Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49b3e9f4-b7dc-3483-bec9-bd341bdacf88.roa
File:                     49b3e9f4-b7dc-3483-bec9-bd341bdacf88.roa (raw, json)
Hash identifier:          9ncSoxSKElPgDsOamORH7O4AJtxl0jOCGb9MJVdGFAI=
Subject key identifier:   6D:1E:1F:41:B8:89:A0:3C:76:CE:14:5C:36:DE:12:1D:96:15:BC:CD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0885C89E092ABCD7298D180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49b3e9f4-b7dc-3483-bec9-bd341bdacf88.roa
Signing time:             Thu 14 Nov 2024 13:35:46 +0000
ROA not before:           Thu 14 Nov 2024 13:35:46 +0000
ROA not after:            Wed 12 Feb 2025 13:35:46 +0000
asID:                     36632
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:5c:89:e0:92:ab:cd:72:98:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:46 2024 GMT
            Not After : Feb 12 13:35:46 2025 GMT
        Subject: CN=a37c377b-97b9-4972-b5b7-59982cece28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ef:a7:b9:66:67:44:fb:d5:59:34:a5:30:e3:
                    b8:ef:30:4c:df:51:5f:5c:eb:21:6a:0e:ef:e6:fe:
                    29:83:2f:10:d6:18:9e:b5:93:4e:ff:50:85:a7:15:
                    3b:64:e0:53:d4:53:31:33:0a:12:bc:51:0d:26:9c:
                    f5:63:25:b8:4b:f6:b1:52:23:4b:53:21:4e:e0:0c:
                    56:8c:1e:74:af:d9:e2:ba:20:f1:9b:37:2e:1b:2b:
                    a5:e8:b3:f9:51:4b:20:47:79:a6:11:b9:96:cf:89:
                    b0:6a:e4:2e:a8:4f:27:c5:d3:ea:b6:ec:b2:eb:dd:
                    7c:0c:19:d1:0f:8a:af:4a:89:17:f4:bc:24:1c:12:
                    7a:e9:87:4f:9d:50:0d:d3:08:a3:b9:3d:dd:60:8a:
                    97:59:f8:21:56:e5:fb:87:6a:df:3d:62:5f:96:bd:
                    5e:59:6d:87:17:dc:27:3f:e0:35:66:c5:63:0f:38:
                    ed:c3:c4:1c:e3:15:59:a7:d9:83:25:5e:8f:0f:2a:
                    07:0a:ee:45:05:ed:56:9d:28:c6:26:26:c6:d4:e1:
                    24:bf:df:76:72:7f:09:c6:a4:3e:d9:a6:a2:06:c0:
                    74:00:bf:a5:94:90:4d:0a:ec:83:95:cd:03:66:4e:
                    33:e8:fd:b6:3e:4f:24:d7:32:33:8b:ab:d9:77:b0:
                    77:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1E:1F:41:B8:89:A0:3C:76:CE:14:5C:36:DE:12:1D:96:15:BC:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49b3e9f4-b7dc-3483-bec9-bd341bdacf88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:07:be:f3:31:17:ba:4a:6a:46:7d:07:d1:06:e2:42:d0:ee:
         8d:d8:1c:33:d7:a9:f0:45:85:08:47:bc:8e:a8:cd:71:f9:a5:
         41:83:14:0b:1b:05:94:69:a0:38:12:7e:c9:45:6c:6c:ad:62:
         f8:41:53:52:bb:85:ad:98:98:fd:11:0d:f8:c8:de:66:31:04:
         b3:40:88:a6:c5:1a:bf:92:ea:c1:a5:b0:2d:c1:31:b6:ac:7e:
         7c:14:f9:15:73:a4:7d:5f:37:3c:7d:dd:90:0a:93:79:5d:db:
         88:8c:4e:fb:25:6c:0c:56:67:c7:ad:5f:3c:77:a9:a2:a1:6b:
         aa:84:d1:46:ae:63:4d:9f:95:08:16:31:48:13:00:ee:1f:87:
         9a:30:87:f0:44:cf:65:7e:d3:42:25:2b:61:04:76:82:0e:5f:
         69:d5:03:ea:59:33:da:6b:ed:d7:ad:46:cc:c8:1b:0f:62:64:
         2d:48:78:ed:91:66:fd:07:47:97:e6:09:b2:54:37:cf:71:55:
         a0:75:27:44:e5:72:93:89:24:eb:b0:b7:89:23:64:41:3c:4e:
         fe:a9:91:b5:9a:d0:7f:e1:4a:d1:b9:e9:6f:54:ec:1f:18:33:
         1e:ff:b3:60:9b:45:f0:84:71:07:cf:85:a8:8a:b2:bd:9e:84:
         96:e7:7b:fa
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfgiFyJ4JKrzXKY0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTExNDEzMzU0NloXDTI1MDIxMjEzMzU0NlowLzEtMCsGA1UEAxMk
YTM3YzM3N2ItOTdiOS00OTcyLWI1YjctNTk5ODJjZWNlMjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu+nuWZnRPvVWTSlMOO47zBM31FfXOshag7v
5v4pgy8Q1hietZNO/1CFpxU7ZOBT1FMxMwoSvFENJpz1YyW4S/axUiNLUyFO4AxW
jB50r9niuiDxmzcuGyul6LP5UUsgR3mmEbmWz4mwauQuqE8nxdPqtuyy6918DBnR
D4qvSokX9LwkHBJ66YdPnVAN0wijuT3dYIqXWfghVuX7h2rfPWJflr1eWW2HF9wn
P+A1ZsVjDzjtw8Qc4xVZp9mDJV6PDyoHCu5FBe1WnSjGJibG1OEkv992cn8JxqQ+
2aaiBsB0AL+llJBNCuyDlc0DZk4z6P22Pk8k1zIzi6vZd7B3BQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFG0eH0G4iaA8ds4UXDbeEh2WFbzNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDliM2U5ZjQtYjdkYy0z
NDgzLWJlYzktYmQzNDFiZGFjZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCsB77zMRe6SmpGfQfRBuJC0O6N2Bwz16nwRYUI
R7yOqM1x+aVBgxQLGwWUaaA4En7JRWxsrWL4QVNSu4WtmJj9EQ34yN5mMQSzQIim
xRq/kurBpbAtwTG2rH58FPkVc6R9Xzc8fd2QCpN5XduIjE77JWwMVmfHrV88d6mi
oWuqhNFGrmNNn5UIFjFIEwDuH4eaMIfwRM9lftNCJSthBHaCDl9p1QPqWTPaa+3X
rUbMyBsPYmQtSHjtkWb9B0eX5gmyVDfPcVWgdSdE5XKTiSTrsLeJI2RBPE7+qZG1
mtB/4UrRuelvVOwfGDMe/7Ngm0XwhHEHz4WoirK9noSW53v6
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:29 2024 by rpki-client on console-fra.rpki-client.org