Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/507820c7-82e7-3cb4-8788-21784dc6776f.roa
File:                     507820c7-82e7-3cb4-8788-21784dc6776f.roa (raw, json)
Hash identifier:          x/+tMc4dCqDxGN1DlcjUZw/3Vgz1e4I/3llJK+k+e9A=
Subject key identifier:   C6:69:87:92:6E:B9:04:90:8D:17:98:2A:7A:51:40:22:6F:75:00:B2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF51B3B28E8BA4DA34E3FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/507820c7-82e7-3cb4-8788-21784dc6776f.roa
Signing time:             Tue 12 Nov 2024 13:40:02 +0000
ROA not before:           Tue 12 Nov 2024 13:40:02 +0000
ROA not after:            Mon 10 Feb 2025 13:40:02 +0000
asID:                     397203
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:1b:3b:28:e8:ba:4d:a3:4e:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:02 2024 GMT
            Not After : Feb 10 13:40:02 2025 GMT
        Subject: CN=fbb6f0b9-bb51-4a90-89c0-4c49b034727e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:4b:62:f1:67:93:fe:c9:f1:d4:17:a2:4d:
                    90:4d:0a:e0:c6:5f:93:11:d5:b9:0d:d8:74:6a:d7:
                    70:4d:4b:dd:85:6d:9a:15:15:a5:90:8a:3c:52:bb:
                    75:fb:78:48:95:62:67:71:93:c5:05:71:93:4f:57:
                    b5:b4:56:24:ea:45:e4:69:e0:81:69:cf:9d:67:02:
                    39:4c:f8:4a:b0:49:b7:ea:f0:6b:ed:78:da:46:3e:
                    01:15:dd:91:e4:37:50:96:9d:c0:75:85:3f:d5:18:
                    f3:96:ab:fc:51:2f:6d:43:f6:68:5a:7e:0f:bc:0b:
                    d8:40:f1:3d:b0:5b:0c:de:51:03:ae:bb:4b:05:3b:
                    11:48:8c:ee:55:ea:b4:d1:b6:01:06:82:59:72:be:
                    6c:86:66:15:02:18:94:a6:04:f5:da:2c:6a:2c:87:
                    8c:ea:6d:1c:76:e8:29:82:fd:82:9a:33:25:95:52:
                    bc:3b:90:0a:e6:95:5d:98:f0:43:27:5b:16:3f:8f:
                    1d:76:82:fc:b8:56:44:7b:08:bf:51:f4:01:cf:68:
                    f4:5b:d2:12:f7:8e:63:12:bd:41:27:e6:84:88:f6:
                    cd:f3:c5:c7:ef:d3:9e:26:ef:4d:2c:dd:59:a0:ed:
                    5c:be:90:a4:c8:b4:95:c8:04:e5:fb:db:2f:bd:48:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:69:87:92:6E:B9:04:90:8D:17:98:2A:7A:51:40:22:6F:75:00:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/507820c7-82e7-3cb4-8788-21784dc6776f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6a:4e:12:f3:f0:f0:cc:a3:fa:b3:2e:01:85:ab:c3:bc:24:
         00:79:db:f2:94:52:80:b7:55:6a:f1:32:f2:75:24:fb:fa:ab:
         89:0a:9b:68:fe:66:33:71:b6:e5:a5:1a:20:1e:cc:66:54:6d:
         8c:ad:9c:02:2c:e6:95:ac:f2:d5:7c:1b:38:0d:23:dc:0f:16:
         b3:61:23:07:2d:fa:84:f3:cf:2f:00:c2:55:fc:e9:03:68:98:
         d7:80:b5:12:f7:6d:f2:9d:32:1c:32:e9:e1:22:99:1d:e5:c3:
         9d:e8:52:c4:da:36:36:5d:2b:de:76:6b:86:98:7b:93:ea:a6:
         51:ed:6c:3e:e1:ef:4e:8c:20:c4:96:e8:cf:31:03:e5:d4:ac:
         27:42:17:92:c4:f2:78:09:24:4b:0e:df:26:13:d6:24:41:f9:
         1e:eb:d2:2c:09:ae:ac:d2:a1:ad:f6:c3:2f:3b:18:7e:d9:3b:
         f1:cf:2a:21:85:89:96:85:cf:c4:a1:7d:9c:89:34:14:f2:79:
         13:d1:73:59:92:e9:a2:ed:59:23:8d:a7:97:ad:ab:19:da:d8:
         d3:3c:30:4e:96:91:74:f4:46:03:75:bc:b1:02:6b:41:2c:c9:
         8e:f9:30:0e:55:aa:11:31:0a:81:75:d6:2b:95:66:4e:1d:40:
         9e:75:07:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:30 2024 by rpki-client on console-fra.rpki-client.org