Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40116de0-9ea5-3ce9-8529-cdcfaa871c57.roa
File:                     40116de0-9ea5-3ce9-8529-cdcfaa871c57.roa (raw, json)
Hash identifier:          BdqDvONm9/6iFpCD+muLgsGoNtgt4M7XPnWuHudkopA=
Subject key identifier:   58:F4:95:9F:19:66:E0:71:1B:F5:FB:14:B9:F2:86:5F:E9:1D:46:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E088617C3741774578AC0C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40116de0-9ea5-3ce9-8529-cdcfaa871c57.roa
Signing time:             Thu 14 Nov 2024 13:35:49 +0000
ROA not before:           Thu 14 Nov 2024 13:35:49 +0000
ROA not after:            Wed 12 Feb 2025 13:35:49 +0000
asID:                     396570
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:61:7c:37:41:77:45:78:ac:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:49 2024 GMT
            Not After : Feb 12 13:35:49 2025 GMT
        Subject: CN=b4855e91-4d9d-46eb-8775-4772bac77153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:da:05:41:3c:d7:35:6b:4d:71:75:ca:ed:d8:
                    0f:3f:d0:4d:81:59:c2:22:13:72:0d:44:60:47:6e:
                    e8:78:21:c6:f3:37:f3:c3:bf:b4:d6:00:d8:4d:f3:
                    ae:a6:2d:bd:20:6d:1c:27:8e:75:0d:ca:eb:6f:4e:
                    e6:8e:e4:34:4d:85:78:0a:dc:55:20:d2:51:fd:ba:
                    bb:29:56:6e:f5:ac:05:77:57:13:44:e7:3a:86:a0:
                    b4:78:9d:31:ba:4d:23:7b:7b:de:39:7a:08:8e:d1:
                    cb:8f:b1:dd:b5:4b:ce:6b:b5:e3:60:76:90:ce:0b:
                    5a:12:9d:52:8c:e6:47:37:42:e8:ba:15:79:92:60:
                    85:ae:e8:78:3d:c9:e8:3f:28:0e:ca:a6:fc:b0:da:
                    e6:3a:96:b6:59:bc:17:66:61:70:14:02:6f:5b:91:
                    23:aa:c3:96:d1:b5:50:72:05:4c:7d:61:81:14:2c:
                    b3:0b:2d:3c:cb:f4:1b:9a:41:05:dd:76:99:c5:0a:
                    2b:6d:75:f8:a2:fa:2a:cf:c7:e3:7c:e7:ea:d2:25:
                    e0:4b:06:98:9e:c9:73:a2:0f:e5:e4:a6:56:bf:51:
                    9e:58:48:d9:dd:de:5e:11:f2:9b:68:ca:bb:28:5e:
                    f0:23:b9:1b:a9:34:f4:31:f1:89:0f:cb:68:6f:6f:
                    9e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F4:95:9F:19:66:E0:71:1B:F5:FB:14:B9:F2:86:5F:E9:1D:46:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40116de0-9ea5-3ce9-8529-cdcfaa871c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:f1:f9:67:eb:38:ff:ee:a0:0a:54:39:fb:13:87:8a:25:0a:
         97:6d:f1:01:8a:ae:f8:71:8a:6a:2a:fd:0a:ee:59:7b:0f:ff:
         b4:10:3f:88:07:b9:b0:98:1c:fc:1a:8a:b7:c3:60:44:b7:d8:
         23:d0:e2:43:81:e3:d8:22:13:bc:d3:f7:33:97:af:e8:ce:31:
         55:1f:ea:5f:a3:1b:14:6b:a9:cb:d4:49:9c:25:ee:9d:6b:9d:
         15:fc:a4:a8:be:cf:b1:e6:55:5a:a5:e6:2c:1d:51:74:36:f8:
         be:53:35:b5:12:44:e2:e0:be:91:29:4b:60:21:c7:c4:92:33:
         8e:e2:64:27:c2:f1:d8:1d:1c:92:e3:7c:6a:7d:63:f2:b1:6b:
         d2:f9:63:31:40:12:49:2e:32:28:9f:90:8b:b8:87:91:0e:da:
         8b:1e:fe:69:46:1c:32:c3:8c:76:bc:40:4d:a8:c0:98:86:03:
         5d:ab:e4:67:c0:f2:90:18:e8:65:0e:7e:1d:b9:b2:6a:03:db:
         d2:0e:0b:0f:9e:ee:92:d6:a5:26:e5:94:0d:ef:1b:e5:d2:79:
         a4:01:33:db:06:fb:e0:f5:43:13:dc:70:dd:51:4a:7d:80:d0:
         50:ef:0a:d8:93:e4:29:d7:f9:5f:ad:bf:35:96:cd:5e:2b:e0:
         3e:6b:1e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:28 2024 by rpki-client on console-fra.rpki-client.org