Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ed0f07c-dc74-336f-afe3-de6fbb10719c.roa
File:                     7ed0f07c-dc74-336f-afe3-de6fbb10719c.roa (raw, json)
Hash identifier:          RrCt7XPJJLIKf/LUdr+OBZQkBlz8p2Wfa0C+GnbBrRM=
Subject key identifier:   25:31:39:8D:69:6A:3D:86:62:52:3E:12:2A:87:5F:6E:05:E5:F0:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0885B263E9D87FF9EF56F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ed0f07c-dc74-336f-afe3-de6fbb10719c.roa
Signing time:             Thu 14 Nov 2024 13:35:46 +0000
ROA not before:           Thu 14 Nov 2024 13:35:46 +0000
ROA not after:            Wed 12 Feb 2025 13:35:46 +0000
asID:                     397200
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:5b:26:3e:9d:87:ff:9e:f5:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:46 2024 GMT
            Not After : Feb 12 13:35:46 2025 GMT
        Subject: CN=b580e6ad-a8b6-4e16-9a9f-e92cf4460b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:33:ce:a9:df:34:ad:74:0a:68:57:77:a1:
                    36:dd:4c:22:9f:a6:75:a5:f8:0d:93:1a:f0:b3:02:
                    d5:65:af:cd:7c:53:aa:a0:07:44:ee:a4:e2:f3:b8:
                    a6:d0:e9:cd:3e:e6:c4:66:55:f3:64:13:84:63:eb:
                    79:51:50:83:4c:8f:f1:04:f5:c0:ab:15:2f:bb:e7:
                    2f:62:17:84:f8:16:07:c4:8e:a3:e6:2b:af:b9:45:
                    f5:f5:95:c1:9c:97:3f:82:e5:e2:bc:c0:64:5a:d6:
                    31:fc:4c:d6:18:9c:61:41:da:99:20:f7:33:b1:c7:
                    fd:f1:c0:3b:00:1b:c9:b6:0b:cc:8a:9d:4b:38:04:
                    a2:13:76:b4:5b:90:40:39:c5:db:5b:f7:bb:6c:7f:
                    a2:44:f4:d2:e8:c4:94:3b:d3:1c:8c:67:83:2b:f6:
                    0a:24:42:85:b6:de:17:ef:c9:87:e1:32:94:f5:eb:
                    ae:c3:a9:23:07:26:a9:05:93:63:00:10:96:bd:68:
                    bc:50:ea:d1:1a:71:64:74:54:2b:10:07:85:53:d7:
                    6a:21:fa:03:41:55:7a:2f:6a:4a:b6:73:25:32:59:
                    ce:3c:1d:5e:80:46:e4:44:89:3c:0b:e2:2e:16:0c:
                    16:13:ee:c3:b2:8d:df:ca:90:6a:ba:dc:53:72:b4:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:31:39:8D:69:6A:3D:86:62:52:3E:12:2A:87:5F:6E:05:E5:F0:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ed0f07c-dc74-336f-afe3-de6fbb10719c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e2:93:48:72:b9:7e:eb:94:bf:de:68:68:7c:dd:cb:06:13:
         99:9c:62:0f:bd:6c:dd:4b:9d:fc:57:79:01:c1:92:b4:53:dd:
         90:06:1b:2f:32:e2:00:c5:e5:50:8f:8c:94:c2:d3:1b:a9:b5:
         12:13:4a:40:7b:f3:11:1f:e5:86:61:c2:3c:28:41:4c:fe:33:
         7d:29:28:6f:30:a3:f2:94:3d:4d:4a:b7:6a:9c:ac:39:a9:e8:
         33:7c:21:23:fb:a7:77:a7:b7:9c:48:09:29:46:7f:a5:50:c8:
         73:da:09:01:20:cf:f5:62:64:ff:0d:cf:2f:ad:c1:54:04:d3:
         0a:ad:37:e9:fa:88:84:14:6e:63:43:c3:df:60:9e:1f:83:3e:
         2a:f5:2c:3b:66:dd:da:51:11:ba:f4:db:7a:d7:f7:f1:e1:a5:
         79:04:22:e5:03:5e:32:34:60:81:8c:93:c5:ce:c8:d4:5b:ca:
         c3:91:de:46:71:24:fc:b3:4c:6a:9a:ab:99:7c:1f:13:62:11:
         1e:a0:0a:9d:d0:66:1e:54:67:e9:67:67:33:a9:58:40:d6:8d:
         a8:81:2d:01:d5:07:59:98:e9:88:89:04:dc:aa:df:fb:a9:0b:
         4b:69:80:06:b2:ff:a1:47:22:42:52:96:47:18:42:18:7d:ec:
         0f:52:2d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:34 2024 by rpki-client on console-fra.rpki-client.org