Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80aa2f86-1b5c-3639-a8a2-b3595cdc85f1.roa
File:                     80aa2f86-1b5c-3639-a8a2-b3595cdc85f1.roa (raw, json)
Hash identifier:          3Dk7czXqR7vPzg3AMza5z8QA0q0z5iA6IHQV1rYF/JU=
Subject key identifier:   18:AD:D0:6C:CD:26:82:BA:9F:28:A2:A2:3F:37:94:00:A1:21:28:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476593F92D50CDF58CFD427680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80aa2f86-1b5c-3639-a8a2-b3595cdc85f1.roa
Signing time:             Tue 01 Oct 2024 12:34:44 +0000
ROA not before:           Tue 01 Oct 2024 12:34:44 +0000
ROA not after:            Mon 30 Dec 2024 13:34:44 +0000
asID:                     396547
IP address blocks:        2001:500:122::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:93:f9:2d:50:cd:f5:8c:fd:42:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  1 12:34:44 2024 GMT
            Not After : Dec 30 13:34:44 2024 GMT
        Subject: CN=b4e19b71-5402-413d-8941-18b3cde2dc23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:06:57:06:77:9c:38:ce:b0:99:65:01:d2:
                    ce:f4:7c:02:95:92:82:33:c9:d5:e8:7a:10:a9:00:
                    40:c2:65:5b:66:89:d5:4a:30:1f:89:82:98:26:63:
                    b6:c3:b8:aa:e4:59:ed:a2:32:97:af:00:0e:ef:97:
                    89:65:d3:e8:f7:c8:3f:26:ae:d4:b4:cb:89:0d:74:
                    47:98:c3:a7:d1:2a:c6:36:8d:e6:82:43:8d:73:4b:
                    d2:49:1c:39:50:c4:98:77:31:b8:6b:7e:8d:4b:b8:
                    cd:be:36:87:e8:af:f1:2c:d5:67:7d:20:48:85:22:
                    15:b2:dd:2a:5d:d4:87:67:f3:5a:92:ad:ea:b3:3f:
                    2f:3e:cf:0f:47:8c:5d:36:81:37:78:91:e1:e4:2f:
                    1c:6d:76:da:83:0d:f0:a6:b8:ee:61:66:0b:0b:ef:
                    c5:de:62:96:bf:c7:46:2d:63:01:24:ff:24:aa:5c:
                    02:1d:ec:03:67:a1:b1:6f:10:95:2e:8c:e0:dd:dc:
                    90:db:0b:8b:a3:0c:d5:a8:ed:ca:f0:9b:73:41:3d:
                    cd:e6:4d:5a:bb:27:aa:bd:7e:26:e6:30:c9:8a:f9:
                    46:d3:63:d6:13:d3:b6:ab:f6:4c:67:47:c4:07:50:
                    93:a5:28:55:c5:4e:11:77:6c:53:39:85:08:a9:eb:
                    d2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AD:D0:6C:CD:26:82:BA:9F:28:A2:A2:3F:37:94:00:A1:21:28:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80aa2f86-1b5c-3639-a8a2-b3595cdc85f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:20:27:8a:9c:5c:4f:7f:93:4a:13:5f:91:d6:0a:eb:aa:6f:
         a3:78:61:f6:50:7c:cc:62:cb:b3:3c:c1:c6:2a:f6:01:21:4a:
         55:74:8b:e5:24:58:30:ea:a1:01:38:9e:5d:7a:2b:b0:7d:f3:
         29:71:6f:f2:28:97:8b:df:91:c6:1f:d9:65:9c:1f:88:8b:8c:
         fd:00:65:96:b0:e9:4a:60:b3:f7:32:13:3d:08:45:29:cd:80:
         a5:4b:30:ec:f5:39:ac:fb:58:99:1b:e9:df:cc:23:e3:36:5d:
         fe:b1:f1:f3:0b:5d:c9:ee:0a:0f:20:33:fb:59:0a:9a:c6:3d:
         1c:22:1f:71:c7:c7:0f:92:f0:8c:bf:82:1a:cd:3f:b2:cc:6b:
         4e:b9:ff:09:45:f0:b9:42:bd:0a:be:64:36:82:36:89:aa:1b:
         2d:ea:7e:8f:e6:b4:7f:28:84:3b:de:3b:a2:56:6b:21:76:69:
         44:e7:c2:bb:5c:6d:03:f9:cf:67:28:0b:10:14:54:97:6b:2e:
         bc:19:37:70:03:a7:46:d7:e2:37:45:e5:1d:42:3e:fe:6d:2f:
         49:1f:02:eb:88:32:6a:19:62:67:42:ea:ee:2a:01:65:61:f9:
         87:0a:4c:25:04:67:88:e7:7d:15:c6:6e:67:57:30:19:81:35:
         b7:7d:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:07 2024 by rpki-client on console-ams.rpki-client.org