Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d25c327-a070-351e-a06e-6f8482438720.roa
File:                     1d25c327-a070-351e-a06e-6f8482438720.roa (raw, json)
Hash identifier:          hc18YH0pWtNRN4aoWq7GIPTifcLjMrNqS0i8hmZWKRM=
Subject key identifier:   B4:17:55:FE:14:B4:6B:E4:AD:CF:E6:F0:E1:68:5C:A3:A4:A7:15:2B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476B296BBFDFB5E32E92BD4180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d25c327-a070-351e-a06e-6f8482438720.roa
Signing time:             Thu 03 Oct 2024 12:34:54 +0000
ROA not before:           Thu 03 Oct 2024 12:34:54 +0000
ROA not after:            Wed 01 Jan 2025 13:34:54 +0000
asID:                     397199
IP address blocks:        2001:500:121::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:29:6b:bf:df:b5:e3:2e:92:bd:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 12:34:54 2024 GMT
            Not After : Jan  1 13:34:54 2025 GMT
        Subject: CN=2aca13c0-c92c-4c18-8db4-8adbe71c8b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:ba:92:8c:70:7b:4b:c1:d7:27:fe:2e:7f:
                    fb:bc:9d:5d:ac:02:ee:a5:bb:f8:16:18:1a:37:f6:
                    fe:9d:4c:55:86:7c:eb:66:6c:1e:63:61:05:b2:19:
                    67:77:97:10:8c:60:cf:15:5b:78:12:29:8a:46:d8:
                    bc:eb:c2:c5:3b:e7:6c:d1:39:ad:a5:ad:d5:b8:d8:
                    5d:0e:27:3d:a8:16:77:32:f6:1e:31:76:06:d6:ae:
                    3a:03:df:d2:28:bf:4f:45:4a:08:63:19:10:05:9e:
                    6d:81:4d:30:c0:38:25:07:e8:64:69:1b:6a:73:11:
                    42:05:a9:9f:18:89:13:3d:d1:de:7f:d2:b8:cf:85:
                    23:f8:97:38:18:18:72:34:b7:a2:f6:60:d7:ee:7d:
                    99:be:5c:03:dd:6d:9d:fe:3d:6b:da:05:f9:f7:58:
                    6d:e4:4e:ab:98:85:e2:09:ed:9d:a6:9d:f2:16:42:
                    63:a6:0a:52:e6:16:5c:5d:5e:0a:ab:d7:86:34:60:
                    d4:a2:40:30:6e:26:2f:2a:7a:db:39:82:b6:f7:79:
                    2f:07:b6:b3:96:e6:e3:1e:5e:3e:cd:ca:64:ca:fb:
                    65:ba:ee:b7:60:0e:85:29:63:60:c6:49:10:e6:f5:
                    7c:56:02:8e:64:e2:ee:f8:c7:aa:dc:f2:39:41:2e:
                    72:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:17:55:FE:14:B4:6B:E4:AD:CF:E6:F0:E1:68:5C:A3:A4:A7:15:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d25c327-a070-351e-a06e-6f8482438720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:fc:39:78:05:91:e9:9a:90:4e:8e:0a:a3:49:b5:d0:2b:e1:
         dc:41:71:1b:45:ae:c3:dd:74:e1:d2:9b:a4:ef:79:f0:e7:38:
         1a:6e:0d:30:c7:26:4f:5c:1f:af:0b:76:fb:6a:a7:57:71:9e:
         cc:ad:6d:ce:2f:bc:c3:db:c5:5b:99:51:c2:48:b5:e1:71:1f:
         9b:83:9b:79:70:3a:9a:f5:1e:cf:60:ca:5b:ce:c5:65:45:31:
         39:34:6c:ad:a6:5f:2f:0b:ca:f1:9e:95:4e:e3:3c:ae:e1:31:
         93:92:aa:b8:e2:19:55:d4:f1:85:46:2d:84:b4:32:41:75:58:
         51:a0:bb:b5:c5:ff:30:18:19:a0:c4:4e:d9:77:9f:75:96:a4:
         ca:97:de:d7:50:e6:a9:1b:a3:2f:c4:32:ed:80:9f:3d:8e:f5:
         9a:60:02:44:e7:2a:b5:12:51:f7:71:87:ed:25:92:d5:9d:54:
         88:11:cc:c4:46:c0:ee:4d:ed:5e:71:44:3f:72:9a:97:d4:82:
         6e:0a:83:78:1c:54:1f:9e:e4:96:9b:06:84:9d:22:44:9c:c2:
         7f:14:0a:e8:c9:1c:a8:f7:e4:0c:e8:83:0a:df:71:f9:69:15:
         3e:aa:6c:35:cf:d8:ef:c4:4d:5d:67:22:6e:eb:7f:56:d2:2f:
         f6:69:88:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:58 2024 by rpki-client on console-ams.rpki-client.org