Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d22f878-4e63-3d46-8b31-b357287c9884.roa
File:                     1d22f878-4e63-3d46-8b31-b357287c9884.roa (raw, json)
Hash identifier:          UjVC8SQPX7gm5U/8+3bPmhVvqIguZ3Wm7lj28g51KQo=
Subject key identifier:   62:60:DE:7F:1F:56:4B:72:BB:DC:30:2C:8A:F1:1A:32:A8:3C:2E:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847791CF55EEA0AF003718C4870
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d22f878-4e63-3d46-8b31-b357287c9884.roa
Signing time:             Tue 08 Oct 2024 12:31:06 +0000
ROA not before:           Tue 08 Oct 2024 12:31:06 +0000
ROA not after:            Mon 06 Jan 2025 13:31:06 +0000
asID:                     10515
IP address blocks:        2001:500:120::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:1c:f5:5e:ea:0a:f0:03:71:8c:48:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  8 12:31:06 2024 GMT
            Not After : Jan  6 13:31:06 2025 GMT
        Subject: CN=5b10b985-e257-4217-be26-4be0c26d6d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6e:1b:49:0a:2d:cb:8e:65:aa:85:15:eb:20:
                    00:8c:96:8b:ad:8d:3a:f8:ba:ad:bd:33:b5:25:69:
                    d6:04:3d:53:d6:b2:58:a0:90:9d:e9:e6:00:a2:f6:
                    7d:1f:7c:4a:69:a7:f7:86:a1:77:02:ae:23:98:65:
                    e3:06:b7:07:56:07:26:8e:f7:fc:80:da:51:ea:ad:
                    b3:3f:fa:35:05:d8:7f:17:6e:8a:29:80:fb:ca:fd:
                    5b:c2:a0:d4:bd:58:ad:82:2d:5c:e9:a3:df:50:37:
                    2f:50:c8:97:8d:42:d3:f0:b8:a3:21:27:5b:25:76:
                    98:eb:75:3e:ad:aa:52:07:b3:2c:6c:35:90:35:e6:
                    f8:06:f0:15:24:3c:8d:11:e1:f4:11:11:c6:c0:e9:
                    cb:d2:a2:e1:b4:74:dd:bc:80:b1:27:ca:b2:71:e0:
                    1c:01:76:3d:fe:e2:ac:56:a7:71:f4:1c:d9:80:90:
                    e7:c9:1d:d9:e1:77:33:ae:50:6b:b3:37:be:e4:9e:
                    da:cb:de:44:74:12:16:f8:be:35:2c:bb:cc:f2:89:
                    0c:a5:93:df:a7:34:aa:3d:1d:db:0b:4f:63:5f:e6:
                    b0:d6:77:75:70:ab:4e:19:bf:21:d2:49:ca:0d:0e:
                    a9:42:77:50:05:a4:b8:73:a9:11:1f:7e:f4:a0:4f:
                    53:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:60:DE:7F:1F:56:4B:72:BB:DC:30:2C:8A:F1:1A:32:A8:3C:2E:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d22f878-4e63-3d46-8b31-b357287c9884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:55:bd:02:2b:3d:84:0f:ec:fb:9d:88:f1:2c:cd:35:f8:b3:
         28:c5:07:fe:30:3b:c3:7e:69:16:a9:33:09:cd:f0:7e:d1:18:
         93:73:b3:c1:f0:35:0a:c6:c1:ea:37:17:a1:84:cf:15:77:ca:
         16:32:50:27:64:eb:63:b5:72:b2:9c:2b:6d:1d:a4:66:6e:8d:
         df:b9:c8:e6:c5:54:e5:f4:8c:e1:f7:1f:02:c0:6c:ed:56:f7:
         93:6c:67:4e:e0:a0:75:41:0e:d3:00:97:38:d1:d9:61:ea:e5:
         3c:aa:2e:71:75:33:a9:81:8b:f7:fa:67:a9:0d:8f:81:af:43:
         98:4f:70:6d:80:47:5f:8b:31:51:73:f6:20:13:12:a0:92:f6:
         e7:cc:84:1c:e6:10:f6:56:3a:69:fb:dc:3f:63:75:ed:9a:f9:
         6f:11:f0:83:be:d6:e6:d4:ee:e7:1b:b9:8e:0c:82:d1:dc:ae:
         78:77:c7:15:8c:46:88:49:87:bb:c7:ff:f3:e6:74:aa:b5:10:
         29:e6:58:73:e0:03:da:b6:d0:1f:6a:1d:58:39:62:4f:af:69:
         a8:69:ab:a7:cf:9a:1a:c3:63:97:01:62:ef:92:70:46:a5:61:
         22:d4:58:f0:a4:05:28:27:41:57:44:e3:f4:6c:54:62:cc:83:
         f3:4b:69:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:58 2024 by rpki-client on console-ams.rpki-client.org