Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/667b1e07-45ac-39f6-9955-82362e3b6c48.roa
File:                     667b1e07-45ac-39f6-9955-82362e3b6c48.roa (raw, json)
Hash identifier:          /gJFvKCrLxTBaha5zFzIPjLkqK/39bQvXAs8qZJtf4E=
Subject key identifier:   9E:0E:78:14:8A:60:60:98:DE:36:6D:05:8A:C5:D8:85:B1:75:16:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476B29662BFD4B00343D81C080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/667b1e07-45ac-39f6-9955-82362e3b6c48.roa
Signing time:             Thu 03 Oct 2024 12:34:51 +0000
ROA not before:           Thu 03 Oct 2024 12:34:51 +0000
ROA not after:            Wed 01 Jan 2025 13:34:51 +0000
asID:                     396588
IP address blocks:        2001:500:121::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:29:66:2b:fd:4b:00:34:3d:81:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 12:34:51 2024 GMT
            Not After : Jan  1 13:34:51 2025 GMT
        Subject: CN=76981d08-5a59-41a0-8c18-70cfc7294405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:62:89:04:b0:80:c4:d3:88:8a:46:1e:df:39:
                    17:7a:ba:a9:60:40:39:e0:d7:cc:d0:8d:02:28:e2:
                    5f:13:c4:86:1e:a8:e5:0b:90:d6:0c:9a:c2:4f:48:
                    83:61:4d:10:39:7f:46:78:ac:bb:82:f1:da:5f:9f:
                    80:57:c3:ca:06:0c:6c:d5:86:2e:1f:b7:8e:ea:be:
                    88:a7:c5:8c:24:ef:8b:8c:7a:61:64:f1:30:d3:2d:
                    26:49:fb:dc:5b:c2:65:cd:8f:31:91:76:d6:ef:29:
                    e0:bd:fd:43:9b:52:55:85:43:0f:36:c5:41:d3:70:
                    0c:66:bd:1a:1a:ac:be:83:2d:77:29:9c:50:ed:87:
                    a1:a1:0d:c1:88:55:b6:f5:55:ce:a1:85:d9:7a:7a:
                    57:42:f5:90:a9:19:f6:a6:ac:d3:dd:ec:7d:ca:47:
                    e1:9b:08:eb:cd:86:e7:ba:8d:14:e6:1f:59:56:84:
                    f4:c9:04:43:f9:7b:32:5b:7c:0c:59:b0:38:12:e6:
                    f6:83:ae:9a:21:43:a9:bb:e4:be:19:42:da:62:59:
                    66:a8:c0:82:9b:ee:2c:8e:2f:b0:86:eb:1f:e2:87:
                    90:9a:8f:2f:55:eb:bc:da:bc:b4:75:97:22:f5:c5:
                    54:fc:a0:cf:30:67:1c:0a:f7:4f:93:7e:46:7f:07:
                    bd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0E:78:14:8A:60:60:98:DE:36:6D:05:8A:C5:D8:85:B1:75:16:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/667b1e07-45ac-39f6-9955-82362e3b6c48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:4d:77:12:c1:51:ab:03:62:e5:15:3c:d8:3f:e4:61:ef:cf:
         0a:41:19:70:7c:32:b2:28:2f:45:1f:5b:f3:e6:ed:e1:09:e3:
         68:a4:a7:2e:95:b4:73:de:13:8f:52:f6:9a:4c:6e:c9:99:51:
         9b:68:58:e0:bc:74:90:70:bc:44:ad:91:9e:a3:55:41:c5:9b:
         1d:89:9c:07:67:86:13:a0:af:f7:73:ce:54:e3:c6:f7:c5:4a:
         8c:ca:b1:c0:c3:20:60:d4:e1:75:ba:0f:ca:73:41:8c:7a:8f:
         ea:b8:28:ce:0f:3e:81:23:e3:09:a3:93:bd:d0:0d:fb:7f:9b:
         9a:0f:d0:c6:4e:c5:3d:f7:7a:35:7a:36:53:3a:aa:ac:4b:a9:
         8f:b0:0e:36:7b:ca:fa:8d:0e:ca:80:b7:29:62:ef:c4:e6:69:
         99:ac:8c:d4:4f:73:0e:b3:d5:2e:80:84:b3:83:ac:33:9c:1c:
         6c:c4:24:31:2f:08:d1:d9:4e:2e:91:71:c3:25:e3:95:f3:1e:
         ca:3f:b7:4a:6a:28:af:9e:76:f8:10:5f:b5:8b:3b:5e:1e:15:
         05:ef:d3:95:fc:d3:17:78:68:e8:56:20:b6:c7:d0:81:e7:05:
         ff:a7:81:c8:fc:0e:55:b8:79:e8:95:27:12:1e:d3:11:95:5d:
         c2:f9:ea:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:31 2024 by rpki-client on console-fra.rpki-client.org