Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b7a766-4e77-35da-8e61-e2dfc2ed390d.roa
File:                     01b7a766-4e77-35da-8e61-e2dfc2ed390d.roa (raw, json)
Hash identifier:          901JSGIXl90NxM9kRxgP+CFrZqwFfhcFj43kNMG5+TI=
Subject key identifier:   F7:15:F9:63:79:27:79:0D:16:DF:95:87:A1:D7:B3:97:A4:8E:60:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EEE2FFE6D137CD557CD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b7a766-4e77-35da-8e61-e2dfc2ed390d.roa
Signing time:             Thu 26 Sep 2024 12:35:30 +0000
ROA not before:           Thu 26 Sep 2024 12:35:30 +0000
ROA not after:            Wed 25 Dec 2024 13:35:30 +0000
asID:                     396551
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:ee:2f:fe:6d:13:7c:d5:57:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:30 2024 GMT
            Not After : Dec 25 13:35:30 2024 GMT
        Subject: CN=ea3a4805-a867-4fe2-b990-c2bfd45279d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:22:01:e9:f2:83:9d:58:cd:e0:e4:f2:7c:02:
                    b5:92:d1:f8:3d:fe:f0:a0:9a:a9:7e:0f:db:56:a7:
                    1a:35:45:20:5e:26:0d:ea:45:1e:58:19:8f:35:c4:
                    85:6a:73:a8:15:65:c6:dd:d7:4c:37:6a:92:1a:f2:
                    0e:db:b7:c5:31:d1:8f:35:b0:6c:f2:d0:01:ce:98:
                    3e:0d:e3:2b:47:d3:9d:ef:18:9c:0a:cc:68:ab:43:
                    f3:c0:b9:75:26:91:64:f2:37:b2:e6:c6:36:8c:ed:
                    1e:5d:f2:4d:97:d4:c9:bd:d1:a9:cf:56:3d:72:bf:
                    14:c3:02:0f:47:40:80:08:f9:39:f9:07:ab:d8:b2:
                    6d:bd:18:40:13:d3:ef:59:ed:06:74:ce:1b:8d:a1:
                    5f:d9:43:90:26:ee:bb:7e:7b:f8:e8:32:46:ec:46:
                    7c:04:df:5d:62:c6:1e:e8:f0:c0:f2:39:56:b1:f1:
                    16:98:3d:f5:87:ac:62:00:c4:b5:bb:50:02:d7:a5:
                    3f:45:ec:15:d6:a8:15:3a:5d:ce:81:4e:9f:d5:2f:
                    47:47:3a:12:ec:4c:ac:66:64:d9:7b:60:7b:b1:82:
                    fe:5c:a3:ee:78:ee:d6:ee:8b:e9:74:fb:27:9d:ac:
                    ba:38:16:81:26:f9:f3:76:69:41:52:da:b1:82:58:
                    50:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:15:F9:63:79:27:79:0D:16:DF:95:87:A1:D7:B3:97:A4:8E:60:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b7a766-4e77-35da-8e61-e2dfc2ed390d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:58:d1:74:a0:15:5b:82:a1:30:9f:98:e1:df:10:2b:c3:26:
         87:39:18:8a:0f:c4:64:92:5e:ee:c4:71:b0:f5:9c:09:0e:a0:
         e6:b8:f3:95:3b:29:b1:5e:33:1a:f4:2e:04:12:4e:cb:6a:f3:
         6b:98:8c:6a:37:d4:1b:6e:02:21:0f:c6:b2:ef:36:24:58:67:
         ce:4c:58:1f:4c:11:d9:44:00:37:1c:56:27:82:d8:b9:fa:32:
         d1:eb:c0:b1:63:bf:bf:5b:6c:f5:e5:28:88:ba:8c:a9:bd:98:
         4f:e3:72:32:5d:a4:ad:91:1b:aa:25:94:28:5b:41:ff:fb:42:
         30:03:f8:97:fc:6e:02:a3:45:68:d2:00:2e:25:58:05:24:c6:
         37:f7:88:14:e9:5f:9e:b1:c1:6c:4a:f3:b6:51:1d:ae:cc:e6:
         94:ce:3d:d9:34:61:c3:87:da:23:d9:64:5a:df:b4:d7:58:f7:
         13:8a:3b:ec:44:19:a0:34:9f:1f:30:20:00:d2:38:30:38:90:
         46:83:10:40:51:68:22:bc:e6:d1:93:0d:c2:13:b1:c5:f2:2f:
         6f:cf:69:91:c7:2c:0e:b2:af:89:55:d2:8f:17:a7:99:96:4c:
         0b:c1:c1:d6:03:5c:06:96:5b:70:e7:d3:b7:23:77:42:6f:6a:
         7a:cc:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:56 2024 by rpki-client on console-ams.rpki-client.org