Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e29b680-6dbd-3fa9-8336-0933a6d8bae3.roa
File:                     6e29b680-6dbd-3fa9-8336-0933a6d8bae3.roa (raw, json)
Hash identifier:          AmxyJ0hjlm8cA0KuxNt2VyAGL2FaMMS6RTq+lLh4RFM=
Subject key identifier:   69:BB:6D:92:72:C6:82:FC:A5:11:25:5D:38:C3:A1:F7:38:62:AF:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476593FDA37C8951E5A786C5A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e29b680-6dbd-3fa9-8336-0933a6d8bae3.roa
Signing time:             Tue 01 Oct 2024 12:34:47 +0000
ROA not before:           Tue 01 Oct 2024 12:34:47 +0000
ROA not after:            Mon 30 Dec 2024 13:34:47 +0000
asID:                     396549
IP address blocks:        2001:500:122::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:93:fd:a3:7c:89:51:e5:a7:86:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  1 12:34:47 2024 GMT
            Not After : Dec 30 13:34:47 2024 GMT
        Subject: CN=cb25f36f-70ae-4890-9727-960e17ae44d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:d8:27:95:7d:97:16:5a:ff:a3:29:6e:6e:
                    57:c6:b2:96:5c:13:18:e2:a0:1f:24:fd:91:05:5d:
                    3c:ba:f3:8f:1e:2d:10:a6:18:f6:ce:cf:a9:95:dc:
                    44:ef:1e:7b:58:41:1e:4e:2e:8e:b1:bf:8d:30:9d:
                    19:38:8f:5a:08:fa:9e:7d:5a:f9:22:79:90:9b:ea:
                    fb:c4:b4:bd:cf:18:d8:ee:61:82:a0:c2:00:5c:1a:
                    79:a9:41:4f:a9:cf:92:d2:bc:30:b1:91:28:b5:23:
                    8c:8d:d6:bb:b6:15:14:ce:31:b0:ef:34:8e:c1:9a:
                    85:96:46:32:fb:82:ef:16:bf:69:8f:d7:26:49:e6:
                    c5:17:9d:5f:f4:ea:ba:e7:5c:07:03:0d:a5:2c:fd:
                    1f:a0:3c:d2:11:58:88:c7:53:df:a4:99:3c:9c:bc:
                    c2:e4:c9:b4:e6:43:b8:e5:50:c2:28:e4:62:2e:a2:
                    9d:b7:31:be:a1:85:a7:72:17:cd:b0:b6:a6:2d:c3:
                    32:ae:48:af:b5:8e:44:14:4e:02:5f:83:66:fa:5f:
                    60:8e:7f:62:03:f6:ed:69:26:9d:13:61:fa:4d:fd:
                    1f:ef:2b:00:c1:0f:cc:71:78:74:4c:b0:ad:5f:e1:
                    a7:d8:ce:e6:bc:e1:6e:bb:04:52:68:a9:60:44:cb:
                    65:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BB:6D:92:72:C6:82:FC:A5:11:25:5D:38:C3:A1:F7:38:62:AF:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e29b680-6dbd-3fa9-8336-0933a6d8bae3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:43:ef:fd:60:a9:b0:29:42:53:a0:85:a5:90:fb:0e:30:dd:
         79:e4:23:b5:7b:fa:8f:00:dd:08:75:2e:31:51:74:0b:e8:ff:
         3a:90:62:e2:16:d3:63:f9:ce:6d:52:2c:ed:bc:8e:89:7e:a9:
         ea:b7:98:29:8c:53:64:30:a6:5a:04:19:76:f4:80:df:2f:d1:
         ad:65:49:61:2e:bf:51:06:a4:df:b8:35:df:5d:0c:3f:97:5d:
         d8:0a:da:be:ef:3a:42:e6:25:c1:5d:8b:52:0b:5a:92:cf:b1:
         0d:5d:1f:53:36:7b:f5:8d:1e:dd:56:63:13:78:a0:0b:23:3f:
         f2:e5:f9:40:54:6e:4d:d8:17:e8:f4:25:be:28:81:7b:14:20:
         cf:fe:33:24:ba:6f:ad:93:ab:2d:95:ea:ea:60:d7:8e:9b:50:
         2d:9d:9a:82:0d:c6:bf:0a:85:74:40:c7:fd:e2:a5:d0:d8:ed:
         d5:9d:c3:41:95:f1:f3:95:1c:14:0a:75:d9:db:19:17:8a:da:
         1f:15:b9:cf:03:4f:af:07:38:f2:07:fc:0b:31:5c:a4:4e:46:
         f6:53:e7:20:10:3a:e6:91:f4:a4:e8:ed:5b:9f:30:1f:fe:26:
         3e:7e:e5:4a:4b:bb:56:e0:28:f8:da:69:98:f1:3e:c2:c1:8d:
         77:4e:db:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:05 2024 by rpki-client on console-ams.rpki-client.org