Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa
File:                     42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa (raw, json)
Hash identifier:          anhLXb0tXO8l+wdmKggrkcZUJPd7DJ0Ebt7aQb5HWcM=
Subject key identifier:   2A:6B:77:98:5F:3D:93:4C:02:06:5B:A0:F8:F9:7F:5B:B7:6A:71:E3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847818BBD6E005F7247FF90C980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa
Signing time:             Fri 11 Oct 2024 13:00:41 +0000
ROA not before:           Fri 11 Oct 2024 13:00:41 +0000
ROA not after:            Thu 09 Jan 2025 14:00:41 +0000
asID:                     396584
IP address blocks:        2001:501:8a29::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:81:8b:bd:6e:00:5f:72:47:ff:90:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 11 13:00:41 2024 GMT
            Not After : Jan  9 14:00:41 2025 GMT
        Subject: CN=6da57d5b-af13-4ec7-b151-24190c4a54bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6d:b5:5f:a4:4d:59:5d:6f:4e:3d:07:e8:c1:
                    ec:ad:19:8d:cf:85:20:76:69:27:19:fb:df:05:1e:
                    86:a1:df:87:4f:c2:bc:c6:cd:6f:26:65:8b:a3:5d:
                    6c:9f:b8:4a:86:1a:6f:dd:a8:b7:00:01:c0:c1:b8:
                    d1:45:fb:fc:4d:4b:a1:25:2b:f2:ad:f1:16:7c:06:
                    2e:4c:72:e3:bf:03:cd:ca:03:32:b3:63:ac:86:48:
                    6f:f1:a2:8a:26:84:6e:d7:42:09:bd:3e:48:da:ac:
                    01:9c:fe:19:3f:33:42:ab:55:a0:c8:9f:5f:5f:c9:
                    58:b4:c5:2e:11:8e:60:dd:95:c4:6f:a9:a1:74:2d:
                    d2:9b:63:ce:fa:7b:dc:73:10:96:0b:d2:e8:5b:40:
                    e7:02:e2:f7:63:58:49:40:f2:c0:f5:58:a7:8e:c0:
                    ae:62:68:20:fb:c9:bd:82:74:c8:1b:83:6f:2b:9a:
                    67:19:db:4f:6c:9c:5e:4c:e3:86:08:56:17:22:b4:
                    93:7c:23:2c:92:37:fa:77:e2:38:5a:ef:49:ea:45:
                    9b:94:21:59:6b:74:6e:cb:f3:72:bd:b0:c5:1f:89:
                    fe:f6:43:6e:f9:fc:01:8a:0f:a9:48:4f:e5:34:c0:
                    d1:ad:c2:3f:b7:6e:3e:dd:92:a7:f7:4d:d9:e7:a9:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6B:77:98:5F:3D:93:4C:02:06:5B:A0:F8:F9:7F:5B:B7:6A:71:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:14:c3:ad:3b:9a:a3:d6:d7:bf:3a:02:07:30:0a:80:39:c9:
         08:c1:2d:c5:6f:66:a4:06:26:17:23:85:c1:9c:91:ec:b8:52:
         08:26:f8:84:9a:53:e0:55:69:b0:1e:41:9c:3e:be:28:d5:68:
         e6:1d:b0:cf:bd:dc:82:ba:b2:d1:ee:00:07:d2:1d:6f:72:c8:
         28:f4:43:06:e2:be:49:4a:a6:03:18:b5:c4:59:0d:43:06:43:
         e8:06:0d:cf:d6:0e:15:27:8e:59:c0:68:91:c2:b0:43:82:6e:
         97:a5:21:4b:63:17:71:5d:2a:e9:d9:b9:85:81:f5:8b:6d:95:
         9a:a8:7c:a0:ad:59:a4:91:d8:bd:5c:c9:e4:08:85:64:84:56:
         ce:ae:d4:3f:2f:32:88:33:42:76:d0:9e:3d:ba:08:66:fe:e0:
         ed:61:ca:38:90:97:a4:61:ad:36:ea:ab:14:89:5b:f2:6f:70:
         71:4d:7c:71:98:7d:f3:9d:29:cd:3b:67:d6:e4:f6:92:c8:d3:
         36:74:85:13:f3:8d:98:b2:85:d2:27:1b:e7:7b:b6:5c:99:5b:
         95:87:2f:a5:44:c7:4d:08:9e:59:8d:a1:5a:e9:0d:39:a8:f8:
         31:60:71:bd:7e:a6:f7:67:e4:ad:fa:5c:4a:a5:2f:95:c6:c8:
         1e:ea:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:28 2024 by rpki-client on console-fra.rpki-client.org