Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b01b9f5-3f9d-3dac-8025-b964c938eadb.roa
File:                     0b01b9f5-3f9d-3dac-8025-b964c938eadb.roa (raw, json)
Hash identifier:          7R7OFjxeh/WARmN8GDQLZHxtN5wyhcUfdl2tL5RWm7o=
Subject key identifier:   81:02:F6:6D:B4:8D:1F:5C:51:8D:0A:81:23:7C:E8:D7:16:68:DA:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847791CF71DA4C0BEDDFEDB9300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b01b9f5-3f9d-3dac-8025-b964c938eadb.roa
Signing time:             Tue 08 Oct 2024 12:31:07 +0000
ROA not before:           Tue 08 Oct 2024 12:31:07 +0000
ROA not after:            Mon 06 Jan 2025 13:31:07 +0000
asID:                     397199
IP address blocks:        2001:500:120::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:1c:f7:1d:a4:c0:be:dd:fe:db:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  8 12:31:07 2024 GMT
            Not After : Jan  6 13:31:07 2025 GMT
        Subject: CN=c7d3d8db-6df4-46ce-87e1-4257dd92a7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f5:6f:54:f4:88:81:32:3c:0d:ac:52:35:ae:
                    ff:e0:af:78:9e:8b:b7:79:bf:7a:8e:16:ff:cc:aa:
                    b0:5c:e1:d6:0c:46:be:9b:0c:ec:5e:94:31:b0:ef:
                    1b:0b:87:bc:11:b1:5f:79:7c:78:17:37:88:e1:12:
                    8c:df:3c:d1:ef:43:15:60:84:0d:05:09:41:4c:a0:
                    22:03:3c:05:a7:c3:d7:d4:1d:2f:28:ca:6c:23:e3:
                    d7:8c:34:00:b8:15:59:60:e6:df:59:23:2b:f3:4b:
                    e0:3f:20:99:51:43:e5:14:a0:e8:4a:8f:c7:96:2b:
                    8b:58:93:cd:5d:01:67:35:26:b6:b4:7f:66:e5:37:
                    fd:e1:63:87:e2:7c:cd:74:16:20:d0:4c:57:04:65:
                    b1:11:bd:e3:b0:89:d3:54:04:57:61:d5:dc:a8:7f:
                    7c:33:ba:47:84:36:4d:e7:1d:27:4d:96:35:67:73:
                    df:d5:c0:c1:2d:c1:07:50:b5:9a:9a:25:83:3b:df:
                    89:bf:ad:73:cb:49:e4:1c:43:3d:b2:e5:a2:43:34:
                    b2:48:35:b7:cb:95:39:7b:8d:ae:41:b5:8a:eb:e4:
                    a6:f9:58:02:b1:c7:9e:28:4a:58:61:36:d0:0e:ce:
                    f8:0d:2c:ba:66:72:e8:81:8b:58:b3:27:74:ae:2b:
                    57:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:02:F6:6D:B4:8D:1F:5C:51:8D:0A:81:23:7C:E8:D7:16:68:DA:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b01b9f5-3f9d-3dac-8025-b964c938eadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:18:16:4c:0f:c8:62:92:20:0f:f5:d4:76:30:ff:73:28:d1:
         eb:6e:dd:08:8d:e6:b3:51:ad:c0:76:7b:ec:cd:32:32:34:ee:
         cc:24:bc:ae:0f:4b:4b:21:2f:f4:74:3f:17:a7:8d:cf:4c:6e:
         b5:cc:cf:23:4b:05:e7:b1:11:df:e8:93:c9:3b:05:99:25:29:
         54:8d:52:d4:c3:b4:4d:30:80:1b:ba:eb:42:8b:fb:63:ea:bc:
         bb:62:35:bf:6b:f6:a5:da:46:2c:b8:26:30:b1:de:2d:5f:78:
         e3:85:bc:a9:95:0e:c7:c6:cb:96:81:b8:0d:73:f0:e1:7a:27:
         f4:e5:41:22:a1:99:90:1c:42:3b:7f:a9:d5:3c:ce:b0:0a:8a:
         9f:54:8a:d1:29:a2:70:24:6d:cd:43:4f:92:6e:67:a1:3d:f1:
         6a:d5:1d:c8:0f:c6:1a:ad:80:d8:60:44:35:d4:85:67:39:2b:
         f0:19:89:18:91:17:37:db:e8:84:6a:63:c1:23:48:80:f3:c6:
         3b:bd:82:7f:20:ae:bd:09:ff:59:bf:f8:c7:3b:e3:e7:50:2b:
         35:57:94:d7:f0:cd:24:b3:b7:a7:81:fc:65:39:fe:09:5b:2e:
         a5:ea:fd:70:45:18:ec:29:6a:ef:84:d0:57:f1:c0:a1:ac:04:
         4f:ef:48:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:22 2024 by rpki-client on console-fra.rpki-client.org