Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ffb3bda-0c76-3701-b02c-c2f82e59e792.roa
File:                     3ffb3bda-0c76-3701-b02c-c2f82e59e792.roa (raw, json)
Hash identifier:          Yhdr1hJp4vsTHAlFFbIijZzfa1+nVTx90DFwjIKvNH0=
Subject key identifier:   C5:06:95:CB:2B:9D:E6:E9:7A:A5:E4:33:35:66:19:3F:C5:1D:2E:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584773964FB7602A1BFE0F2A50E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ffb3bda-0c76-3701-b02c-c2f82e59e792.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     396546
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:4f:b7:60:2a:1b:fe:0f:2a:50:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=6799aa97-194b-4265-b443-05f9880865b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:63:9a:00:c3:70:c5:62:fa:2c:af:f4:63:
                    64:17:9a:b1:14:8a:45:af:91:bd:ea:8c:78:87:f8:
                    9b:5b:26:4d:fa:1b:55:2e:0d:69:ec:bf:51:ce:bb:
                    5c:d0:44:cb:9e:f0:4b:69:65:26:77:d3:3f:ee:c6:
                    4a:26:21:c7:68:b3:66:b3:4d:c2:40:d3:01:f8:f1:
                    54:0d:b2:fa:6b:42:55:d5:80:fb:f8:48:17:2a:90:
                    4e:6a:37:45:96:ce:a2:07:70:59:95:56:6b:fb:04:
                    e8:f7:ee:d6:77:83:dd:12:9a:cd:53:d5:e2:b6:2c:
                    57:f0:13:8e:cb:64:e1:4a:22:40:b6:33:8f:db:6d:
                    2e:8b:2e:d4:c2:fd:4d:44:97:1e:3a:54:e2:c6:bf:
                    ab:e4:fc:04:5f:18:0c:92:49:36:0a:3d:ad:70:f3:
                    dd:b0:d5:98:41:db:b6:3b:21:f1:d3:1e:30:48:b9:
                    09:3a:74:b5:47:47:35:02:19:01:10:7a:b3:6e:d4:
                    4f:48:e1:29:55:1d:59:68:d8:12:76:b0:a1:80:ad:
                    a5:f3:a8:b0:8c:2c:50:7e:3e:65:e7:45:87:29:10:
                    3f:df:de:03:8c:94:88:86:1c:67:77:3f:c7:12:e6:
                    a0:ee:5f:ad:6d:73:64:ba:2b:f4:d7:4e:81:b2:d7:
                    7f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:06:95:CB:2B:9D:E6:E9:7A:A5:E4:33:35:66:19:3F:C5:1D:2E:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ffb3bda-0c76-3701-b02c-c2f82e59e792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:4e:0d:ff:f3:4d:cb:2d:bf:d1:c5:fa:99:53:8f:e9:e5:e9:
         d6:18:20:c4:bc:c6:07:69:d5:81:21:c7:2a:09:c3:22:8d:d2:
         e4:d3:ed:96:b2:29:77:f5:b5:46:ff:24:07:81:ea:06:44:3d:
         59:24:ab:01:3e:1a:27:07:db:44:71:15:07:7c:0b:f3:92:01:
         e3:02:64:be:5d:89:ec:77:44:ff:ff:91:ed:22:f7:81:37:23:
         7e:71:1c:c4:f3:9b:ee:d7:19:58:ba:d3:28:b5:db:cc:3a:0c:
         d0:d4:6d:6b:86:f3:19:60:6d:fe:53:57:df:85:7f:1c:16:7f:
         76:7d:04:5d:d1:50:51:4f:cb:e3:e1:70:ac:70:4c:05:f7:a1:
         65:87:dc:ba:82:f3:8f:17:ea:72:4a:f2:89:96:a3:e4:2f:50:
         d9:33:eb:b2:f7:6e:8a:a4:2c:c3:85:73:0c:ac:f8:39:7f:43:
         1f:74:7b:ec:9a:5f:e8:5e:3f:8f:0e:48:58:32:d3:60:e9:7e:
         df:56:94:ca:dd:1c:fb:b7:1d:39:d6:02:3a:8c:d7:38:51:7a:
         c0:4b:3e:2e:6c:17:f7:5c:e7:c3:7b:f8:fd:7e:d9:96:1c:3b:
         72:ed:c0:2e:fc:9f:f7:ca:b1:e5:f0:87:b0:c1:01:97:f6:9a:
         fc:84:e5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:02 2024 by rpki-client on console-ams.rpki-client.org