV1u5m
XsK8EaT7WQdHdBlS5NZYo/PvkQaITE3hMFquGTq7jxzxTUyQJ1YT+jP/d988X/JE
kLjEtfaaaewV2dg5U4Kqd67HqAdlDHs1NWyaW7z3igwCKuJl
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:24 2024 by rpki-client on console-fra.rpki-client.org