Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48124153-c8f1-322d-b6d8-f2f4a132d540.roa
File:                     48124153-c8f1-322d-b6d8-f2f4a132d540.roa (raw, json)
Hash identifier:          bnMCA2m6nsY60o6TQfLbGcx4uM97KaQQQEetnfXbxbw=
Subject key identifier:   AD:77:43:07:BB:83:0B:48:35:AD:08:34:D5:58:B3:88:55:E0:46:02
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476B29676212A47C5159A58900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48124153-c8f1-322d-b6d8-f2f4a132d540.roa
Signing time:             Thu 03 Oct 2024 12:34:52 +0000
ROA not before:           Thu 03 Oct 2024 12:34:52 +0000
ROA not after:            Wed 01 Jan 2025 13:34:52 +0000
asID:                     36623
IP address blocks:        2001:500:121::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:29:67:62:12:a4:7c:51:59:a5:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 12:34:52 2024 GMT
            Not After : Jan  1 13:34:52 2025 GMT
        Subject: CN=aa4f0ac8-12ef-4558-a86e-1601d0c543cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:62:d9:06:51:5c:75:d6:0d:11:db:55:35:91:
                    81:fe:29:a5:db:a2:0e:c9:b9:4d:93:89:14:75:3a:
                    16:af:03:43:d9:62:ec:75:33:43:e7:fe:b1:d7:2c:
                    58:40:5a:f5:e2:37:57:fa:e8:95:6e:e8:99:ae:c8:
                    e6:68:4d:02:94:75:d3:b3:4b:ad:75:e4:ab:fc:20:
                    ad:a5:c1:ba:26:5d:46:de:8c:bf:6d:34:0f:f4:f8:
                    25:e1:cc:50:9e:10:6e:5f:0c:df:9e:b5:8b:24:cc:
                    32:f9:a8:7e:d1:5a:83:12:83:03:98:c8:0b:3d:f4:
                    34:55:eb:d9:48:07:2c:96:f8:74:d7:7f:9f:83:f4:
                    fb:cf:d8:9f:6a:05:e3:ec:12:b2:97:8a:36:3b:a1:
                    fe:d7:67:8a:a3:65:79:66:e2:e8:8d:06:b7:d0:b7:
                    6c:4a:03:9a:35:00:80:20:bd:66:4b:f1:28:26:e1:
                    a8:49:c6:38:70:4b:fd:7b:d6:81:ef:25:58:61:1b:
                    cb:bb:78:4e:37:67:17:f8:87:ca:a6:61:d2:13:55:
                    ce:f2:76:81:1c:65:14:03:a6:12:ba:ff:b6:cf:93:
                    19:ab:6c:89:b1:51:03:2c:c9:44:0e:c3:42:51:1f:
                    ac:14:b6:1b:e6:2e:13:c1:0c:93:2a:fc:48:42:9d:
                    6c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:77:43:07:BB:83:0B:48:35:AD:08:34:D5:58:B3:88:55:E0:46:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48124153-c8f1-322d-b6d8-f2f4a132d540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:50:2f:59:b4:84:23:8e:a2:45:36:bd:6e:cd:c9:df:2e:99:
         e2:ce:00:d5:34:ee:18:a6:20:28:15:ad:0d:19:77:41:ac:ac:
         24:68:86:f1:07:94:d7:d7:58:5c:80:4b:3d:3f:66:48:30:86:
         c8:28:43:3f:10:67:5e:dc:13:1d:b2:26:f7:98:81:8c:e1:ca:
         71:08:8c:3f:40:3f:f4:ad:54:d3:45:77:47:9f:5a:24:8b:97:
         52:c1:eb:88:0d:98:a6:10:6d:6d:dc:bf:9f:a4:a8:63:25:44:
         1f:1f:05:21:48:ce:67:a4:c0:d6:5c:6a:1e:1a:ce:47:c1:a8:
         c9:96:86:92:01:eb:53:a6:87:e2:88:12:ba:34:94:2d:d9:a2:
         a0:6f:f9:38:84:d5:b6:07:ee:fc:a0:46:ee:70:e7:0e:23:c0:
         d1:ff:aa:3c:cc:2b:bd:87:c2:bf:88:7c:0e:e5:39:12:4c:47:
         1d:5f:c6:e5:23:ee:bd:a2:64:99:d5:25:3d:ce:12:3b:0c:64:
         f5:15:a8:ec:15:a6:01:7b:77:e7:04:78:fd:a0:c4:c4:cc:e5:
         12:39:1d:98:42:e0:ab:1f:d0:2a:08:8c:44:04:49:05:01:de:
         fe:29:37:95:c6:44:cd:07:eb:ed:43:83:f9:7d:b2:32:45:50:
         3a:36:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:29 2024 by rpki-client on console-fra.rpki-client.org