Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a299b466-1d31-3e09-8b30-d6e652e23b9b.roa
File:                     a299b466-1d31-3e09-8b30-d6e652e23b9b.roa (raw, json)
Hash identifier:          WswPrdFuSzr2RTO0m+hnr8xD8N7X+pCGv/ERNhMxAkQ=
Subject key identifier:   27:FA:7A:D3:A5:E7:17:E2:A8:04:D0:06:B4:20:E8:9E:4E:0D:6E:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584773964BA94733094F30227780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a299b466-1d31-3e09-8b30-d6e652e23b9b.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     36618
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:4b:a9:47:33:09:4f:30:22:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=f33c5bcd-0651-47b9-b36e-41ddd83f037e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:16:c6:c5:7f:21:f9:ca:ec:ef:fe:2d:0f:
                    a5:ea:da:ec:37:2b:d8:76:33:57:53:3c:3a:49:f6:
                    a6:70:c7:02:e4:fb:8f:dc:85:2b:fb:99:29:51:97:
                    da:dd:fc:57:c2:3e:51:0b:4d:0e:d8:d4:6c:92:8a:
                    2b:d2:8e:99:36:bd:8f:60:54:67:13:4d:5f:76:38:
                    70:51:be:df:d3:d7:5c:17:cd:f8:17:06:b4:84:cd:
                    3a:d1:80:b9:05:c4:81:e8:b6:9a:8f:16:db:bf:84:
                    ad:d0:d2:a4:0c:09:c9:44:93:df:5a:d1:27:b5:34:
                    c3:7b:0a:84:9d:59:7c:7e:e6:db:22:d8:84:50:fb:
                    f3:01:de:ac:96:82:db:57:a9:01:65:66:fc:3d:d5:
                    c9:a0:9c:98:6e:f8:64:e4:0b:5f:29:ed:e6:c0:74:
                    86:6e:3c:79:28:56:44:ef:0b:31:f3:d2:25:a0:08:
                    59:71:7c:58:fd:84:2a:88:73:09:68:ed:29:4e:46:
                    8d:06:96:f3:b9:7a:90:55:c8:98:a1:74:bd:4c:83:
                    b8:a1:41:74:05:9d:85:89:4e:db:2a:d9:e3:14:25:
                    f1:b3:59:e4:91:10:5c:02:85:e3:df:81:bf:8a:d8:
                    2c:94:b9:be:f9:26:da:b7:88:8c:db:f6:c4:0b:94:
                    cd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FA:7A:D3:A5:E7:17:E2:A8:04:D0:06:B4:20:E8:9E:4E:0D:6E:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a299b466-1d31-3e09-8b30-d6e652e23b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:7f:f0:31:a8:db:19:ef:94:ab:cc:1c:a8:1c:99:d3:60:52:
         af:c8:bb:42:2d:aa:79:c5:f2:66:11:43:71:19:7b:56:29:22:
         2b:42:2e:12:ed:fb:97:7d:e3:11:bd:3c:6e:21:af:80:95:55:
         89:b7:c7:f8:ec:a5:61:9e:7a:5a:07:f8:fe:23:68:28:d6:2a:
         98:9d:51:d6:4a:01:21:fe:5c:47:d0:1b:37:75:71:be:30:68:
         16:b6:69:f6:e5:59:48:42:7e:6a:7e:47:19:19:3e:ac:42:03:
         7b:6d:94:7a:74:ad:e7:68:6b:a3:a3:17:cf:e4:2f:d7:21:93:
         7f:5f:7f:ab:4a:2c:7e:49:6c:b3:c0:7a:42:2f:ae:d9:66:81:
         ab:d6:d2:dd:ac:32:a6:f1:c5:23:17:d9:49:e8:52:ac:d5:37:
         35:f0:88:88:06:a5:3e:c6:5e:f5:37:1c:95:8c:a0:5a:17:36:
         b0:c0:98:00:09:21:68:ac:51:c6:e6:ca:69:6f:ae:98:d9:60:
         8d:79:fc:63:59:6a:24:4b:57:d6:40:69:15:a3:d6:58:c9:54:
         81:c4:58:3a:08:95:97:48:8e:bb:c4:64:84:2e:47:5c:7b:1f:
         9d:d3:fd:2d:5e:c7:21:69:91:a8:37:89:d9:5a:00:71:0d:5e:
         1c:87:26:fb
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdzlkupRzMJTzAid4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZjMzYzViY2QtMDY1MS00N2I5LWIzNmUtNDFkZGQ4M2YwMzdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+wWxsV/IfnK7O/+LQ+l6trsNyvYdjNXUzw6
SfamcMcC5PuP3IUr+5kpUZfa3fxXwj5RC00O2NRskoor0o6ZNr2PYFRnE01fdjhw
Ub7f09dcF834Fwa0hM060YC5BcSB6Laajxbbv4St0NKkDAnJRJPfWtEntTTDewqE
nVl8fubbItiEUPvzAd6sloLbV6kBZWb8PdXJoJyYbvhk5AtfKe3mwHSGbjx5KFZE
7wsx89IloAhZcXxY/YQqiHMJaO0pTkaNBpbzuXqQVciYoXS9TIO4oUF0BZ2FiU7b
KtnjFCXxs1nkkRBcAoXj34G/itgslLm++Sbat4iM2/bEC5TN4QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCf6etOl5xfiqATQBrQg6J5ODW4UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTI5OWI0NjYtMWQzMS0z
ZTA5LThiMzAtZDZlNjUyZTIzYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC9f/AxqNsZ75SrzByoHJnTYFKvyLtCLap5xfJm
EUNxGXtWKSIrQi4S7fuXfeMRvTxuIa+AlVWJt8f47KVhnnpaB/j+I2go1iqYnVHW
SgEh/lxH0Bs3dXG+MGgWtmn25VlIQn5qfkcZGT6sQgN7bZR6dK3naGujoxfP5C/X
IZN/X3+rSix+SWyzwHpCL67ZZoGr1tLdrDKm8cUjF9lJ6FKs1Tc18IiIBqU+xl71
NxyVjKBaFzawwJgACSForFHG5sppb66Y2WCNefxjWWokS1fWQGkVo9ZYyVSBxFg6
CJWXSI67xGSELkdcex+d0/0tXschaZGoN4nZWgBxDV4chyb7
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:11 2024 by rpki-client on console-ams.rpki-client.org