Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/971856cf-40ad-3193-87b7-6d5098db916f.roa
File:                     971856cf-40ad-3193-87b7-6d5098db916f.roa (raw, json)
Hash identifier:          8D5fUnVEvdY3g0POGG0ba/bA9xIXNuWPq81Am84MGlo=
Subject key identifier:   BC:19:2A:F8:FD:4C:D2:4A:0E:81:B8:72:B8:F2:54:E7:D9:1F:33:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF51B8E209492FD30588300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/971856cf-40ad-3193-87b7-6d5098db916f.roa
Signing time:             Tue 12 Nov 2024 13:40:02 +0000
ROA not before:           Tue 12 Nov 2024 13:40:02 +0000
ROA not after:            Mon 10 Feb 2025 13:40:02 +0000
asID:                     397205
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:1b:8e:20:94:92:fd:30:58:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:02 2024 GMT
            Not After : Feb 10 13:40:02 2025 GMT
        Subject: CN=a11cd6dd-c9b8-45ce-bf07-f910d8175303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:5f:2a:81:f9:ae:18:8a:dd:1a:71:76:09:
                    4f:03:e0:9b:85:3d:28:bd:b8:e2:c3:0c:08:cb:0d:
                    3c:2b:0d:06:ae:fe:1c:3e:0c:4e:d5:5f:1d:5e:03:
                    2d:5e:27:12:e0:22:24:f3:9c:33:c2:41:2e:72:cb:
                    dd:dc:0f:b9:a3:d2:52:14:3b:05:24:73:99:b4:12:
                    fc:69:ec:a3:8e:75:b7:a9:b2:9f:4d:d7:0b:8c:4b:
                    a6:c8:48:fb:f0:ac:e1:ce:d0:03:a1:b5:72:a5:17:
                    27:4a:99:d6:b0:91:78:04:76:6e:fc:f5:3b:5e:c2:
                    c0:52:0b:c1:2c:c0:eb:d9:fa:df:6a:2c:7d:9b:bb:
                    fd:ec:91:ae:f4:da:39:21:6d:9e:30:fd:75:39:46:
                    cd:10:fb:ce:bd:a5:ec:97:1e:d6:64:49:e3:66:8e:
                    f6:a9:95:4f:c8:57:fa:93:7d:71:70:59:25:e1:e7:
                    c3:be:bb:f0:d0:73:d3:da:d2:0f:3b:f6:31:a3:55:
                    d4:93:e6:e0:b1:6e:0a:11:5b:a9:6e:3b:03:69:9c:
                    46:52:7e:ac:fa:23:07:93:3d:00:50:fb:be:6e:ce:
                    85:04:e7:ea:bb:2a:ef:b3:44:ab:60:1f:c1:7c:86:
                    88:ef:bf:30:64:b9:0e:1b:dc:4d:9a:5e:b7:a6:06:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:19:2A:F8:FD:4C:D2:4A:0E:81:B8:72:B8:F2:54:E7:D9:1F:33:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/971856cf-40ad-3193-87b7-6d5098db916f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:72:23:9a:1c:47:43:79:fa:a3:0c:8c:18:48:f1:be:bd:66:
         8a:5a:9a:f5:93:aa:db:b7:77:64:ce:f7:b7:68:4c:1b:3e:b5:
         12:5f:3a:b6:c3:1f:89:31:47:a3:7c:9f:ec:6c:77:52:c5:4e:
         e0:a3:1a:22:43:3e:d3:4a:b2:64:13:33:e6:b5:0e:f8:29:3d:
         e6:05:10:be:71:78:2b:5d:ed:f5:00:39:b2:c3:e7:54:77:79:
         37:26:12:c4:04:e1:de:71:e6:f2:55:f6:1d:79:1c:ef:c8:d9:
         fc:4a:5a:93:47:7b:bc:94:2e:16:f0:8d:79:12:a3:51:79:32:
         da:71:45:44:02:8c:8a:24:9e:b8:fe:80:8f:dc:57:f6:8e:e2:
         41:d2:d1:ec:cb:c1:51:5f:45:e8:9a:b8:63:7e:bd:74:7f:d1:
         55:4e:b0:d6:28:7c:de:05:25:5d:55:a8:c3:75:ec:fd:a5:fc:
         07:79:5b:92:c4:10:3c:65:b6:7b:82:d4:2a:0c:56:72:1d:e9:
         ad:e0:3f:e1:c8:e3:5f:9a:d5:a6:d9:4f:ab:3c:b9:5c:e7:3f:
         c8:77:45:3d:e4:fc:d0:c8:df:46:cd:35:9b:e4:12:41:59:8a:
         f3:9b:e0:8a:1f:d9:9d:14:b3:2b:9d:22:2c:53:94:5e:0d:c6:
         95:61:0a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:10 2024 by rpki-client on console-ams.rpki-client.org