Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d31fa64-5e13-3466-8009-5ede89eabcdb.roa
File:                     4d31fa64-5e13-3466-8009-5ede89eabcdb.roa (raw, json)
Hash identifier:          JfQytL/kU8aV3hhAs8fLTsfDvEZDCVldNgzyxbIjpkQ=
Subject key identifier:   01:A0:B3:5B:85:E8:77:70:94:F7:F8:D9:87:F2:6C:4E:0A:C6:EE:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847BC2C1EABC8EEAEFD16BB32C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d31fa64-5e13-3466-8009-5ede89eabcdb.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     36627
IP address blocks:        2001:500:30ff::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:1e:ab:c8:ee:ae:fd:16:bb:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=438b56f9-c623-4fbb-a23e-39334dea893d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:62:1c:26:3e:9e:bf:7d:12:cb:cc:0f:78:5a:
                    99:16:82:ab:61:df:7b:0e:64:73:62:22:72:a9:67:
                    9d:41:5b:fe:6e:18:6a:6d:e1:26:cd:c2:d6:5c:ee:
                    3f:91:31:8f:e9:db:77:e3:3a:44:ab:fa:a4:95:c8:
                    ac:be:28:ae:27:c5:0a:28:f5:5d:d8:93:e0:20:95:
                    6a:e2:47:89:ea:2b:d8:17:0d:c2:5f:c9:cc:de:ae:
                    cb:73:6f:13:33:7b:84:11:f3:f4:b3:73:0e:56:be:
                    27:9a:05:74:e9:9d:69:a1:32:41:1b:b9:24:2b:47:
                    49:9f:5d:cb:51:02:38:22:1a:79:71:98:69:0c:b8:
                    5a:96:b5:73:f5:52:25:63:c2:9c:f4:46:19:08:25:
                    f4:7d:77:f2:85:fe:32:d6:53:09:61:03:f5:75:e5:
                    74:5e:fa:35:bf:21:4b:7a:7f:13:ae:35:a8:56:c5:
                    79:f6:03:ab:ce:63:d3:82:ec:88:82:ff:a1:21:05:
                    2c:8e:ad:13:ba:d3:f5:88:7b:a1:37:f0:3a:60:68:
                    86:7f:d7:bb:af:b1:6e:a5:6c:64:0e:a2:56:87:2b:
                    c0:dc:3c:38:e6:1c:d3:e1:ae:15:a8:20:4b:5c:bb:
                    c0:a8:88:c3:f4:c5:de:b5:c2:b7:c7:28:76:a1:76:
                    02:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A0:B3:5B:85:E8:77:70:94:F7:F8:D9:87:F2:6C:4E:0A:C6:EE:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d31fa64-5e13-3466-8009-5ede89eabcdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:12:b8:e6:a1:3f:35:27:b5:a5:d3:53:da:c2:a8:b0:68:23:
         f5:a8:2b:3f:2a:10:63:c1:b0:8b:22:be:c1:84:c6:f0:ef:8d:
         ee:bb:d2:e4:8a:9e:a6:e0:10:f9:78:51:7f:30:b1:36:da:d3:
         1f:77:47:93:fd:04:71:43:bd:4e:5b:6b:d8:05:0c:06:11:96:
         22:fd:5b:7f:a5:f8:99:be:bc:92:2c:e4:c9:c3:6a:66:0a:b6:
         49:de:b3:6d:89:b2:45:58:7d:a9:56:75:40:14:d1:0e:b4:e1:
         c2:cd:89:28:1d:7c:82:04:a1:7c:22:6a:2d:a4:05:b5:e8:95:
         28:26:f0:e7:ca:6e:17:63:8d:7f:63:5c:68:21:79:6b:40:43:
         ff:3e:2e:ce:07:44:6f:b7:60:07:f8:fb:54:fa:30:90:7b:33:
         d2:6b:07:22:2c:35:43:bb:6c:4e:66:63:db:85:44:0a:af:85:
         69:be:80:f5:8b:3e:59:86:e3:19:11:9c:43:f8:29:40:17:d3:
         f1:8d:96:a6:84:ae:41:06:74:ae:8e:d5:c0:c5:39:7e:ac:3e:
         b4:0a:d2:05:e5:2a:fa:f7:fe:48:4a:c5:12:14:85:89:ab:6b:
         5e:d5:92:8a:68:74:a8:a4:a1:3a:e1:76:10:cc:bc:6a:db:d5:
         3f:d3:98:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:29 2024 by rpki-client on console-fra.rpki-client.org