Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c47fdc9a-06d9-37eb-b668-b64a80403e73.roa
File:                     c47fdc9a-06d9-37eb-b668-b64a80403e73.roa (raw, json)
Hash identifier:          /5q20IMyqSgHfz2gopqUzuKqY514Ds6WbEG6n9U6J2k=
Subject key identifier:   7D:02:75:E6:89:A2:05:29:4F:FC:B9:5E:97:CC:91:6D:68:D3:1D:D4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EEFD4A5AE8330DD19C600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c47fdc9a-06d9-37eb-b668-b64a80403e73.roa
Signing time:             Thu 26 Sep 2024 12:35:31 +0000
ROA not before:           Thu 26 Sep 2024 12:35:31 +0000
ROA not after:            Wed 25 Dec 2024 13:35:31 +0000
asID:                     36626
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:ef:d4:a5:ae:83:30:dd:19:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:31 2024 GMT
            Not After : Dec 25 13:35:31 2024 GMT
        Subject: CN=f263afa6-6e2c-4cb8-b4ca-818772cfda5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:23:e4:6b:b9:4f:0b:90:8b:1f:44:d5:fe:
                    96:b1:dc:13:ac:35:de:8e:e6:cc:c2:18:14:2a:22:
                    ec:60:d4:f7:af:ab:c9:58:34:37:57:fb:af:85:62:
                    ac:5a:3d:b7:31:b6:28:b1:a0:99:6e:4a:bd:8d:f7:
                    6d:de:8d:87:db:f5:5a:ee:ab:bf:f1:a1:6d:8b:b7:
                    de:c6:ed:6c:50:f8:e6:57:4d:ea:08:aa:00:f1:7d:
                    44:57:2b:b5:5b:6f:78:51:1f:94:bf:49:48:d2:fb:
                    0b:b2:cb:9c:16:cd:25:24:18:7f:62:84:e0:6d:17:
                    a5:c7:3e:8a:b9:a7:4c:38:82:f3:3a:e7:06:bc:f7:
                    ac:64:6b:ed:c8:b5:eb:37:12:13:6d:02:06:2e:f4:
                    ef:ff:1f:be:3b:be:3e:24:56:6a:e9:86:e6:1c:11:
                    0f:13:bd:72:d4:0a:5e:e4:49:7c:03:1f:70:45:21:
                    32:bb:52:8b:48:84:70:5a:2c:14:97:08:94:fc:32:
                    81:d0:4e:fa:49:fe:4d:8c:82:5c:51:72:06:9d:22:
                    98:78:14:c4:d8:1b:e1:d2:4a:4c:1b:ac:2d:7c:89:
                    03:c4:82:8f:63:9d:33:17:4c:93:17:ae:32:a6:44:
                    ce:03:d9:b6:b3:0c:34:6a:b3:c1:93:b0:e9:08:3f:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:02:75:E6:89:A2:05:29:4F:FC:B9:5E:97:CC:91:6D:68:D3:1D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c47fdc9a-06d9-37eb-b668-b64a80403e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:72:db:18:0a:a3:45:5a:1d:e2:48:39:58:b9:20:e8:d9:cc:
         bb:e4:1c:13:76:6f:76:89:1b:27:40:b1:ea:f9:94:d3:c0:30:
         f5:b3:ae:6a:ec:4d:24:2a:48:88:44:83:fa:f1:c1:79:33:1b:
         2a:fa:01:a8:89:8e:ad:36:04:e8:be:38:8d:e5:3f:d6:b0:60:
         bc:f4:0d:4d:92:df:48:2a:a7:7a:af:aa:97:5c:3a:cb:3d:55:
         f9:d8:14:e6:15:7f:29:7c:f0:48:7b:38:db:fd:2f:c0:1a:27:
         4d:50:8d:24:0a:5a:1d:94:ba:66:09:b8:99:10:89:c7:32:5c:
         dc:6d:73:99:6d:69:f1:ad:82:24:89:47:a1:42:9b:4c:82:2b:
         eb:76:59:86:d5:75:5d:d6:11:18:f4:83:ca:0a:9c:98:92:ef:
         54:4e:a7:a9:3e:34:13:fe:c7:b5:d6:b7:60:85:b2:28:2f:b1:
         b2:a2:6d:50:23:ba:87:1f:0a:5b:7d:0d:cf:86:2f:98:d2:77:
         f3:ad:f8:1a:f4:14:e9:6f:01:88:4e:06:aa:2d:ab:9e:0f:2b:
         47:0e:81:cc:b3:84:b2:96:9d:68:53:70:14:52:02:6b:0e:77:
         ee:40:de:d5:4b:be:e9:92:c0:e0:8a:68:40:2f:88:c9:98:16:
         02:91:cb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:45 2024 by rpki-client on console-fra.rpki-client.org