Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba06575f-6a44-3531-a6b2-4aa363ec1398.roa
File:                     ba06575f-6a44-3531-a6b2-4aa363ec1398.roa (raw, json)
Hash identifier:          zfT/grvN8tkXnc0x5Z+m+eLZjCbzKQzaeoGJWivORvM=
Subject key identifier:   81:8E:EC:D7:BA:3B:C8:EC:C5:3E:E6:B5:2E:C3:82:CF:A2:37:A0:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EEACDB9E7FC3BE5E42700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba06575f-6a44-3531-a6b2-4aa363ec1398.roa
Signing time:             Thu 26 Sep 2024 12:35:28 +0000
ROA not before:           Thu 26 Sep 2024 12:35:28 +0000
ROA not after:            Wed 25 Dec 2024 13:35:28 +0000
asID:                     396584
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:ea:cd:b9:e7:fc:3b:e5:e4:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:28 2024 GMT
            Not After : Dec 25 13:35:28 2024 GMT
        Subject: CN=cfca15b5-e2f4-4763-8b2a-315083c13b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e2:9e:50:82:50:88:ce:64:3f:3c:7b:18:ec:
                    e2:d9:68:d8:d2:c3:8b:56:11:e6:cb:18:8b:fd:39:
                    41:7e:d6:1f:47:f4:5e:26:7a:1e:ad:e8:eb:2b:09:
                    ad:3b:0c:ca:89:7f:16:f2:18:ad:4f:21:7a:10:b6:
                    ad:73:30:fd:34:b6:57:38:2c:c8:fd:81:41:ea:04:
                    26:92:a7:68:e3:4f:3e:27:58:4a:d6:68:7c:81:15:
                    ec:17:b0:d8:68:9d:79:e2:41:72:04:3d:30:23:28:
                    9c:9b:41:4a:9c:b3:c0:c4:03:61:63:96:49:0b:0b:
                    6a:c1:01:3d:28:34:5a:d7:83:fb:b4:df:a1:ed:70:
                    26:aa:03:71:76:75:a6:68:ae:37:69:f1:7e:16:bc:
                    d7:f7:bc:d6:f6:ef:9c:83:ac:77:b4:d6:17:53:58:
                    a4:cf:8f:4a:38:5c:2f:d9:b3:5e:1f:84:fa:c7:4e:
                    d7:84:0e:53:b1:2c:4b:58:5b:c0:25:c1:1e:55:bb:
                    3c:c4:39:2c:04:e6:a6:f3:6c:c3:95:bf:ce:1b:49:
                    1b:08:c3:c3:e4:a9:a8:90:70:be:f8:d2:fa:c6:65:
                    9f:67:de:d6:e8:d5:06:25:2a:9f:12:fa:9b:bd:09:
                    06:83:f3:2f:da:f8:b4:4d:a1:f2:7e:31:d8:6d:f9:
                    86:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8E:EC:D7:BA:3B:C8:EC:C5:3E:E6:B5:2E:C3:82:CF:A2:37:A0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba06575f-6a44-3531-a6b2-4aa363ec1398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:af:88:fa:3c:8b:e6:e1:c5:3d:f2:3d:04:b6:6d:a4:2e:e4:
         3a:f6:2d:01:6e:fe:cf:2d:fc:0c:50:82:b3:c9:fc:51:4f:a5:
         99:f9:74:fb:de:76:75:8e:0f:0f:2a:48:46:ae:74:cf:1b:74:
         c4:b8:82:fe:a6:d0:a0:4d:80:aa:d5:ed:c2:5e:0f:32:ed:da:
         b4:48:32:e9:01:4c:c1:37:ec:5f:e9:0a:25:b9:16:3a:6b:b7:
         e9:1c:b5:14:03:6f:7a:5d:f0:5a:8a:fe:a4:ee:fc:16:ce:69:
         53:22:10:ca:41:96:7f:24:e3:78:0e:e3:b8:c7:01:6f:43:9e:
         89:b8:08:fe:7c:c6:01:0c:11:da:5e:8a:28:7f:b0:e7:8c:4f:
         86:7e:fe:75:3a:56:02:fa:47:3b:e9:4f:04:3c:40:6e:c9:61:
         d7:2d:c4:9c:a7:4d:81:7f:2a:ae:50:1f:84:ff:ab:53:b6:84:
         a8:84:ba:1e:74:16:30:25:f6:40:10:9f:77:22:05:94:be:29:
         fc:c0:6a:87:4d:27:fa:14:26:21:f6:47:7f:8c:e2:bf:ed:55:
         02:b0:24:84:26:75:af:6b:27:98:53:4a:53:90:81:28:c6:f1:
         bd:b5:af:a6:90:96:c2:b2:ac:b4:60:9d:0b:bf:ec:a0:50:7b:
         c9:5e:d6:3d
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdXnurNuef8O+XkJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MDkyNjEyMzUyOFoXDTI0MTIyNTEzMzUyOFowLzEtMCsGA1UEAxMk
Y2ZjYTE1YjUtZTJmNC00NzYzLThiMmEtMzE1MDgzYzEzYjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuKeUIJQiM5kPzx7GOzi2WjY0sOLVhHmyxiL
/TlBftYfR/ReJnoerejrKwmtOwzKiX8W8hitTyF6ELatczD9NLZXOCzI/YFB6gQm
kqdo408+J1hK1mh8gRXsF7DYaJ154kFyBD0wIyicm0FKnLPAxANhY5ZJCwtqwQE9
KDRa14P7tN+h7XAmqgNxdnWmaK43afF+FrzX97zW9u+cg6x3tNYXU1ikz49KOFwv
2bNeH4T6x07XhA5TsSxLWFvAJcEeVbs8xDksBOam82zDlb/OG0kbCMPD5KmokHC+
+NL6xmWfZ97W6NUGJSqfEvqbvQkGg/Mv2vi0TaHyfjHYbfmGJQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFIGO7Ne6O8jsxT7mtS7Dgs+iN6DDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmEwNjU3NWYtNmE0NC0z
NTMxLWE2YjItNGFhMzYzZWMxMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA5r4j6PIvm4cU98j0Etm2kLuQ69i0Bbv7PLfwM
UIKzyfxRT6WZ+XT73nZ1jg8PKkhGrnTPG3TEuIL+ptCgTYCq1e3CXg8y7dq0SDLp
AUzBN+xf6QoluRY6a7fpHLUUA296XfBaiv6k7vwWzmlTIhDKQZZ/JON4DuO4xwFv
Q56JuAj+fMYBDBHaXooof7DnjE+Gfv51OlYC+kc76U8EPEBuyWHXLcScp02Bfyqu
UB+E/6tTtoSohLoedBYwJfZAEJ93IgWUvin8wGqHTSf6FCYh9kd/jOK/7VUCsCSE
JnWvayeYU0pTkIEoxvG9ta+mkJbCsqy0YJ0Lv+ygUHvJXtY9
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:13 2024 by rpki-client on console-ams.rpki-client.org