Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1991d3f0-6f8b-3a6d-a89d-92a35bd80751.roa
File:                     1991d3f0-6f8b-3a6d-a89d-92a35bd80751.roa (raw, json)
Hash identifier:          dC+wTifPs/hMvJTwooUJraf8NdcZeF8vssdL8UhtCTs=
Subject key identifier:   8B:96:82:74:EF:D7:C5:1C:AC:D3:00:0B:AB:0E:F7:12:31:7B:33:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476B2967748784B521A74A7600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1991d3f0-6f8b-3a6d-a89d-92a35bd80751.roa
Signing time:             Thu 03 Oct 2024 12:34:52 +0000
ROA not before:           Thu 03 Oct 2024 12:34:52 +0000
ROA not after:            Wed 01 Jan 2025 13:34:52 +0000
asID:                     36620
IP address blocks:        2001:500:121::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:29:67:74:87:84:b5:21:a7:4a:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 12:34:52 2024 GMT
            Not After : Jan  1 13:34:52 2025 GMT
        Subject: CN=82bf2b0f-9dc8-4417-ba6c-d0338c581f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:b9:73:48:78:85:98:31:b6:18:a6:50:23:
                    40:f3:c3:75:3b:13:63:cc:2c:1d:e3:11:6f:2c:64:
                    52:88:e0:79:9f:1a:0b:55:b3:2d:a1:cc:9e:cb:2f:
                    fa:68:dc:c3:6e:05:d2:d6:8d:ad:6c:7c:45:08:9a:
                    5c:8a:93:34:d1:7e:34:84:f5:bd:28:64:0e:1f:37:
                    d9:c6:5b:e3:c3:43:6f:b4:77:e3:66:e6:74:04:ad:
                    67:5d:8e:fe:e4:80:ef:f2:fd:ae:c2:a0:f5:4d:87:
                    49:ec:0c:1c:6b:0e:fb:63:47:4c:cb:84:a5:1c:36:
                    39:66:c4:74:a5:0b:eb:df:da:57:8f:64:f5:b9:62:
                    96:00:1c:a9:3a:f4:ed:fb:30:9a:98:33:b0:42:e5:
                    e0:5c:c3:28:6f:fd:f4:6d:48:51:68:5f:3b:6e:85:
                    6e:e0:2b:e4:aa:3c:06:1c:47:a6:f3:70:57:8a:3b:
                    9e:d8:c6:9b:86:54:1a:c7:8e:ac:32:cd:d6:c1:60:
                    6a:5f:e7:4a:f5:29:42:11:30:8f:e6:ba:c8:9d:6a:
                    78:dc:c9:61:bd:21:3a:48:26:96:9f:1c:4e:11:37:
                    41:fc:f4:df:14:1e:df:3e:ba:bc:c8:1a:2f:0d:80:
                    49:76:f7:25:28:8c:2c:8b:20:87:18:3e:de:f6:0d:
                    d0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:96:82:74:EF:D7:C5:1C:AC:D3:00:0B:AB:0E:F7:12:31:7B:33:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1991d3f0-6f8b-3a6d-a89d-92a35bd80751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:39:03:c7:45:1e:8d:7c:25:93:79:5a:04:de:45:35:e1:6b:
         ed:59:1e:a2:c3:8c:ef:a6:fe:6a:a9:b3:a9:84:5d:c8:15:f0:
         67:32:27:50:76:03:79:90:95:57:8a:a3:6a:e2:d1:3f:d0:b2:
         7f:7a:96:77:ca:92:f0:a7:34:92:9b:1f:1c:ef:e9:25:0f:5e:
         cc:bb:7b:5a:2e:0a:d8:47:4b:99:2b:c4:ca:94:8e:a2:49:8c:
         d2:a0:27:10:bc:ef:7a:14:fb:81:d8:1e:92:21:0e:c2:25:93:
         73:2f:49:a5:f8:e1:98:77:35:ef:8b:66:6c:50:f4:ab:0e:e6:
         40:e9:25:b4:25:53:ee:0a:2f:62:a1:73:0d:6a:37:55:22:07:
         87:2f:ed:50:76:a5:a9:f9:67:48:ae:00:f8:25:27:a5:e9:43:
         30:07:2f:bd:1b:41:f8:2b:87:be:01:a1:41:6d:ae:3f:bc:83:
         f7:5b:d7:19:34:97:d7:5f:3b:3f:f5:08:c1:e1:7b:19:2c:ac:
         28:fe:bf:d9:86:ce:be:79:19:81:4c:71:96:86:80:ce:09:29:
         2f:e2:10:44:08:97:6d:b9:ea:1c:51:0d:79:27:17:02:bf:d4:
         35:dd:fa:2a:de:a1:b4:bb:d2:2b:ec:aa:d8:93:f9:55:aa:c3:
         4a:c2:89:5e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdrKWd0h4S1IadKdgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAwMzEyMzQ1MloXDTI1MDEwMTEzMzQ1MlowLzEtMCsGA1UEAxMk
ODJiZjJiMGYtOWRjOC00NDE3LWJhNmMtZDAzMzhjNTgxZjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5C5c0h4hZgxthimUCNA88N1OxNjzCwd4xFv
LGRSiOB5nxoLVbMtocyeyy/6aNzDbgXS1o2tbHxFCJpcipM00X40hPW9KGQOHzfZ
xlvjw0NvtHfjZuZ0BK1nXY7+5IDv8v2uwqD1TYdJ7Awcaw77Y0dMy4SlHDY5ZsR0
pQvr39pXj2T1uWKWABypOvTt+zCamDOwQuXgXMMob/30bUhRaF87boVu4CvkqjwG
HEem83BXijue2MabhlQax46sMs3WwWBqX+dK9SlCETCP5rrInWp43MlhvSE6SCaW
nxxOETdB/PTfFB7fPrq8yBovDYBJdvclKIwsiyCHGD7e9g3QIwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFIuWgnTv18UcrNMAC6sO9xIxezNZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTk5MWQzZjAtNmY4Yi0z
YTZkLWE4OWQtOTJhMzViZDgwNzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBfOQPHRR6NfCWTeVoE3kU14WvtWR6iw4zvpv5q
qbOphF3IFfBnMidQdgN5kJVXiqNq4tE/0LJ/epZ3ypLwpzSSmx8c7+klD17Mu3ta
LgrYR0uZK8TKlI6iSYzSoCcQvO96FPuB2B6SIQ7CJZNzL0ml+OGYdzXvi2ZsUPSr
DuZA6SW0JVPuCi9ioXMNajdVIgeHL+1QdqWp+WdIrgD4JSel6UMwBy+9G0H4K4e+
AaFBba4/vIP3W9cZNJfXXzs/9QjB4XsZLKwo/r/Zhs6+eRmBTHGWhoDOCSkv4hBE
CJdtueocUQ15JxcCv9Q13foq3qG0u9Ir7KrYk/lVqsNKwole
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:58 2024 by rpki-client on console-ams.rpki-client.org