Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a18f028-7291-3b05-9b6d-58ab78d2998f.roa
File:                     8a18f028-7291-3b05-9b6d-58ab78d2998f.roa (raw, json)
Hash identifier:          BC6ezzR/2ra/X4ZCMXZggJ1C1YEX3zO/og7x+hbt7qo=
Subject key identifier:   1A:1B:7A:CD:14:30:80:00:E7:7F:56:DF:75:8C:35:0E:0B:A7:DC:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476B296D3929E57BAC90429C70
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a18f028-7291-3b05-9b6d-58ab78d2998f.roa
Signing time:             Thu 03 Oct 2024 12:34:55 +0000
ROA not before:           Thu 03 Oct 2024 12:34:55 +0000
ROA not after:            Wed 01 Jan 2025 13:34:55 +0000
asID:                     396543
IP address blocks:        2001:500:121::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:29:6d:39:29:e5:7b:ac:90:42:9c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 12:34:55 2024 GMT
            Not After : Jan  1 13:34:55 2025 GMT
        Subject: CN=b639f597-d71f-4152-8237-edd8f38a8b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:21:2a:16:58:b2:2a:8c:d5:d3:e7:2d:aa:c5:
                    ac:4f:7a:54:24:13:c5:4a:df:0c:aa:e3:d4:48:67:
                    aa:91:ac:c8:28:02:39:3f:af:3c:9b:fe:a3:cd:d1:
                    a0:70:5c:22:b4:ef:65:70:c4:84:47:10:bd:07:97:
                    8b:f8:c8:0b:20:9f:e1:79:31:fd:cd:3c:57:0b:7a:
                    00:a6:e6:ad:b2:a8:29:c5:8c:42:80:7e:ff:35:af:
                    cb:9e:64:5c:f4:b3:a3:b6:27:b0:41:25:4f:c9:a6:
                    ba:39:b4:84:58:c0:f1:78:82:ec:a6:57:09:37:80:
                    a5:d3:9f:6b:43:f4:33:bf:0a:ea:b6:d2:8f:fd:fa:
                    d4:fa:06:ed:62:46:ac:16:05:11:1d:7f:29:81:af:
                    8f:73:40:c8:8f:4e:7f:27:1d:8c:4e:21:fd:b1:eb:
                    53:23:37:59:88:9f:89:32:f7:33:a1:33:f1:c0:46:
                    bc:57:fd:4e:cd:94:40:c0:4e:66:a8:99:f6:54:d4:
                    e5:f2:be:99:8f:50:c4:14:7b:da:cc:9b:c0:fd:16:
                    45:50:08:49:35:72:9a:de:fb:08:23:7f:47:81:6a:
                    32:1e:1b:c1:b9:78:56:c9:17:22:0b:f6:ba:87:77:
                    ac:60:f2:0b:b5:32:b5:75:c9:ed:b7:92:b9:d6:5f:
                    ac:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1B:7A:CD:14:30:80:00:E7:7F:56:DF:75:8C:35:0E:0B:A7:DC:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a18f028-7291-3b05-9b6d-58ab78d2998f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:23:01:9c:c5:ac:a5:e4:0e:ce:76:02:ac:52:54:13:3d:d5:
         14:ec:87:f0:0a:89:65:c1:42:f8:d2:f7:53:3e:61:e2:b0:5b:
         f0:f5:c9:ff:8b:87:c7:a4:34:97:72:7d:14:9c:f3:08:40:1c:
         e9:6a:e6:e9:ef:16:16:c4:f9:eb:96:87:76:4b:5f:06:d9:07:
         4c:d5:f0:09:04:aa:2a:17:01:31:1c:88:23:3e:88:b8:f2:3f:
         d9:2f:b0:06:b8:cd:6e:59:47:5d:24:f9:c2:8e:ca:7c:aa:4a:
         79:c1:eb:58:a3:31:19:84:28:7d:3c:49:f4:83:d3:df:22:80:
         1c:8f:54:27:dc:f0:0f:83:7c:00:65:c8:54:3f:67:89:16:be:
         68:1f:52:67:6e:d3:86:9f:87:be:9c:1d:b5:11:19:fa:18:a0:
         8a:bb:dc:1d:e3:c1:19:40:07:14:65:d0:0e:33:7e:51:36:71:
         7b:01:95:bd:19:9d:99:13:00:3f:15:d2:be:3f:e5:8f:02:ad:
         95:8e:a1:90:96:fa:96:54:22:71:41:e3:0c:e2:a4:2f:46:5c:
         97:0d:b9:26:9f:6b:69:d5:97:ef:50:39:49:56:39:09:bd:35:
         9a:38:d8:21:ba:bb:b8:c5:94:d4:12:49:c2:02:75:d1:e8:3b:
         a5:b3:af:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:07 2024 by rpki-client on console-ams.rpki-client.org