Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08baaa81-1c31-362c-9680-50567e86d446.roa
File:                     08baaa81-1c31-362c-9680-50567e86d446.roa (raw, json)
Hash identifier:          +UByXXpGgp/ZpI6aoLFByp/KzZVFL/ShXGjqSH4NRqY=
Subject key identifier:   37:44:9E:DE:26:CC:65:CD:DC:1A:59:7F:D9:81:37:23:02:06:37:49
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476593FB726B29429C8BAC78E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08baaa81-1c31-362c-9680-50567e86d446.roa
Signing time:             Tue 01 Oct 2024 12:34:46 +0000
ROA not before:           Tue 01 Oct 2024 12:34:46 +0000
ROA not after:            Mon 30 Dec 2024 13:34:46 +0000
asID:                     396606
IP address blocks:        2001:500:122::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:93:fb:72:6b:29:42:9c:8b:ac:78:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  1 12:34:46 2024 GMT
            Not After : Dec 30 13:34:46 2024 GMT
        Subject: CN=385684dc-f740-4fdc-a6c6-8526b098e8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:20:69:49:08:12:ef:2f:97:7d:d7:6d:44:
                    88:5e:97:db:04:13:f8:56:fc:22:8e:c8:88:ae:1b:
                    34:89:4d:f1:98:15:67:8c:d6:e4:49:1a:82:bc:fd:
                    18:ae:95:74:ce:d5:48:43:19:86:3f:25:8d:c8:34:
                    c6:c2:0f:21:84:01:b0:6c:ad:ab:3a:77:9f:6f:24:
                    9d:d1:d7:2c:e9:5d:b8:c4:e6:a9:46:9d:9a:9d:b7:
                    05:36:3c:e1:33:5c:f6:9d:62:24:37:0b:01:93:63:
                    04:98:81:c2:ff:f0:23:e8:41:96:11:4e:63:0b:c1:
                    8e:34:57:b0:39:37:ae:2c:55:2e:33:ad:72:94:ca:
                    2d:4d:6d:32:ad:a7:b0:b1:65:c5:ca:27:46:1c:7b:
                    60:17:aa:08:52:e3:9d:f6:e7:5c:a4:66:f7:ac:08:
                    a2:e1:6f:cf:56:58:89:c4:81:df:d4:00:59:d9:35:
                    52:6b:82:c8:70:19:19:aa:46:6d:4d:bd:52:80:b2:
                    2c:58:95:e7:75:78:8d:e0:45:a7:6c:72:c0:6d:09:
                    f3:69:1b:d1:eb:9b:b2:58:23:cf:05:3c:16:ae:9e:
                    cf:6f:8f:ce:4c:fa:64:be:82:fa:6f:55:24:39:1d:
                    50:b0:0a:11:d3:84:7c:50:e0:a2:51:16:ce:8c:0a:
                    e8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:44:9E:DE:26:CC:65:CD:DC:1A:59:7F:D9:81:37:23:02:06:37:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08baaa81-1c31-362c-9680-50567e86d446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:27:dd:59:41:0c:a0:c6:b3:19:45:91:10:ca:b7:54:5e:14:
         97:27:98:df:b1:97:96:e5:eb:8e:c3:fa:ce:3a:71:77:e5:39:
         97:80:d8:e7:da:e5:f3:5a:ee:7c:08:32:41:14:19:8a:4e:85:
         6b:6b:4c:40:05:70:9d:00:dc:ba:d3:d7:b9:88:56:f6:72:e1:
         9d:c8:ce:5e:40:7f:3b:8f:55:7d:a8:3f:ab:93:d3:a0:32:89:
         7f:43:43:96:bf:9a:54:80:42:c5:b2:18:6e:7a:48:8e:36:81:
         de:24:a3:a9:85:30:44:4b:b2:b0:63:ea:9e:e8:06:b0:97:aa:
         a0:8e:59:ee:b0:44:85:a5:fe:79:dd:c5:83:76:28:6c:de:74:
         97:6a:e7:0f:5e:e5:6a:be:4f:ef:0f:d4:d9:4e:cd:5d:22:41:
         9c:69:c3:6f:b3:1e:2b:37:a1:1f:e3:05:90:8b:34:0f:99:67:
         c2:07:14:93:95:7c:d0:a3:65:26:e3:e6:18:d1:f4:d6:c1:d6:
         c6:d1:f6:ba:7c:e5:cc:a3:48:bf:30:fc:a9:48:72:19:ef:be:
         f9:6d:76:e1:41:4f:24:52:14:ff:6e:c3:ce:4c:90:a0:35:0a:
         fc:ed:25:68:60:92:9a:23:4e:92:17:d1:f4:71:28:90:09:9d:
         24:73:eb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:22 2024 by rpki-client on console-fra.rpki-client.org