Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23834751-a010-34df-b070-a5c4afab8afa.roa
File:                     23834751-a010-34df-b070-a5c4afab8afa.roa (raw, json)
Hash identifier:          OwDxK7j2W2EsYPFAwos4tYBAM5DZrePcv5yjYDl7Hpo=
Subject key identifier:   34:5C:5A:6B:A5:CB:13:14:65:BF:D8:33:52:A1:B4:BE:10:34:99:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584773964EFD74D9280D4E2B2000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23834751-a010-34df-b070-a5c4afab8afa.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     396544
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:4e:fd:74:d9:28:0d:4e:2b:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=a47b1b45-3482-4362-b4e8-d4835124a20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:66:e5:0b:0d:49:9a:7f:e7:07:ff:8b:94:e8:
                    e1:90:0d:ff:64:c7:12:32:f0:ed:07:dc:60:e9:aa:
                    40:40:b2:3e:74:c7:7e:fc:c7:6d:10:a2:c7:ab:8f:
                    9d:7a:62:bb:97:3d:7e:6a:87:b0:87:f2:e6:24:dd:
                    33:87:56:c6:2a:c1:b5:8a:36:d8:ef:cd:f3:f3:3b:
                    7a:ce:08:03:a5:7f:44:8b:55:ba:20:cd:ae:35:ee:
                    fd:99:52:e2:1e:02:ef:84:d1:3e:7a:d7:59:a8:90:
                    1c:69:08:b4:d5:33:94:7b:13:f1:72:b5:b9:4b:78:
                    7c:32:d2:60:23:98:ac:e1:3d:2e:59:34:ac:ba:8e:
                    9b:6f:97:c7:55:31:6f:f5:8c:07:b2:e3:72:6d:61:
                    1d:80:ca:f2:f3:d4:af:fc:a0:1b:c6:44:e8:67:34:
                    b3:22:1b:45:1f:27:16:20:ad:e8:57:c7:b3:60:1c:
                    57:84:c6:ad:b2:a0:00:87:ac:26:81:13:9a:9f:a3:
                    c7:40:f5:fb:3f:68:9d:9d:46:d1:22:0d:6f:dc:7c:
                    27:7a:cb:40:6c:07:31:01:9d:f6:7d:1a:af:d5:64:
                    e8:8d:c6:e8:8c:33:72:ca:43:99:d9:a9:82:c8:06:
                    14:29:2c:5a:ce:02:95:bb:3b:bf:16:16:e3:a6:4b:
                    b7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5C:5A:6B:A5:CB:13:14:65:BF:D8:33:52:A1:B4:BE:10:34:99:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23834751-a010-34df-b070-a5c4afab8afa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a5:f4:e2:c6:fa:d4:0a:fe:62:d3:a6:d2:bd:84:e3:08:2b:
         e5:bf:c8:66:62:2f:ee:f4:a5:a5:ab:41:a1:d0:ba:4b:e3:be:
         ef:42:ab:3c:22:18:43:04:64:ff:90:04:fc:0b:77:57:e5:37:
         fd:2f:7c:d9:bf:63:32:10:f8:13:af:63:06:1a:81:2a:e3:6f:
         96:38:44:7b:05:79:60:a2:60:8b:e3:d4:58:0c:af:08:57:76:
         f6:39:73:00:b9:16:fe:f9:3f:4f:b7:48:24:c9:f9:11:c8:66:
         00:1c:4a:00:13:e1:bb:92:16:7d:45:8b:0a:e8:09:b5:21:b0:
         e4:f5:7f:e4:96:af:6d:0b:28:a8:45:a1:1f:4c:c2:53:b7:b7:
         a5:e8:ae:31:9c:f4:03:9a:9a:0e:2f:c1:54:6c:a8:a4:80:c2:
         80:27:13:36:60:2f:35:35:b6:ed:a4:e3:8a:f2:22:ed:4d:c7:
         f2:c8:99:ca:ee:fc:ee:ae:34:de:05:61:e3:56:7c:46:9d:3b:
         17:fb:1e:73:35:9f:62:41:7a:33:4c:d1:db:73:c8:b3:b1:51:
         08:fe:64:9f:e8:14:1c:d2:3d:4d:8b:b1:c5:02:28:ea:4d:17:
         09:45:68:3a:09:fb:a1:b2:46:e5:d9:ad:c8:54:fb:f0:91:14:
         a4:ad:37:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:25 2024 by rpki-client on console-fra.rpki-client.org