Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2703e432-2b50-3bf8-be61-f68d272a8fbd.roa
File:                     2703e432-2b50-3bf8-be61-f68d272a8fbd.roa (raw, json)
Hash identifier:          gL7BkWNZEWv/y1bPhSBlSkD5LolMyJc/1y+O2FRYK6A=
Subject key identifier:   A6:F4:9F:8D:BA:8F:B1:03:76:5F:DA:44:7C:44:84:36:B4:56:B7:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847818BBB52A10C0CA43BDF4280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2703e432-2b50-3bf8-be61-f68d272a8fbd.roa
Signing time:             Fri 11 Oct 2024 13:00:41 +0000
ROA not before:           Fri 11 Oct 2024 13:00:41 +0000
ROA not after:            Thu 09 Jan 2025 14:00:41 +0000
asID:                     396545
IP address blocks:        2001:501:8a29::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:81:8b:bb:52:a1:0c:0c:a4:3b:df:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 11 13:00:41 2024 GMT
            Not After : Jan  9 14:00:41 2025 GMT
        Subject: CN=a09502e6-af35-4b28-9df6-64e05060d7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:e0:84:23:1b:15:65:5e:85:43:d8:2e:7f:
                    9d:89:ea:37:ec:5d:92:97:83:38:aa:84:3f:36:fc:
                    0f:76:99:95:90:f3:0d:c4:4f:7e:b1:bb:14:ba:c3:
                    02:ea:81:57:1c:74:57:35:a3:9d:2f:7e:b0:64:e5:
                    ac:49:c8:2a:32:e4:34:5d:4d:3d:91:47:65:9b:8b:
                    f1:63:f9:c3:99:3c:af:87:7b:ce:69:13:bd:d0:dc:
                    ac:ac:93:9a:69:88:0f:32:a0:43:ce:ed:00:2c:6b:
                    80:54:3e:dd:f7:a8:ba:3a:10:1e:c8:c1:db:eb:4d:
                    83:dd:3b:4b:32:30:7f:2e:e4:01:0e:ae:60:e0:4c:
                    be:6f:bb:16:79:c8:d5:bb:e6:47:5c:c5:d4:c5:9d:
                    1d:96:3b:2b:4f:58:e6:71:9e:4f:ae:35:3b:11:9d:
                    29:e2:56:23:36:8d:81:17:3a:cc:ce:e1:22:e2:bb:
                    ae:1c:96:f3:dd:79:41:81:5e:10:e2:0b:52:63:7a:
                    61:5a:1d:6b:ad:27:74:60:00:01:94:ba:28:18:8b:
                    23:d4:09:36:fc:41:ea:12:37:d3:67:0f:29:fa:f8:
                    91:f2:52:58:e1:59:1d:c6:10:67:18:cd:98:9b:2d:
                    98:9e:cc:5b:d4:1d:b4:77:0c:a7:8c:05:d5:35:67:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F4:9F:8D:BA:8F:B1:03:76:5F:DA:44:7C:44:84:36:B4:56:B7:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2703e432-2b50-3bf8-be61-f68d272a8fbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ac:e1:68:5f:09:66:3b:60:a0:f4:29:77:59:0b:7f:2f:42:
         13:1a:33:1a:89:73:52:51:1b:79:25:d5:1a:c4:ee:6e:33:7c:
         28:ad:11:e3:c5:60:88:0e:54:b6:51:7b:19:02:51:27:b1:02:
         ad:e2:92:9d:e4:53:0f:68:a1:78:9b:b4:df:a1:67:cf:29:72:
         d9:0b:85:53:12:a2:e2:29:2b:74:2d:f6:4d:b1:36:75:18:34:
         91:4f:41:02:87:7e:ec:0c:87:24:78:c2:49:68:3c:15:f6:43:
         78:43:2c:66:30:46:05:0b:0e:58:26:df:32:01:50:a1:36:9d:
         4e:77:93:89:3a:ce:a1:05:21:7d:ac:02:99:ce:47:4b:c9:57:
         9a:90:84:58:f8:7c:76:13:4f:65:11:d0:51:4d:09:1f:5d:11:
         a9:a5:c0:10:00:e2:b3:4c:04:1a:cf:ba:de:ee:76:4b:ed:9f:
         13:08:10:c0:45:8b:f7:4f:c2:10:4f:11:d3:e7:08:d0:b8:c8:
         f6:6d:1e:7b:ba:1b:d3:3b:4a:c0:12:a3:bb:a0:ae:bb:dc:d4:
         06:ba:13:0b:7f:fd:ba:cf:26:2c:9a:9e:d2:f5:d8:db:7f:5c:
         15:af:fc:ee:3d:90:72:cd:4e:0f:1b:e1:77:4c:4f:dd:55:a2:
         d0:89:10:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:25 2024 by rpki-client on console-fra.rpki-client.org