Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16e71ed8-c327-3a2f-b1d2-e5ec8bf9a5c8.roa
File:                     16e71ed8-c327-3a2f-b1d2-e5ec8bf9a5c8.roa (raw, json)
Hash identifier:          6uweGO7zVRXrviS+JwaQa6iwg7Ty/FlzurPoEZ5GwG8=
Subject key identifier:   59:4D:02:89:A3:09:35:F2:37:34:AD:D3:BC:E4:EA:FA:86:F2:6C:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584773964D51314EA3EAB65EFF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16e71ed8-c327-3a2f-b1d2-e5ec8bf9a5c8.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     36624
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:4d:51:31:4e:a3:ea:b6:5e:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=68f9023a-3d40-409a-9aa5-8ac20606eca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3d:e8:d7:e1:cd:fb:3b:d2:14:9e:94:f2:64:
                    a1:e6:22:61:1a:d5:7d:b8:44:b1:27:65:31:75:fb:
                    46:c2:f2:fd:d1:19:21:ea:d8:a2:ad:20:2f:dd:06:
                    07:87:5f:af:27:39:2f:71:8e:02:38:c5:7a:c0:aa:
                    7a:4c:b6:db:2b:2a:0a:2a:fc:a3:86:4d:4e:9f:91:
                    f5:2c:e0:82:60:63:30:e6:82:0d:88:94:51:4b:9a:
                    a7:c0:55:40:7b:81:7c:eb:84:b7:43:12:ec:ad:d8:
                    56:fc:7d:52:55:ee:b4:1b:09:b2:26:94:75:65:43:
                    a4:11:e7:bc:b3:ac:ea:1b:d0:48:17:53:a0:0e:9e:
                    63:85:9d:04:91:5a:96:f6:10:c5:35:7f:37:94:a8:
                    0c:2d:16:eb:64:f6:df:a3:24:08:4e:e0:7a:9d:e5:
                    6f:3b:0e:db:b0:f3:51:0c:4b:72:9f:50:fa:e0:58:
                    51:b3:59:d1:be:fd:3e:f6:01:0b:75:b0:c9:d4:61:
                    07:79:f7:dc:5d:d0:79:7c:d2:00:e7:b9:90:09:9a:
                    4b:67:de:11:8a:b4:6a:d8:3e:3f:ea:aa:0e:25:05:
                    f0:97:a4:d5:31:82:67:67:0c:70:a1:12:c4:f2:d6:
                    ed:ea:54:ef:fc:24:76:92:c3:90:fe:25:b4:da:71:
                    d1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4D:02:89:A3:09:35:F2:37:34:AD:D3:BC:E4:EA:FA:86:F2:6C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16e71ed8-c327-3a2f-b1d2-e5ec8bf9a5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:c0:00:37:36:0e:40:16:68:13:fa:8a:9a:3f:9d:69:5e:ae:
         3f:20:4a:6f:81:1f:0a:6e:a2:8d:22:ad:1d:8e:9d:72:e6:58:
         cd:76:39:ad:5a:24:40:ca:de:ce:b9:13:0f:eb:87:0c:10:83:
         80:4f:19:c8:1d:f2:33:fb:58:e5:68:ec:28:4a:bd:ab:7e:65:
         e5:2a:68:e7:6a:4e:c3:f9:ae:1d:f7:2d:ff:eb:56:6b:4e:86:
         37:2b:10:1c:34:00:0f:8b:68:e8:d0:93:06:a0:de:00:90:c4:
         4d:8d:d1:8b:d6:97:c4:8f:29:6e:22:8b:97:bd:87:80:b7:85:
         f7:07:33:13:77:df:e0:32:68:f1:c8:ad:d2:e0:0f:18:6d:b7:
         31:dc:0f:2f:be:9b:57:6f:4e:bc:b9:7e:8e:bb:2d:15:8c:8a:
         f2:50:ae:55:80:41:09:bd:88:a2:7f:8f:68:6a:05:df:7d:03:
         d6:fa:48:7f:c4:d0:26:f0:1e:c5:72:35:60:8f:2f:1b:21:39:
         2b:44:c0:88:bb:9c:01:d8:e5:80:2e:20:f8:db:8c:29:ac:90:
         e0:26:47:42:dd:1e:43:3a:31:64:b0:0e:53:77:51:f1:d5:3c:
         f6:af:0c:b8:ee:18:b5:6c:bd:0d:50:cf:f4:4e:e9:47:08:13:
         79:77:32:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:23 2024 by rpki-client on console-fra.rpki-client.org