Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8acd338d-5b10-3587-9162-16ec3c8c1cbe.roa
File:                     8acd338d-5b10-3587-9162-16ec3c8c1cbe.roa (raw, json)
Hash identifier:          lI1m9W+9c3fP9mL7uBR/UMO5a8Vr1l6+vTajvW/7jSo=
Subject key identifier:   88:B1:0D:85:BC:D5:8A:53:E3:8E:5F:A0:F3:8F:ED:5E:AE:99:3E:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF51D1FCA0E77F45B62F5A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8acd338d-5b10-3587-9162-16ec3c8c1cbe.roa
Signing time:             Tue 12 Nov 2024 13:40:03 +0000
ROA not before:           Tue 12 Nov 2024 13:40:03 +0000
ROA not after:            Mon 10 Feb 2025 13:40:03 +0000
asID:                     396551
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:1d:1f:ca:0e:77:f4:5b:62:f5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:03 2024 GMT
            Not After : Feb 10 13:40:03 2025 GMT
        Subject: CN=cd76c179-aba5-46ec-8e59-0f18425f43a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:dd:a3:5d:f6:46:21:3d:e3:1a:b8:b7:b9:
                    06:b0:c9:40:5c:a7:70:84:64:ec:37:bc:2a:d4:90:
                    fb:1e:ce:9e:6f:e4:47:01:6d:5d:02:0e:d7:29:14:
                    56:ae:f0:03:b7:8c:9b:2a:33:e6:22:44:fd:d3:04:
                    84:97:1a:97:8c:a7:81:5d:ac:de:49:87:6e:9f:7e:
                    f0:26:a1:8e:09:fb:31:a7:71:8f:97:5d:ea:7f:30:
                    03:70:c8:d4:ec:d4:af:93:77:9a:a2:52:f4:75:19:
                    09:22:90:a0:d5:ee:d7:42:7d:6f:4d:4c:01:9b:f0:
                    5e:8d:3f:0c:54:77:e3:db:91:4d:98:2b:d7:3f:ca:
                    cc:68:56:7e:37:86:f2:eb:f0:ca:48:51:33:51:fb:
                    04:52:21:ae:2c:a8:82:eb:92:20:b2:84:11:a9:28:
                    61:18:23:54:ef:51:aa:cd:5e:f5:64:d5:43:86:aa:
                    dc:f9:fc:72:a7:4b:79:e8:cd:42:e1:34:ab:2d:6e:
                    d7:d6:82:56:86:09:21:27:2c:a2:26:14:8a:bd:c8:
                    b8:70:2e:26:d1:5d:ef:5a:63:ea:fb:8c:e7:b9:a2:
                    eb:4c:58:e8:21:88:55:ca:c8:77:2e:04:6f:6b:5f:
                    ce:cb:b3:41:1e:b8:59:47:66:77:44:9e:ba:82:ea:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B1:0D:85:BC:D5:8A:53:E3:8E:5F:A0:F3:8F:ED:5E:AE:99:3E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8acd338d-5b10-3587-9162-16ec3c8c1cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:84:a7:f0:42:42:fb:44:8d:02:02:f0:f6:71:00:21:c5:f4:
         30:32:8a:d4:7f:db:6f:85:ed:a6:cc:55:67:11:ff:80:34:d9:
         4a:c5:7b:49:b3:8c:bf:c7:49:e5:dc:11:c8:64:1d:81:c2:99:
         ae:69:09:ee:34:9f:13:14:9e:70:be:40:9b:8b:0c:7c:d5:49:
         8f:90:9d:f9:23:bd:50:1c:f9:5b:5c:d4:85:69:2b:fd:b7:33:
         b8:a1:fe:ac:38:51:11:31:26:db:16:f6:39:45:d2:21:79:15:
         da:cd:c3:9b:fe:61:2b:43:6a:f2:3b:c4:32:9a:7b:0e:5f:ac:
         84:ab:30:9b:12:fa:69:d7:30:89:4b:76:c1:e5:10:a4:a8:a0:
         1c:43:27:bb:4e:51:a6:f0:a4:2e:05:c0:3a:60:f7:0e:ea:27:
         aa:12:ee:f0:04:45:47:5a:fe:52:05:7f:8d:e0:d4:b0:05:58:
         94:a5:7c:b8:cc:28:ae:ab:37:be:08:0e:5e:1e:f0:97:54:14:
         f1:2a:53:f4:48:ae:27:83:a1:8c:60:1e:00:a8:fa:43:4a:b0:
         78:60:55:69:70:79:a1:62:7b:b7:0e:b1:02:a7:74:9d:b8:03:
         47:4d:dc:cf:96:ba:af:c4:2d:f7:0e:94:65:c8:88:c4:76:c0:
         e7:d6:cf:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:07 2024 by rpki-client on console-ams.rpki-client.org