Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c6e4e5e-5c3b-398b-94d6-b2f52cf42725.roa
File:                     0c6e4e5e-5c3b-398b-94d6-b2f52cf42725.roa (raw, json)
Hash identifier:          oYgfRPRzlrMJttl6RzC/SyrfwXwOJe8ZTBSnMTqlKZo=
Subject key identifier:   A6:0D:D8:DC:8B:3D:4E:34:DE:A6:0C:AB:D1:8C:8F:39:63:61:5C:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476B2965AE33EF2CC090AB77E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c6e4e5e-5c3b-398b-94d6-b2f52cf42725.roa
Signing time:             Thu 03 Oct 2024 12:34:51 +0000
ROA not before:           Thu 03 Oct 2024 12:34:51 +0000
ROA not after:            Wed 01 Jan 2025 13:34:51 +0000
asID:                     397198
IP address blocks:        2001:500:121::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:29:65:ae:33:ef:2c:c0:90:ab:77:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 12:34:51 2024 GMT
            Not After : Jan  1 13:34:51 2025 GMT
        Subject: CN=cb664715-e9ad-4f3f-9aea-1dcc1059acaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:94:6a:d0:ed:44:7f:35:bb:96:a3:ae:0c:a2:
                    62:bb:5f:1f:9b:a4:c2:6f:4f:86:5a:f0:07:40:eb:
                    36:77:65:24:b5:aa:76:84:28:bb:d4:44:4e:8e:fc:
                    48:2c:57:f1:d7:fb:ec:9e:1d:cd:77:a9:e8:e4:17:
                    98:91:0e:49:d0:ac:db:30:a8:34:b6:03:f2:37:8f:
                    73:c3:85:ea:3a:69:ff:54:e9:3d:93:8d:0b:cc:1e:
                    07:c2:ef:1b:39:74:0a:c9:81:bc:42:2c:ce:99:d0:
                    ec:e4:db:9c:f4:69:21:85:2e:3a:23:95:a5:06:f6:
                    1e:ff:29:55:e5:60:1e:23:04:be:7b:24:c2:38:0f:
                    1c:d3:0f:20:38:a8:d0:ee:7a:7e:40:03:e8:d2:13:
                    0a:11:57:08:0e:e3:b1:77:c4:91:68:9a:92:fe:32:
                    9f:68:d5:bf:2d:a0:d4:f7:2a:ab:fa:fe:91:a7:5d:
                    fd:80:1b:2a:d1:43:b9:74:b0:b8:49:e2:eb:ad:b9:
                    c4:8a:ee:c8:60:0d:b4:d7:40:4c:4e:17:d3:34:26:
                    c4:3b:0a:0d:70:82:de:d9:fc:af:58:57:7e:9f:93:
                    c7:03:e1:1a:55:7d:70:a5:69:df:2f:7e:c3:3a:15:
                    c3:8e:94:f2:2c:45:e8:1f:5c:5f:03:6b:93:b7:5f:
                    32:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0D:D8:DC:8B:3D:4E:34:DE:A6:0C:AB:D1:8C:8F:39:63:61:5C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c6e4e5e-5c3b-398b-94d6-b2f52cf42725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:27:dc:ef:0b:69:81:9f:fd:91:70:18:01:ab:03:c9:95:72:
         d4:dc:2a:30:ee:da:43:91:1f:f6:f9:80:15:1b:a2:9a:2f:70:
         a1:27:56:2d:51:6f:da:12:c9:62:1f:ae:30:c0:02:d0:f1:78:
         a2:cc:79:d8:dc:08:0d:0a:14:57:0e:ea:78:cf:4c:5a:08:1a:
         ca:b2:f5:10:de:ed:34:a3:a3:22:1a:a0:74:b6:fd:ed:81:06:
         65:ff:3c:72:41:91:03:05:1e:19:b3:e4:42:8d:7d:e4:62:1b:
         d9:d9:70:f0:37:b5:c4:80:af:49:24:32:02:44:88:c0:e8:26:
         b3:56:97:11:8b:73:3d:fc:6b:15:4e:0d:c4:4b:50:9e:dc:86:
         de:b8:6c:9e:09:de:dc:0f:b4:f6:2c:79:00:90:f4:8a:9c:cd:
         03:75:c5:7a:dc:bc:8e:87:1a:b9:f9:fa:93:d6:61:bf:57:3b:
         19:4e:9f:9b:d9:31:8c:0c:85:f7:7d:06:4f:72:3e:1d:ee:3b:
         98:56:17:e6:5a:8a:e0:e5:57:86:4e:2d:01:a3:e6:93:0b:9c:
         df:0b:8d:bb:88:30:73:de:ec:72:54:8c:52:67:5d:d4:5e:62:
         c5:42:86:ad:77:45:18:df:65:c4:a0:b7:87:3c:c4:3f:52:7d:
         a1:ab:5c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:22 2024 by rpki-client on console-fra.rpki-client.org