Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3730c19-8777-3357-8533-d60091dda817.roa
File:                     b3730c19-8777-3357-8533-d60091dda817.roa (raw, json)
Hash identifier:          o3rkswSac2d5m3VUfEJXEOb3EX3TROP5VXB15x6DUp8=
Subject key identifier:   FE:24:F7:20:03:64:E3:07:3E:17:0D:92:5A:D3:A1:47:6D:7A:B3:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847791CF90EBE612477E461B800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3730c19-8777-3357-8533-d60091dda817.roa
Signing time:             Tue 08 Oct 2024 12:31:08 +0000
ROA not before:           Tue 08 Oct 2024 12:31:08 +0000
ROA not after:            Mon 06 Jan 2025 13:31:08 +0000
asID:                     397193
IP address blocks:        2001:500:120::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:1c:f9:0e:be:61:24:77:e4:61:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  8 12:31:08 2024 GMT
            Not After : Jan  6 13:31:08 2025 GMT
        Subject: CN=261f7a5b-f0a2-499c-98e8-f4b87061e7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e4:e6:a8:65:31:bb:b8:3a:43:27:e0:7d:bc:
                    69:3f:27:05:b6:04:00:13:a2:89:a3:2a:4d:60:0f:
                    f2:2a:e5:6d:89:6d:2b:30:69:ee:86:62:dc:50:73:
                    09:3f:11:0d:2c:6f:2a:a0:0d:6e:00:a3:dd:a8:55:
                    9b:9e:c5:65:d7:95:e5:cf:a7:da:78:0c:f3:ce:91:
                    44:3e:c0:ed:30:2a:02:1b:87:93:6f:42:bb:87:1b:
                    57:9a:5d:19:f0:cd:ef:1b:dd:b5:29:4c:0b:b9:52:
                    42:8f:39:7a:72:60:80:66:a3:c3:01:cb:a8:57:c5:
                    e5:d7:da:0e:73:13:c1:fd:93:b2:63:c4:51:d9:ec:
                    eb:ff:45:d8:0f:45:2c:fa:02:82:c9:6b:c3:43:b1:
                    37:04:68:a3:f6:e0:fd:12:d3:80:9b:10:80:0e:f1:
                    43:2d:f4:fd:bd:a8:99:37:bd:fa:23:58:a4:4b:a8:
                    b1:72:b3:c3:dd:02:e9:0b:04:f1:7a:7c:39:88:00:
                    de:c6:64:6b:c8:ca:31:37:20:18:27:f1:ff:9d:df:
                    07:02:ee:4e:a4:85:3b:8b:6b:a9:14:b9:05:5c:a4:
                    72:7b:2a:27:79:e1:0f:f7:41:b6:89:d7:80:ee:79:
                    e2:1c:1a:2e:9c:94:28:42:80:6d:24:c8:7d:14:35:
                    35:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:24:F7:20:03:64:E3:07:3E:17:0D:92:5A:D3:A1:47:6D:7A:B3:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3730c19-8777-3357-8533-d60091dda817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:79:90:1b:d6:32:f8:41:e7:a4:b5:10:37:8c:d6:f0:4e:2a:
         68:c9:9e:05:ec:6d:b9:d6:84:1f:32:70:19:51:e1:0f:2a:07:
         93:da:c4:c7:8f:d1:e0:a3:dd:6f:3a:3c:e5:c8:14:5e:66:c7:
         79:3d:e5:05:ae:d5:95:31:e4:d9:74:98:bc:6a:f8:4f:39:9e:
         9b:bf:37:5a:6d:82:f0:73:e2:d2:aa:56:5f:ff:f3:38:77:92:
         b1:e7:82:dc:9c:61:4c:0d:17:ed:6c:ff:fc:54:2c:ba:52:f4:
         36:78:01:88:ff:e2:e4:c8:1c:41:3e:fe:27:82:7e:b6:00:4e:
         2e:43:e1:64:d4:05:a9:48:36:84:b6:2d:f5:56:89:b9:d6:53:
         f6:10:77:cd:a7:37:94:5f:af:d6:f2:0b:e4:8c:ec:93:29:a0:
         fb:7e:ac:1e:fa:6a:79:4d:a4:7d:06:8f:ac:ad:5f:10:1c:84:
         af:66:a9:90:ec:5b:ba:67:3e:1f:a7:0e:3d:39:6d:46:53:b8:
         32:9f:4a:76:c2:eb:df:40:a0:23:b4:62:c9:e0:d5:a5:ac:55:
         6d:15:43:be:05:74:61:e7:f6:2d:b3:29:e7:57:7d:20:2d:60:
         03:9b:33:84:29:b2:60:de:c1:4c:08:19:f3:28:db:bc:7b:b2:
         97:b3:16:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:12 2024 by rpki-client on console-ams.rpki-client.org