Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0caf613-7e4f-3f99-a1f7-d865a79dc6f5.roa
File:                     e0caf613-7e4f-3f99-a1f7-d865a79dc6f5.roa (raw, json)
Hash identifier:          BZDx0ZSaK16NWNwji1RfR5i97RJT86J9UaKY1ChUfhI=
Subject key identifier:   56:0F:10:0A:B0:EA:01:9D:8A:55:8E:2F:CD:D5:54:4A:8A:04:7C:CC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EECFDB3C984F325C7F280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0caf613-7e4f-3f99-a1f7-d865a79dc6f5.roa
Signing time:             Thu 26 Sep 2024 12:35:30 +0000
ROA not before:           Thu 26 Sep 2024 12:35:30 +0000
ROA not after:            Wed 25 Dec 2024 13:35:30 +0000
asID:                     396612
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:ec:fd:b3:c9:84:f3:25:c7:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:30 2024 GMT
            Not After : Dec 25 13:35:30 2024 GMT
        Subject: CN=92c86d7f-edeb-47a6-acb1-2561625b7c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f8:e5:23:7b:6f:b6:b6:c5:9f:21:59:1d:c5:
                    c8:1c:a4:ec:3f:96:73:b1:d7:77:ad:07:7a:6c:bf:
                    37:69:3b:47:73:1a:ce:18:ad:a6:3c:98:fa:f4:30:
                    10:e2:de:e5:e2:78:06:92:f1:33:c1:d0:18:94:a5:
                    34:e1:c8:7c:18:30:53:f0:4d:3c:cf:5f:bf:04:e3:
                    19:a6:5a:52:f4:f5:87:58:f5:7f:2a:f7:1c:b8:b7:
                    99:63:9c:67:e4:c7:59:79:3d:0e:d0:d5:0c:fa:92:
                    cc:79:82:cf:fe:98:a9:0d:d3:5b:b1:ae:70:df:4c:
                    48:49:27:f9:f3:d5:e3:63:1b:39:48:d8:b1:d8:76:
                    11:25:3a:e0:82:90:6b:71:75:b8:ab:5d:cb:5d:6a:
                    07:a4:d4:55:b5:0d:52:7d:05:65:95:e4:ab:3c:69:
                    1f:17:58:25:7a:56:55:98:b9:f8:99:73:56:95:13:
                    61:05:b7:f7:bc:53:29:38:70:7f:d7:aa:6f:08:4e:
                    ea:fc:b0:51:8c:2d:3e:39:98:58:f3:86:99:c2:f6:
                    9e:9b:38:05:f0:67:46:58:4c:69:62:25:61:03:d7:
                    49:87:23:08:23:c1:0b:f1:7b:2d:06:a0:a3:d5:9a:
                    ec:d7:25:ef:29:2f:f3:8c:b3:27:99:2d:38:96:dd:
                    6a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0F:10:0A:B0:EA:01:9D:8A:55:8E:2F:CD:D5:54:4A:8A:04:7C:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0caf613-7e4f-3f99-a1f7-d865a79dc6f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:15:67:d6:3c:84:e6:93:59:8f:ab:57:b3:6e:38:9a:6d:3c:
         42:33:e1:56:0d:80:ce:1e:23:a2:d6:75:d6:62:a8:45:dd:d5:
         29:3b:08:0d:a7:fe:5c:0c:23:5d:6e:e1:44:72:3b:e6:36:66:
         cc:8a:f2:01:29:1c:50:df:a0:9f:e7:24:3d:c7:2f:17:9e:aa:
         a3:9c:79:66:ff:ae:48:77:54:23:df:40:5b:f6:ca:53:6a:1e:
         aa:d5:a2:33:0b:47:4b:2e:90:16:ca:9d:54:ca:e4:d8:fd:35:
         17:7f:3a:b3:a7:37:21:6b:4a:c1:8d:41:d8:cd:c3:8c:86:a1:
         2a:36:c9:56:f2:60:e0:9f:81:71:95:a6:8c:db:a6:0e:d8:48:
         e0:07:0a:fd:f4:9b:05:c3:0c:b6:c6:d1:97:d9:fc:4c:44:9e:
         35:26:6b:f6:4f:51:ea:cf:b5:5e:4a:57:c7:9c:6d:07:e9:7e:
         26:d9:43:1b:ae:62:ab:2a:75:6b:ea:e0:47:34:4f:5d:30:20:
         08:7a:26:3b:1b:a7:3c:5e:93:d3:82:6b:c1:bd:92:75:70:70:
         aa:ab:b6:8c:3e:26:9e:2d:b7:87:04:26:5d:09:42:9a:ac:24:
         10:d2:b6:84:90:66:f9:4c:8b:21:8f:2e:86:90:da:0f:d6:b0:
         3b:c7:a3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:17 2024 by rpki-client on console-ams.rpki-client.org