Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39902ac2-bd25-34a2-a248-f2bcc215a1ee.roa
File:                     39902ac2-bd25-34a2-a248-f2bcc215a1ee.roa (raw, json)
Hash identifier:          x6GbZXCK9XnffZrxXpt75/vvSlqE0hdpsLoZ1j7oLKA=
Subject key identifier:   75:35:A8:63:EE:F8:97:54:51:E6:F1:F8:DA:72:23:45:6B:63:C3:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF51BB51F8D94BFCA5F9D38
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39902ac2-bd25-34a2-a248-f2bcc215a1ee.roa
Signing time:             Tue 12 Nov 2024 13:40:02 +0000
ROA not before:           Tue 12 Nov 2024 13:40:02 +0000
ROA not after:            Mon 10 Feb 2025 13:40:02 +0000
asID:                     396605
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:1b:b5:1f:8d:94:bf:ca:5f:9d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:02 2024 GMT
            Not After : Feb 10 13:40:02 2025 GMT
        Subject: CN=c9b84beb-665e-4c2f-9c7d-3d374d21a3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b6:2a:78:57:50:75:53:3b:24:6e:a4:a5:ed:
                    8a:c3:fa:6a:35:25:26:df:59:58:7b:f2:25:f3:a8:
                    5a:91:61:f8:3f:fe:1a:67:dc:b1:14:13:ad:1f:fc:
                    40:c7:aa:65:6a:80:a1:2c:de:f2:f1:5d:ea:b5:61:
                    ed:ad:a2:5e:a2:50:7c:6e:09:fa:e9:9c:4a:6a:ea:
                    ac:06:d2:9c:27:b1:49:44:4d:c5:e2:85:c1:8d:f1:
                    b7:1e:39:62:ed:eb:ca:c7:96:31:e7:02:60:79:33:
                    49:de:b7:5e:44:72:b6:ad:a8:f8:5b:34:56:06:40:
                    63:10:ff:c9:54:3c:33:43:2d:54:fa:6d:80:fb:cd:
                    ff:eb:4d:2c:99:22:ea:6d:0a:93:69:8f:8b:14:c0:
                    42:7d:c4:b7:fb:33:25:af:46:05:21:e6:63:a4:bd:
                    be:e0:89:84:4f:21:e9:35:5a:64:06:c2:e2:c0:3c:
                    a7:40:1f:97:ad:40:90:5d:e5:59:15:f1:e4:29:b7:
                    55:9f:d0:46:0d:49:4d:e8:b1:4d:b5:3a:95:d5:be:
                    aa:85:5a:91:bb:ce:1c:9b:24:74:94:9d:7b:b4:3b:
                    8c:1b:ce:b1:1d:17:90:8d:75:d5:71:68:4f:ed:da:
                    ff:21:f2:43:ce:41:be:d9:27:51:4d:f7:7f:25:a3:
                    62:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:35:A8:63:EE:F8:97:54:51:E6:F1:F8:DA:72:23:45:6B:63:C3:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39902ac2-bd25-34a2-a248-f2bcc215a1ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:38:cc:36:bb:75:14:bd:9a:6c:9d:de:d2:91:d2:77:bb:17:
         ee:d4:f1:87:52:79:e2:cb:e5:75:fc:26:ca:16:14:d0:5c:db:
         4c:97:07:bc:2d:d0:68:66:a0:eb:3b:3f:e5:f4:30:84:bb:61:
         4c:fc:2a:f2:05:31:44:e8:35:85:23:ed:1e:37:e0:cf:48:92:
         d0:55:98:2e:cf:b3:15:86:fc:8b:f6:42:7d:f6:7c:1b:3d:d0:
         98:90:70:fd:95:b2:96:8b:3c:51:87:d6:f8:2a:99:0c:75:79:
         25:a7:c5:bb:6c:cd:87:ca:84:17:6c:41:13:84:63:ed:f7:2a:
         bf:18:c2:c8:1f:3b:5a:2e:b6:65:89:3e:71:8d:b9:94:aa:cc:
         02:7e:8c:ff:e4:04:55:d0:8c:ee:3a:22:20:ac:2f:bf:26:63:
         59:22:cf:ad:55:cd:42:ad:a7:c3:7b:0b:14:4b:c2:f5:fe:6d:
         d8:5c:c7:34:87:b2:df:cc:f3:3a:a2:68:ea:18:bf:f7:9b:7a:
         92:d6:7c:48:c9:6f:ad:aa:06:7d:33:2e:96:06:2d:10:b8:a8:
         8c:68:5b:b6:11:1f:41:81:61:c2:f0:ce:6a:c6:0d:77:35:5b:
         72:40:5d:95:62:4d:3b:06:33:94:2c:a7:51:01:be:fd:7d:72:
         fd:1e:b5:da
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfa9Ru1H42Uv8pfnTgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTExMjEzNDAwMloXDTI1MDIxMDEzNDAwMlowLzEtMCsGA1UEAxMk
YzliODRiZWItNjY1ZS00YzJmLTljN2QtM2QzNzRkMjFhM2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbYqeFdQdVM7JG6kpe2Kw/pqNSUm31lYe/Il
86hakWH4P/4aZ9yxFBOtH/xAx6plaoChLN7y8V3qtWHtraJeolB8bgn66ZxKauqs
BtKcJ7FJRE3F4oXBjfG3Hjli7evKx5Yx5wJgeTNJ3rdeRHK2raj4WzRWBkBjEP/J
VDwzQy1U+m2A+83/600smSLqbQqTaY+LFMBCfcS3+zMlr0YFIeZjpL2+4ImETyHp
NVpkBsLiwDynQB+XrUCQXeVZFfHkKbdVn9BGDUlN6LFNtTqV1b6qhVqRu84cmyR0
lJ17tDuMG86xHReQjXXVcWhP7dr/IfJDzkG+2SdRTfd/JaNixQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHU1qGPu+JdUUebx+NpyI0VrY8OvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzk5MDJhYzItYmQyNS0z
NGEyLWEyNDgtZjJiY2MyMTVhMWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCoOMw2u3UUvZpsnd7SkdJ3uxfu1PGHUnniy+V1
/CbKFhTQXNtMlwe8LdBoZqDrOz/l9DCEu2FM/CryBTFE6DWFI+0eN+DPSJLQVZgu
z7MVhvyL9kJ99nwbPdCYkHD9lbKWizxRh9b4KpkMdXklp8W7bM2HyoQXbEEThGPt
9yq/GMLIHztaLrZliT5xjbmUqswCfoz/5ARV0IzuOiIgrC+/JmNZIs+tVc1CrafD
ewsUS8L1/m3YXMc0h7LfzPM6omjqGL/3m3qS1nxIyW+tqgZ9My6WBi0QuKiMaFu2
ER9BgWHC8M5qxg13NVtyQF2VYk07BjOULKdRAb79fXL9HrXa
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:01 2024 by rpki-client on console-ams.rpki-client.org