Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74efe664-04d1-30c8-9f54-f6abe3e534a5.roa
File:                     74efe664-04d1-30c8-9f54-f6abe3e534a5.roa (raw, json)
Hash identifier:          ymebrA+UAqZRDCEgjJi5b3MJUj6YPMJog2G8k2kmy6Y=
Subject key identifier:   3D:88:B0:E1:49:8E:94:7D:18:E3:03:C9:B6:5B:7F:A4:BE:86:5D:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476593FBC10DC56B2AE6737E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74efe664-04d1-30c8-9f54-f6abe3e534a5.roa
Signing time:             Tue 01 Oct 2024 12:34:46 +0000
ROA not before:           Tue 01 Oct 2024 12:34:46 +0000
ROA not after:            Mon 30 Dec 2024 13:34:46 +0000
asID:                     396588
IP address blocks:        2001:500:122::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:93:fb:c1:0d:c5:6b:2a:e6:73:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  1 12:34:46 2024 GMT
            Not After : Dec 30 13:34:46 2024 GMT
        Subject: CN=09624b76-1d36-4abc-a2ce-a950a097981f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:69:7a:7d:1e:1a:a7:b9:f6:72:9d:71:df:
                    ea:0e:da:45:e7:e3:7c:1d:fe:da:7a:dd:43:de:35:
                    1a:78:65:3c:54:46:73:b7:24:21:cd:5f:ee:5e:55:
                    01:76:d5:1c:12:b4:59:74:cf:87:2c:62:28:1f:cf:
                    3d:4f:20:16:37:11:18:d9:0b:4e:43:d8:a7:b9:e0:
                    9a:94:c2:02:d2:e1:91:3a:3e:a1:32:47:cb:c8:c2:
                    bb:ac:fd:cc:50:a9:b5:4c:b6:85:45:c7:cc:a0:da:
                    8d:6d:80:a4:aa:16:67:c3:3c:c3:6e:c2:a0:30:d7:
                    82:4f:8d:a5:63:6c:04:56:0d:47:82:e4:7c:20:2e:
                    71:c2:38:1d:e4:63:65:f9:81:cf:36:cd:21:85:23:
                    6f:45:87:3f:d9:23:4b:eb:e4:59:be:e1:a1:d1:83:
                    ee:b2:c2:60:e6:2f:67:7b:e1:bf:29:bf:12:67:6d:
                    c3:2a:60:e9:0e:3f:64:d4:ad:28:8e:7a:cb:01:1d:
                    88:32:57:2b:8e:65:26:7e:4e:d0:8e:cd:0c:54:16:
                    aa:ff:e9:25:d7:28:11:e7:58:41:8e:a2:28:8c:c6:
                    36:e2:2c:74:3e:46:1e:5e:dc:ce:45:29:5f:cc:95:
                    48:7e:be:1c:f8:7d:03:15:c8:bb:31:05:a5:26:4e:
                    21:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:88:B0:E1:49:8E:94:7D:18:E3:03:C9:B6:5B:7F:A4:BE:86:5D:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74efe664-04d1-30c8-9f54-f6abe3e534a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:4e:7f:d4:70:0e:cc:d6:ee:4c:8d:83:51:6b:28:74:19:64:
         b9:f5:95:73:00:3e:e0:8e:6f:01:c3:4f:55:3b:a7:9e:c6:08:
         a4:34:e3:35:fb:f0:48:67:9c:5b:e7:56:a2:9d:6a:5f:74:6a:
         c1:eb:67:7a:5f:05:bc:38:c1:d3:34:07:70:ef:27:c6:b7:4a:
         a2:f5:77:41:0f:c4:13:1e:e9:db:ef:b6:68:a3:77:21:e9:4b:
         21:2b:e7:f5:20:30:5a:2f:44:7c:34:32:af:51:90:1f:5a:1f:
         75:73:0c:0b:35:10:83:00:c3:74:37:f5:a9:9c:6f:31:fe:8b:
         25:5a:04:32:8d:22:5c:9c:91:c8:f9:35:72:c9:3f:23:30:85:
         17:ea:19:fd:a3:cc:2c:5c:f0:41:79:fd:b4:24:ee:40:b2:c6:
         e3:94:b5:8c:24:82:89:e9:2b:62:5e:77:9e:64:e3:1b:1d:f1:
         13:4e:96:62:72:54:6f:d1:0e:68:9c:30:ba:c3:b4:18:2e:2d:
         d7:bc:bb:f5:45:5f:ef:d3:53:a7:0a:b3:46:81:f5:43:25:1b:
         8f:cd:b3:3a:4b:e3:b8:51:8d:e5:7d:d2:f3:1a:9d:4f:91:b1:
         8b:fa:14:49:f3:46:f4:f7:69:f8:16:ec:0d:2d:17:cd:cb:56:
         5a:a3:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:33 2024 by rpki-client on console-fra.rpki-client.org