Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5194661-dcbe-3be7-9f6b-4e0a6a838fa8.roa
File:                     b5194661-dcbe-3be7-9f6b-4e0a6a838fa8.roa (raw, json)
Hash identifier:          YubteMBHShAQ6kwa90X1V1jOlZi9dTsXaP6gVrHYRlc=
Subject key identifier:   30:93:8C:E1:37:FC:15:B0:91:1D:7F:B4:B4:13:B6:49:F5:77:AC:FA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847BC2C1E502B084CA3C51ADF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5194661-dcbe-3be7-9f6b-4e0a6a838fa8.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     36628
IP address blocks:        2001:500:30ff::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:1e:50:2b:08:4c:a3:c5:1a:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=a4cbd518-9398-4d88-9b9b-1897e44abd16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:68:2b:b2:a4:1f:d0:c6:fd:2c:d2:97:9b:06:
                    55:0d:d2:22:2a:8e:b4:e6:d1:56:6c:f1:38:1d:94:
                    cc:6d:f6:a4:4b:4e:97:46:de:3d:07:09:9e:05:7f:
                    72:db:03:90:ef:6e:17:a3:2e:75:d7:f1:f1:7a:b7:
                    1d:81:15:a7:bf:df:10:e1:37:3e:a5:e6:f0:8a:f8:
                    f7:fa:08:8a:7b:47:aa:1d:77:cd:2e:b3:53:b8:ae:
                    64:9c:78:be:6b:06:ea:a0:13:4b:ef:2e:ce:0d:6a:
                    1e:32:f1:31:e5:cf:80:45:7b:d3:80:c1:e9:26:80:
                    71:91:a1:8d:92:ff:c6:6d:5c:64:35:49:b8:cc:94:
                    ce:0f:c2:20:07:2f:08:52:ea:7a:fd:d5:b4:59:14:
                    a8:18:bf:6f:9e:08:51:b4:f9:fc:fa:e9:cd:48:25:
                    f9:ad:cd:d1:01:6c:3c:72:4e:ae:46:cb:bf:f7:a3:
                    8c:94:cd:72:5b:11:76:aa:e2:92:23:2d:b3:e8:ee:
                    42:c3:52:d2:52:bd:fc:35:a3:49:d1:14:f1:38:b7:
                    f8:34:5f:8e:1a:be:ab:9b:c2:d2:d9:73:e8:34:52:
                    ef:cf:75:13:0e:69:3d:69:25:66:e3:79:6d:4a:64:
                    26:82:f9:8f:6b:75:ff:e0:21:13:ab:f4:6a:fa:17:
                    4d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:93:8C:E1:37:FC:15:B0:91:1D:7F:B4:B4:13:B6:49:F5:77:AC:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5194661-dcbe-3be7-9f6b-4e0a6a838fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:8a:8c:9d:0c:55:e6:33:5f:1a:61:4d:86:38:bc:6c:2b:ed:
         97:fe:07:69:e1:c6:fc:59:45:62:b3:97:b8:53:6d:da:5d:68:
         d0:28:02:c8:e2:0d:8d:1d:b6:6a:d3:c7:6c:ad:9f:2a:de:01:
         5d:31:50:70:d5:80:85:80:21:c2:e7:2d:d0:10:1d:e5:18:5a:
         6d:3f:3d:12:3b:58:e9:bc:b1:c2:cd:10:74:d8:42:b3:5e:57:
         c3:d2:8d:e6:af:da:de:bd:ed:af:9d:e7:bc:87:7e:f6:6e:63:
         a9:1c:df:3b:fd:9c:0d:e6:04:b8:56:bd:09:0c:92:a7:20:a7:
         62:5f:d3:1c:e3:fc:38:1c:71:30:4f:63:17:a0:3c:e5:35:db:
         1f:cb:0b:ff:21:aa:44:cb:13:92:d3:41:9d:69:97:0a:51:69:
         c0:f1:07:2c:1a:56:a2:a0:66:fc:1a:35:fb:26:b1:14:5e:fe:
         fb:1c:1f:02:32:30:b5:ce:c5:20:9e:11:f3:51:76:ce:2c:9f:
         9b:a4:44:53:ed:56:6e:6b:4f:1e:07:e0:f6:77:fc:dd:72:8e:
         ea:ab:cf:fe:17:2e:a1:38:d5:52:d2:4e:9f:9c:19:8c:00:63:
         5c:99:59:56:30:53:d8:4d:4a:f5:64:81:56:f8:5d:cf:fc:f0:
         04:8b:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:13 2024 by rpki-client on console-ams.rpki-client.org