Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40f11ea5-292f-31aa-af3c-6b9eeef1babc.roa
File:                     40f11ea5-292f-31aa-af3c-6b9eeef1babc.roa (raw, json)
Hash identifier:          t+Rx7N3tpQq0U2n0Zbqne55OmV77SVGDj7hWwMB4kYc=
Subject key identifier:   4C:BE:09:0A:29:9E:92:09:72:F7:09:3C:BA:D0:0F:E9:95:A4:14:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847791CF4C3DE29E5EB94DF9F98
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40f11ea5-292f-31aa-af3c-6b9eeef1babc.roa
Signing time:             Tue 08 Oct 2024 12:31:06 +0000
ROA not before:           Tue 08 Oct 2024 12:31:06 +0000
ROA not after:            Mon 06 Jan 2025 13:31:06 +0000
asID:                     211369
IP address blocks:        2001:500:120::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:1c:f4:c3:de:29:e5:eb:94:df:9f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  8 12:31:06 2024 GMT
            Not After : Jan  6 13:31:06 2025 GMT
        Subject: CN=2296c57e-52aa-4a52-a3e1-b0639bde1194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:95:f9:c8:6f:b8:c2:0f:d9:fe:a5:6b:fe:
                    f8:50:81:64:55:2d:63:8e:19:c1:84:fc:27:2c:db:
                    a8:09:71:36:03:94:09:46:a2:44:62:85:db:a3:ea:
                    c8:ec:1d:6a:71:f4:2e:15:e9:d2:24:0f:bc:74:23:
                    24:e6:a3:57:8d:9d:b0:47:3d:bc:30:03:fd:de:f0:
                    c7:42:ac:53:92:d5:ca:75:38:47:ed:fa:e0:5b:74:
                    17:e4:f4:ca:82:a5:33:de:b9:f1:99:f0:3b:4e:f9:
                    8b:68:9c:f9:4c:c3:d4:a2:66:fb:fa:50:b2:4e:76:
                    b0:e3:2a:37:dc:88:b1:d2:d2:51:24:90:3d:be:01:
                    59:76:d7:5b:2b:68:1a:ed:0e:6d:8e:17:f8:36:83:
                    29:81:e3:0a:80:ba:7d:ab:79:6c:ba:9c:75:68:25:
                    86:93:ea:cb:47:54:15:29:b0:6d:10:bc:2e:e3:83:
                    1f:0c:e7:08:f4:66:50:c7:3e:4f:ab:50:d6:ed:7b:
                    ab:45:b3:69:ff:04:9d:cc:14:04:6c:af:1d:02:10:
                    fe:3e:28:c3:a5:a4:b1:af:b8:3c:ee:bc:90:1f:f3:
                    ab:77:33:56:61:4d:46:61:47:09:c8:cb:fb:5a:44:
                    31:ad:1a:db:a6:e3:bc:fd:0c:3a:ad:cf:d0:d4:f3:
                    7f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BE:09:0A:29:9E:92:09:72:F7:09:3C:BA:D0:0F:E9:95:A4:14:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40f11ea5-292f-31aa-af3c-6b9eeef1babc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:5d:8a:ad:8c:2d:99:a3:79:d3:ee:5d:ad:36:fd:96:b0:b4:
         86:60:ed:8b:b9:11:a7:6d:c2:12:fc:a9:23:f5:89:c8:fa:85:
         d5:eb:17:16:73:85:3c:19:42:4c:c6:f1:88:52:5c:32:01:71:
         01:06:c0:c3:cf:52:1d:16:8d:8b:76:84:0e:01:15:ab:0b:c1:
         cc:3c:25:45:ff:b5:a4:4b:df:4d:a3:af:29:b8:1d:1a:c8:8a:
         bf:a3:7b:1d:36:64:d7:0a:8d:66:33:39:17:ec:36:bc:24:f5:
         4b:45:25:0d:ec:d3:41:3b:74:0c:47:5d:24:6c:d0:b2:02:0d:
         49:48:a8:fa:4f:18:61:ef:88:5b:6d:72:a6:ff:db:de:30:1f:
         19:c6:05:18:03:df:d0:10:4d:ac:81:74:4f:39:cd:86:27:31:
         6e:e2:d1:39:4b:16:50:84:19:0a:f2:cb:fc:30:5e:8b:6b:cd:
         c7:c3:b8:a9:7e:6f:45:2e:86:ab:2c:f7:57:b7:ba:44:1a:05:
         49:de:c3:24:0a:2e:7c:13:34:58:06:27:09:95:6c:95:de:ca:
         03:60:9b:60:af:fd:16:ff:0b:4e:4c:9f:8d:c9:ed:7f:5b:d9:
         e6:9a:f7:c3:b4:21:fb:81:19:7b:8c:41:ef:1a:a4:2c:7a:e9:
         3d:48:96:79
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEd5HPTD3inl65Tfn5gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAwODEyMzEwNloXDTI1MDEwNjEzMzEwNlowLzEtMCsGA1UEAxMk
MjI5NmM1N2UtNTJhYS00YTUyLWEzZTEtYjA2MzliZGUxMTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY2V+chvuMIP2f6la/74UIFkVS1jjhnBhPwn
LNuoCXE2A5QJRqJEYoXbo+rI7B1qcfQuFenSJA+8dCMk5qNXjZ2wRz28MAP93vDH
QqxTktXKdThH7frgW3QX5PTKgqUz3rnxmfA7TvmLaJz5TMPUomb7+lCyTnaw4yo3
3Iix0tJRJJA9vgFZdtdbK2ga7Q5tjhf4NoMpgeMKgLp9q3lsupx1aCWGk+rLR1QV
KbBtELwu44MfDOcI9GZQxz5Pq1DW7XurRbNp/wSdzBQEbK8dAhD+PijDpaSxr7g8
7ryQH/OrdzNWYU1GYUcJyMv7WkQxrRrbpuO8/Qw6rc/Q1PN/dwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEy+CQopnpIJcvcJPLrQD+mVpBRzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDBmMTFlYTUtMjkyZi0z
MWFhLWFmM2MtNmI5ZWVlZjFiYWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC6XYqtjC2Zo3nT7l2tNv2WsLSGYO2LuRGnbcIS
/Kkj9YnI+oXV6xcWc4U8GUJMxvGIUlwyAXEBBsDDz1IdFo2LdoQOARWrC8HMPCVF
/7WkS99No68puB0ayIq/o3sdNmTXCo1mMzkX7Da8JPVLRSUN7NNBO3QMR10kbNCy
Ag1JSKj6Txhh74hbbXKm/9veMB8ZxgUYA9/QEE2sgXRPOc2GJzFu4tE5SxZQhBkK
8sv8MF6La83Hw7ipfm9FLoarLPdXt7pEGgVJ3sMkCi58EzRYBicJlWyV3soDYJtg
r/0W/wtOTJ+Nye1/W9nmmvfDtCH7gRl7jEHvGqQseuk9SJZ5
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:02 2024 by rpki-client on console-ams.rpki-client.org