Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/289088e7-2494-30b1-ae68-ca383973f1d7.roa
File:                     289088e7-2494-30b1-ae68-ca383973f1d7.roa (raw, json)
Hash identifier:          Kj6psJyZPkQYDttspBKDq4Ep4bnL2ZU1urojCkGGlHE=
Subject key identifier:   83:8F:A1:BB:13:F5:2A:32:F5:D5:FA:CD:C7:98:49:99:38:EF:1C:92
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858477396530C2218915723294580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/289088e7-2494-30b1-ae68-ca383973f1d7.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     397197
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:53:0c:22:18:91:57:23:29:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=99ce8c67-f3f4-4b62-a029-011003f285e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7d:0f:0d:8e:d2:86:50:9f:74:06:14:ef:e9:
                    56:fc:38:24:f7:dc:22:b4:70:89:52:91:5d:91:db:
                    25:46:e8:81:9a:35:67:4d:25:c1:5e:b1:61:af:aa:
                    82:13:ca:a4:ad:57:dc:da:51:2b:0e:23:50:a0:0f:
                    c6:d8:a5:6e:84:e3:96:c4:56:9e:9d:57:14:3c:de:
                    c6:79:34:72:ac:e5:e0:d6:61:3f:b7:cd:93:2a:61:
                    30:38:4c:8d:c7:f9:78:16:41:c8:3b:0a:4e:c2:6d:
                    81:6a:b2:c3:d5:0c:39:49:61:51:1a:8f:ad:f6:85:
                    ec:70:84:33:2a:28:23:c7:26:4d:16:ec:17:16:76:
                    54:31:18:a4:8a:bf:ee:5a:58:88:28:9b:68:a0:dd:
                    bb:4c:f6:bb:a9:ec:e4:f8:90:4d:6b:39:07:5d:f9:
                    fd:bb:d4:c8:a9:e8:15:53:37:78:7b:c0:5e:d7:f0:
                    ba:21:95:91:ec:d7:55:fa:3d:5c:64:78:70:6e:b8:
                    fc:44:58:39:a7:b2:63:26:3c:e3:f8:25:46:9a:59:
                    7b:44:37:d8:50:d1:c5:5b:10:c9:e1:58:5e:dd:f7:
                    50:b3:ea:d8:65:20:cb:14:34:94:aa:1d:70:41:c8:
                    24:d5:ac:42:54:57:b7:56:57:2c:ba:5a:8a:72:62:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8F:A1:BB:13:F5:2A:32:F5:D5:FA:CD:C7:98:49:99:38:EF:1C:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/289088e7-2494-30b1-ae68-ca383973f1d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:42:32:a7:fc:16:9c:9a:68:00:39:56:9f:10:85:83:72:71:
         df:1f:71:0c:18:e3:20:5a:ec:10:ce:9c:89:99:48:84:e2:3f:
         e9:9a:2a:b2:45:8c:1d:8e:21:d8:8a:7d:59:7e:a1:67:f3:2a:
         22:ba:4d:0e:bd:5e:83:da:01:8c:b3:04:c6:40:5b:62:1f:cf:
         a2:ba:67:05:49:22:3d:fc:1f:98:3c:5b:25:0f:9a:8c:28:70:
         33:6a:0b:12:85:dd:96:2b:b6:20:6c:ff:6a:98:8f:f4:c2:89:
         e0:6f:f3:03:37:39:7c:58:44:a9:3c:5b:2f:e6:e1:e9:0c:82:
         f5:fe:59:d7:03:61:5f:aa:b3:fa:25:c7:72:9b:a3:60:eb:91:
         b4:82:c0:bf:d0:81:d2:9c:62:74:eb:4f:f0:02:fa:ff:6a:09:
         77:b0:32:9c:f2:7c:1e:4e:ea:f1:77:7e:e4:3a:61:ab:62:9e:
         cd:3a:ab:9f:81:40:3a:49:13:f2:eb:fa:12:ac:74:95:aa:60:
         b4:a6:fd:63:ae:3f:20:88:6e:5f:68:b6:72:fe:7a:33:22:99:
         52:fe:e3:48:ee:c7:a6:f4:79:d3:bc:96:fa:8b:c0:57:c2:8c:
         2a:21:b2:b6:c2:6c:f7:83:c5:d8:cc:ff:a2:69:7c:9c:3e:32:
         5b:4b:75:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:59 2024 by rpki-client on console-ams.rpki-client.org