Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49af6120-bd69-390d-b4d1-81a65d4bd11a.roa
File:                     49af6120-bd69-390d-b4d1-81a65d4bd11a.roa (raw, json)
Hash identifier:          AJskeaasecnECmaN7w41Vrapu7uYhBNyemK9NL8c8bw=
Subject key identifier:   46:A1:43:2C:EF:0E:3A:B1:2D:89:C5:FB:EC:14:2F:FE:02:76:46:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847AE36ADD367738398C906EFC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49af6120-bd69-390d-b4d1-81a65d4bd11a.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     396559
IP address blocks:        2001:500:7967::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:ad:d3:67:73:83:98:c9:06:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=87352976-dc5f-4323-b3ac-a736aa25c2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:4a:b1:41:dd:bc:08:e6:26:3e:2d:30:ba:
                    a5:f2:5f:e3:b9:3f:8d:6e:bd:2c:61:91:88:a7:67:
                    f2:cb:25:50:b6:5d:d7:e4:0c:0c:f6:f5:0b:dd:83:
                    1c:9e:79:1b:08:3e:c7:b7:47:61:7c:f2:8e:0b:a6:
                    6d:d4:48:d4:0b:c1:a2:8e:23:d3:34:87:b0:b9:46:
                    10:fb:51:b5:30:c2:e6:f6:77:7b:56:27:de:96:66:
                    c3:f1:6d:bf:93:a0:3e:52:d1:77:95:4f:9c:84:cf:
                    da:67:4b:97:16:84:e1:1e:43:d6:aa:a1:fa:a7:e3:
                    d3:a2:41:59:e4:5a:d2:8f:0e:3a:e2:5a:c1:a4:c0:
                    d6:49:8b:ad:a9:d5:09:98:45:2f:1f:e4:98:6b:28:
                    fc:58:76:9a:a9:4b:a7:d8:c0:b6:8f:ba:84:a5:aa:
                    19:67:28:2d:ed:d4:c5:d4:aa:c5:d5:67:56:6b:ad:
                    5f:d4:0e:11:66:6e:4b:4a:1d:c1:56:28:2d:b0:d4:
                    71:85:93:fc:6b:9f:bc:e9:bf:c6:6e:86:42:3f:0c:
                    d6:ff:2b:0b:33:4a:18:e3:1a:04:36:72:35:6c:17:
                    25:a2:cd:a1:1f:cf:66:48:8b:78:07:db:05:35:4f:
                    59:85:d7:59:b8:87:eb:25:2f:d2:95:a5:17:e0:ba:
                    b2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A1:43:2C:EF:0E:3A:B1:2D:89:C5:FB:EC:14:2F:FE:02:76:46:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49af6120-bd69-390d-b4d1-81a65d4bd11a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b3:b4:a6:22:60:4a:4b:a1:22:30:5e:bc:ba:23:6b:26:c4:
         84:c9:61:6f:26:0f:fd:bf:c0:4e:9f:1b:d3:94:08:a2:f5:ab:
         ff:82:ed:59:d5:6b:ae:57:be:cb:14:91:96:0a:a5:9a:66:3c:
         8a:65:45:eb:24:f5:f1:5b:02:d8:44:c1:3a:1e:a9:00:64:3f:
         01:45:35:5c:38:c5:fa:fb:8b:8a:d9:22:72:8d:1c:ab:6c:66:
         54:18:45:af:94:58:8b:77:75:d3:f7:f2:2e:dc:e3:01:c2:35:
         dc:05:fa:7c:23:3f:8f:db:30:d3:a9:5b:98:ac:8b:02:c5:f2:
         de:7e:06:28:b4:6a:86:cd:36:41:7b:d7:8f:46:b3:b2:e4:45:
         b1:a8:a5:6f:47:ca:d6:25:81:a3:43:20:84:be:71:23:31:20:
         2e:6f:03:ca:61:0e:c9:c0:3f:7d:cf:95:39:7d:06:c6:4f:f1:
         0e:de:49:09:5a:a6:ce:3b:bd:f7:96:42:27:de:b5:e0:02:df:
         2d:9e:f1:72:b3:98:9f:93:47:9b:83:01:13:65:22:f3:83:94:
         2e:fc:f3:f2:81:a1:e7:0e:8b:f8:b2:a5:7a:0b:87:85:45:b7:
         97:9d:55:d9:38:8e:20:bf:e8:9d:86:23:7d:48:ce:f9:7c:1d:
         03:b9:bc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:29 2024 by rpki-client on console-fra.rpki-client.org