Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c405639a-5797-3efa-be2b-e660709265a9.roa
File:                     c405639a-5797-3efa-be2b-e660709265a9.roa (raw, json)
Hash identifier:          fqZpDx6CztcYC5HUlAlFBhEsYG2KTk22uI4xF5jsS9o=
Subject key identifier:   3F:0B:F7:ED:C6:54:DD:78:C2:87:60:1F:78:98:77:27:2A:39:E1:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847739651E98947491A587F33E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c405639a-5797-3efa-be2b-e660709265a9.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     396540
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:51:e9:89:47:49:1a:58:7f:33:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=8444d039-7f6d-4a0d-8246-18674f35a0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:77:30:ae:1a:93:bd:a8:b2:9c:c0:53:78:
                    d3:77:c0:c7:4c:af:e3:04:d0:2e:5a:bd:1b:62:cc:
                    33:10:47:1d:36:69:47:b3:a8:ff:00:49:a3:ea:38:
                    25:f6:63:9f:9e:ff:7f:8f:8b:fb:30:c2:03:45:9c:
                    d3:47:78:83:00:59:2c:8b:5b:87:e4:01:ea:ad:9b:
                    c8:73:63:80:6e:88:cd:a4:d6:7c:de:27:61:c8:fb:
                    d9:68:31:38:78:be:b7:65:58:60:e0:79:68:b3:b1:
                    b7:b6:ff:6d:39:72:9c:89:20:c8:1c:59:6f:ec:41:
                    ec:58:5c:7b:30:42:b3:63:80:d8:19:34:dc:94:c8:
                    55:3b:2c:81:8d:a9:30:bc:32:a5:15:16:67:fa:4a:
                    33:a3:f3:ce:5e:b4:74:ee:e0:a5:24:19:0a:15:b0:
                    e6:84:89:ed:57:21:61:c9:c6:0f:bd:89:19:70:75:
                    d0:ea:5f:83:bd:ba:57:44:b9:fd:b3:0e:57:19:a1:
                    85:39:fb:c6:f2:15:5c:a8:f5:7b:a8:cf:81:77:36:
                    a9:d0:76:1d:75:05:c4:e4:62:71:35:25:08:a8:56:
                    40:bd:22:7d:7b:ba:c4:cc:53:be:22:ff:d6:e2:11:
                    f7:14:2c:13:7d:5f:72:51:0c:2a:95:8a:5d:70:e5:
                    c3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0B:F7:ED:C6:54:DD:78:C2:87:60:1F:78:98:77:27:2A:39:E1:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c405639a-5797-3efa-be2b-e660709265a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:2f:6f:5f:3a:b2:e5:47:e4:22:d7:63:de:72:64:7f:61:3b:
         ab:93:ca:81:98:0f:60:93:bd:53:c8:7c:cd:8d:11:1e:28:ad:
         1a:13:5a:27:04:b3:2f:d8:4e:e4:2a:e4:2d:7d:8b:44:d9:de:
         2f:1d:d7:b2:39:b5:05:56:65:78:c3:bf:a2:ad:a2:ce:02:d1:
         43:5a:f3:f2:13:50:f3:98:55:d8:00:52:71:9e:c7:a5:9c:df:
         43:80:1e:c2:ba:35:03:a9:8c:29:82:e5:a0:ef:fe:86:d4:22:
         71:70:74:40:56:a4:8d:ac:dc:aa:7c:4f:c6:e0:81:4b:57:2b:
         31:ae:83:2d:f8:81:f2:b7:c4:8f:d6:e0:b3:58:75:ec:35:eb:
         12:20:84:ba:33:0f:85:7c:a4:f9:c9:15:d3:db:84:08:70:0d:
         26:9a:0a:df:73:48:21:c9:45:c9:a9:1a:1c:8a:16:e1:5e:0d:
         f7:41:4d:5b:46:e3:5b:17:93:9a:18:29:35:35:2e:26:d0:35:
         b7:14:eb:41:41:04:b4:82:6b:fc:fb:72:da:6a:34:f1:46:54:
         62:78:3c:63:c6:33:39:77:67:75:23:c6:d4:54:38:b8:9e:9f:
         bd:0d:65:05:bf:14:48:b1:f3:cb:2d:51:ff:cb:f7:76:95:a3:
         d5:1c:31:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:45 2024 by rpki-client on console-fra.rpki-client.org