Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/392b2cc4-7913-3f99-827b-08be7b509439.roa
File:                     392b2cc4-7913-3f99-827b-08be7b509439.roa (raw, json)
Hash identifier:          ORu1AWZhYkLcNwzsMIyI/dDsZCcmH1KjaSc1sGPUDCI=
Subject key identifier:   66:28:72:AB:1F:20:4C:09:2B:52:F0:28:6A:68:80:0D:53:A7:52:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF51F15C71CB8FBD8AC20E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/392b2cc4-7913-3f99-827b-08be7b509439.roa
Signing time:             Tue 12 Nov 2024 13:40:04 +0000
ROA not before:           Tue 12 Nov 2024 13:40:04 +0000
ROA not after:            Mon 10 Feb 2025 13:40:04 +0000
asID:                     397212
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:1f:15:c7:1c:b8:fb:d8:ac:20:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:04 2024 GMT
            Not After : Feb 10 13:40:04 2025 GMT
        Subject: CN=f03e46c8-d6bb-4d69-892e-b1305c6b52d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2f:a9:b8:98:66:cc:b3:a5:d3:6a:5c:b8:a1:
                    bb:d5:02:0f:36:82:0b:2f:c6:43:8a:69:a8:1d:b2:
                    f5:18:9f:fb:52:60:1b:30:53:4d:7e:6f:76:d7:b0:
                    c1:c3:53:83:25:84:b1:9a:e2:4a:61:e3:b7:91:9b:
                    19:4c:64:2c:17:4d:b8:4c:7c:fc:ee:a4:93:1d:a8:
                    f8:3c:50:85:65:6a:15:63:4b:a3:9c:16:08:ab:5a:
                    1c:b8:ad:13:86:d4:f1:34:a2:9f:da:65:98:9f:f6:
                    c0:2e:a7:4b:a8:77:df:82:f3:35:a4:01:58:df:97:
                    05:44:2e:3e:50:39:82:aa:83:20:b8:43:06:fc:bf:
                    c9:ba:d9:bc:d9:92:9f:11:bb:3b:ad:d7:17:6a:30:
                    3e:ae:f4:13:41:bd:85:52:d9:ed:8d:c9:9e:85:49:
                    c3:ab:21:c6:10:d8:85:6b:66:19:33:ab:6e:19:10:
                    ce:2c:5e:8b:95:4b:26:fe:ce:5c:80:70:b1:98:0e:
                    ae:ac:1f:9d:c8:d1:0e:32:a3:34:d9:26:50:09:26:
                    80:4a:58:a9:97:f2:ed:34:07:66:ca:ae:7a:c2:db:
                    68:0f:39:01:23:aa:fe:f3:37:3c:80:a0:85:85:ee:
                    8e:fb:ae:04:6e:d6:8a:58:79:37:f8:36:f9:ed:8e:
                    7d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:28:72:AB:1F:20:4C:09:2B:52:F0:28:6A:68:80:0D:53:A7:52:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/392b2cc4-7913-3f99-827b-08be7b509439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:a3:87:e2:e5:cf:b7:ef:db:e9:ed:66:94:23:30:ff:f5:7a:
         95:fa:6a:c9:79:11:7f:0c:a0:5e:cd:a2:f6:0a:a3:b8:98:9a:
         00:e6:ba:e2:75:86:c4:fd:2a:74:2e:a7:8f:65:e0:17:2a:c2:
         aa:ba:16:c3:bf:43:16:ef:59:57:a2:bd:d9:48:86:75:04:64:
         3b:16:f8:52:09:f2:ba:5a:a9:bf:6c:5c:3f:fd:84:76:f2:b6:
         e0:1a:dc:c9:81:05:b7:72:35:18:3b:90:2d:a5:b2:5e:c9:54:
         95:af:29:1e:e9:15:00:4a:e6:3b:a2:e5:78:65:c7:90:e9:67:
         1d:9a:1c:cf:61:50:c9:1c:68:91:92:6c:ec:63:6a:04:46:60:
         cb:60:d2:2b:1d:61:00:0a:ca:c8:e4:26:df:bb:e3:fd:a2:56:
         04:eb:72:f5:fc:f6:92:f4:49:bd:44:8f:ea:84:f6:42:41:d4:
         74:e7:5e:1c:2e:28:a5:f0:df:41:1f:73:b4:a2:cf:46:c3:10:
         fc:bb:2b:44:c5:da:b8:8e:e8:91:b6:f3:6d:ae:bc:5e:b4:01:
         d0:12:b9:fa:1f:20:29:df:2b:30:6a:d2:5d:ca:6a:6c:93:6e:
         23:7c:db:b0:21:77:6c:27:ca:34:73:3d:0f:08:aa:86:f2:74:
         22:48:ba:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:01 2024 by rpki-client on console-ams.rpki-client.org