Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a89986a-8b40-37a5-9b6b-bf931dff8dc1.roa
File:                     5a89986a-8b40-37a5-9b6b-bf931dff8dc1.roa (raw, json)
Hash identifier:          UGm0UmaOp5/DYOsDzEOHZp9EZbZgSImEZzDy0v3Jnyw=
Subject key identifier:   0A:40:AD:F3:19:5F:A8:51:1C:DE:0D:F7:56:A8:10:1E:37:68:F7:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847AE36ABB80393542811248440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a89986a-8b40-37a5-9b6b-bf931dff8dc1.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     396543
IP address blocks:        2001:500:7967::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:ab:b8:03:93:54:28:11:24:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=fbc5bb2a-c2fd-4a55-8cd0-7a48b05348dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:62:ee:28:64:df:cd:14:fe:2f:b0:2e:eb:
                    25:d9:64:18:3e:76:16:fc:02:75:d5:db:14:c2:2a:
                    9d:d1:30:21:9c:be:e4:42:65:35:a4:43:54:84:c7:
                    61:05:a2:f4:ed:a4:7d:74:66:6a:dd:cf:f0:d8:21:
                    df:7a:09:95:2c:46:da:b1:64:b6:fc:47:63:09:21:
                    f8:0e:9a:33:48:70:61:b4:0c:92:b8:53:ab:dc:e1:
                    a0:62:69:79:ad:25:e9:79:5f:56:f8:9a:17:79:d2:
                    60:87:77:5d:27:3d:d5:0c:a0:8a:da:97:68:b6:6b:
                    6c:3a:db:95:45:9c:b2:5b:2e:7a:ad:70:33:ca:12:
                    a1:41:b8:bc:58:11:db:b9:50:3a:c1:93:de:93:27:
                    a0:b5:89:88:7b:b4:73:0c:dd:8f:d9:0c:ee:94:0f:
                    52:47:b6:69:41:e2:06:56:de:03:0d:72:5e:07:29:
                    f9:02:06:7c:af:67:56:2d:8d:e8:d0:c6:b7:07:2a:
                    4e:b8:49:85:8c:96:3b:c6:98:b3:55:77:d1:ae:5d:
                    7b:d4:ba:5b:c2:06:8c:fb:cb:f0:11:3f:38:e8:48:
                    37:f8:87:80:26:0a:4f:e9:43:8a:b0:2d:0e:36:ca:
                    de:c3:74:7c:10:42:1d:e7:97:f8:a9:68:27:f5:3a:
                    8a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:40:AD:F3:19:5F:A8:51:1C:DE:0D:F7:56:A8:10:1E:37:68:F7:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a89986a-8b40-37a5-9b6b-bf931dff8dc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:fd:df:a8:4d:e9:9b:36:44:07:95:8a:cb:96:fe:11:21:f5:
         97:5a:bd:0b:de:cd:ad:22:99:c3:3b:ac:3b:6e:58:e1:f5:93:
         f5:d8:4f:c6:b5:2f:16:9c:cb:2d:19:b4:27:20:70:63:a6:3e:
         f6:95:7d:43:3d:da:46:d2:4c:9c:49:e9:58:09:5a:9c:95:ae:
         58:fd:68:4f:0f:77:36:fd:c0:34:b3:7a:71:54:b9:b0:11:45:
         57:36:93:15:b8:76:d6:ac:d4:d8:27:80:0b:1a:98:26:80:d0:
         86:df:5e:1b:8e:61:97:ff:61:28:ab:85:81:9d:20:a3:d3:f7:
         4c:cc:d0:e1:ae:a8:78:6d:1e:08:70:3d:06:d4:77:48:11:18:
         ae:32:b2:35:60:b5:23:2c:23:2b:86:f5:91:87:4c:36:e5:b4:
         b8:ac:52:2d:23:19:43:d0:12:2c:19:ae:1b:2f:b2:b9:5f:9b:
         21:ca:cd:bf:f4:94:30:4f:56:8e:82:bb:4b:53:c8:63:8d:5f:
         db:97:5f:73:56:9c:3f:1d:98:f2:a5:99:bb:2d:7b:72:bb:85:
         f9:29:e3:46:43:4e:6e:44:aa:fd:d9:1f:04:b8:a8:9d:9a:24:
         a9:b8:2e:2b:9f:d2:18:d0:0c:83:51:b3:e9:29:6a:2b:61:22:
         07:68:5a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:30 2024 by rpki-client on console-fra.rpki-client.org