Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d13daf58-78a7-37b3-8c65-2e98fba1c338.roa
File:                     d13daf58-78a7-37b3-8c65-2e98fba1c338.roa (raw, json)
Hash identifier:          95sfiyIr2n+g0sTfrAznWRf0R3mz5/UJZIG2Zy0VV04=
Subject key identifier:   F5:32:16:4B:05:94:62:E8:42:C8:89:64:FD:7D:BA:0A:23:B3:55:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EEDE86737A9362554B638
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d13daf58-78a7-37b3-8c65-2e98fba1c338.roa
Signing time:             Thu 26 Sep 2024 12:35:30 +0000
ROA not before:           Thu 26 Sep 2024 12:35:30 +0000
ROA not after:            Wed 25 Dec 2024 13:35:30 +0000
asID:                     396605
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:ed:e8:67:37:a9:36:25:54:b6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:30 2024 GMT
            Not After : Dec 25 13:35:30 2024 GMT
        Subject: CN=12b1fb2f-95c2-4df4-a631-106a0554756c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:70:87:62:82:21:8c:be:4c:1f:6a:b9:c1:
                    40:41:bd:ca:4d:32:fc:8c:bb:2d:19:52:90:86:c0:
                    dd:49:7f:3a:db:6d:89:98:45:81:b9:8d:87:df:84:
                    56:6f:97:f7:48:8e:6b:96:6d:44:cc:3b:b6:4d:54:
                    a2:ee:87:7d:f3:ec:05:cb:b9:f3:b4:f7:48:19:cf:
                    a0:72:88:0b:48:3d:62:62:3f:42:60:de:e4:99:1f:
                    4b:db:ca:2d:82:0a:d6:2e:a3:48:d7:c2:93:c9:ac:
                    b4:46:58:7e:35:99:1f:da:a9:41:b6:51:15:61:67:
                    58:b6:7d:59:10:83:14:34:a9:10:a5:70:9b:31:11:
                    26:d3:3a:2e:ce:71:35:02:21:55:0c:1b:eb:84:b0:
                    3f:47:53:85:4a:2a:6b:b1:f9:fe:9a:cc:fb:4a:ed:
                    7a:60:da:8c:0f:e7:bb:06:33:ea:40:7d:b0:7a:1c:
                    13:fe:d6:82:53:1f:3c:11:ed:9b:ac:80:78:ed:f1:
                    ac:28:f8:73:73:14:9a:fb:a4:7c:41:11:3f:67:d4:
                    b7:10:eb:5f:f1:a4:52:5e:16:95:08:35:b5:1a:05:
                    99:5d:ad:65:a2:bc:40:22:70:68:bc:43:ac:c3:cd:
                    20:7a:99:93:d0:db:83:d4:fe:5a:f4:05:6c:8f:96:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:32:16:4B:05:94:62:E8:42:C8:89:64:FD:7D:BA:0A:23:B3:55:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d13daf58-78a7-37b3-8c65-2e98fba1c338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:56:14:5e:f1:b1:0f:ea:e9:c4:e5:78:65:39:b3:da:8a:b7:
         45:34:6b:8a:2e:f6:7e:01:62:c9:e0:57:95:d4:a2:88:3a:16:
         7b:43:01:5a:6a:41:82:23:93:75:8a:cc:c9:a9:bf:29:b4:08:
         b9:87:fc:da:22:8a:e5:c7:74:07:61:22:2a:83:b9:b9:9e:2b:
         69:15:40:fc:05:87:15:df:12:77:4d:1c:78:c1:3e:12:e9:8e:
         d5:7b:c5:12:93:df:bf:8a:5c:ca:45:27:08:ee:3e:c2:86:c1:
         04:e8:14:b5:47:15:d8:ac:2a:17:23:e4:06:22:f2:30:bd:a5:
         03:4e:ce:a1:eb:df:55:3a:03:6d:ca:c7:c9:c7:9c:4e:56:b9:
         d7:fa:c4:50:12:40:27:5f:cb:06:7e:21:36:95:fa:74:74:5a:
         7b:35:18:89:7e:35:5b:e6:6b:3e:42:2e:fc:09:72:5a:e5:d3:
         53:19:dc:8b:89:98:79:6d:79:76:d4:f1:d6:61:41:ba:63:1d:
         30:d5:fb:59:6c:cf:ee:51:e6:0a:37:2b:34:53:3f:76:44:c1:
         f3:c7:28:52:01:e3:9c:43:89:11:f0:e3:17:46:d4:28:3a:82:
         5f:4c:ab:b9:e6:66:c9:7f:3c:a6:85:b4:19:96:57:03:7d:a4:
         c2:2d:a6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:47 2024 by rpki-client on console-fra.rpki-client.org