Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dbcdcba-e7f8-31d4-ae0c-d002ae017859.roa
File:                     7dbcdcba-e7f8-31d4-ae0c-d002ae017859.roa (raw, json)
Hash identifier:          y9WTY7poCcqoExrQkSdj/K7uBYwtBNBl3nbZhbJJK3k=
Subject key identifier:   F6:AF:79:EE:73:12:A2:41:60:01:27:F4:B9:3A:C8:83:2D:EE:ED:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EEDC4A40699101ABBF2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dbcdcba-e7f8-31d4-ae0c-d002ae017859.roa
Signing time:             Thu 26 Sep 2024 12:35:30 +0000
ROA not before:           Thu 26 Sep 2024 12:35:30 +0000
ROA not after:            Wed 25 Dec 2024 13:35:30 +0000
asID:                     21313
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:ed:c4:a4:06:99:10:1a:bb:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:30 2024 GMT
            Not After : Dec 25 13:35:30 2024 GMT
        Subject: CN=253b1ab4-3a5c-489f-8f91-dfb3178f7600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:77:3e:93:73:fa:a4:86:e7:70:3e:de:40:
                    c2:76:98:5a:b1:b3:e7:47:5a:27:53:6d:67:dd:9e:
                    a7:79:11:b9:a1:ec:98:41:d4:b8:35:19:bd:ed:a7:
                    12:f0:c8:a0:b5:be:0f:9b:97:31:65:53:67:3c:d2:
                    5b:ec:c9:83:1a:6f:8b:77:eb:99:66:1b:67:de:24:
                    8c:49:74:ee:f3:14:2f:47:3f:c2:a3:f3:20:ca:44:
                    5c:4d:6d:f8:43:47:1c:72:39:75:bf:b9:89:52:5f:
                    22:58:3d:99:49:f2:d7:ca:eb:c2:c6:ee:c0:c5:91:
                    bb:76:2a:53:2b:1a:02:9d:d5:17:5f:07:47:ef:38:
                    7c:81:5d:5b:10:17:f0:f7:98:5d:2d:78:17:b8:a0:
                    bd:5c:9b:6f:7a:c9:d0:64:14:5a:3b:3a:65:81:f2:
                    04:7b:e0:27:2f:d9:e0:5d:7b:b9:62:04:a3:7f:4b:
                    aa:63:9e:8b:8d:0b:4b:a4:13:22:94:b5:2b:86:42:
                    29:7f:50:29:a0:72:cf:ff:56:cd:a9:73:34:86:ae:
                    f9:1c:7b:79:41:78:d1:43:1f:2e:7d:5d:c1:8e:71:
                    8e:d7:62:4b:a3:d6:a0:11:0f:8a:2f:23:92:c2:72:
                    97:00:de:6f:a9:09:03:69:69:3b:6f:ef:f5:db:47:
                    bb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AF:79:EE:73:12:A2:41:60:01:27:F4:B9:3A:C8:83:2D:EE:ED:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dbcdcba-e7f8-31d4-ae0c-d002ae017859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:fb:e2:ca:18:f5:a0:8b:b0:1b:2a:cd:1b:fe:31:8c:ae:38:
         c2:ba:e4:32:96:10:c9:1d:af:5c:f5:c2:d8:40:94:88:37:dd:
         4c:93:de:dc:9d:08:9c:6a:34:2c:61:9a:37:cb:f7:41:9a:56:
         03:49:40:e4:e9:fa:7a:6e:9a:28:a2:53:f4:56:5f:6f:71:b7:
         35:d3:f5:d4:7e:ee:77:52:e5:40:bf:c5:33:df:18:df:5a:2e:
         93:21:4f:c5:16:a7:67:8f:05:9c:46:89:75:e8:36:a1:d4:66:
         98:d7:e0:79:c7:62:ef:f5:6a:0b:4f:79:60:a7:86:9f:e3:48:
         a4:e3:dc:25:d2:d0:41:13:d9:b5:37:67:da:62:c4:2f:a0:a4:
         67:65:61:54:c9:3e:6e:0a:8c:3b:5d:db:cd:60:18:e4:6c:0b:
         8a:d1:b0:ae:96:b4:9f:ca:a5:52:aa:15:9f:ec:47:8d:ae:fa:
         f7:75:b6:77:cd:c0:4d:a9:6e:48:17:1e:87:cb:10:94:89:e1:
         d0:c0:c6:7a:89:ab:b5:74:6f:85:b3:43:2d:8b:29:d9:fc:dd:
         7d:04:b8:a6:bf:ff:6d:36:ee:d9:c7:15:c6:92:92:81:32:78:
         1b:eb:59:90:ee:23:86:b3:a3:1f:d7:25:65:f8:68:73:11:31:
         2c:ba:83:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:34 2024 by rpki-client on console-fra.rpki-client.org