Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27771fc2-d4d2-33b2-bb19-4e4b594d6458.roa
File:                     27771fc2-d4d2-33b2-bb19-4e4b594d6458.roa (raw, json)
Hash identifier:          Aek21qF7yA/JD8ExrDOvIhceRuAcS3F2+vfHHhZt+WU=
Subject key identifier:   DE:68:DE:BA:72:71:ED:95:A8:94:83:79:AB:9A:64:22:2C:86:BE:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EEE1E18C42CC21EF90D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27771fc2-d4d2-33b2-bb19-4e4b594d6458.roa
Signing time:             Thu 26 Sep 2024 12:35:30 +0000
ROA not before:           Thu 26 Sep 2024 12:35:30 +0000
ROA not after:            Wed 25 Dec 2024 13:35:30 +0000
asID:                     396585
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:ee:1e:18:c4:2c:c2:1e:f9:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:30 2024 GMT
            Not After : Dec 25 13:35:30 2024 GMT
        Subject: CN=25d18969-69a1-4694-85e2-7832c691553b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f7:91:cc:8b:51:b6:ac:d8:63:a7:92:a6:5a:
                    ec:41:84:5c:80:c5:8a:1b:36:4d:36:50:60:f1:30:
                    43:4a:a8:aa:40:1e:e8:74:c8:30:6f:36:4b:87:04:
                    e6:22:43:6d:5a:01:7f:e8:1d:46:fb:4f:0c:c7:89:
                    b6:e2:3d:7c:95:25:f1:dc:b4:75:a3:71:f6:2d:33:
                    d1:ce:d2:9a:b4:a4:59:4a:27:da:8f:97:6a:9c:d6:
                    a7:da:13:5f:61:35:86:c1:c1:0d:b2:04:39:62:0a:
                    e7:8d:b3:11:76:81:29:92:be:fb:83:62:c0:84:ac:
                    f9:ac:19:5c:59:95:a9:31:53:4d:ed:9d:60:2f:49:
                    98:eb:39:41:a9:29:c1:17:e4:11:15:02:9b:cd:0c:
                    fa:26:5b:ef:f2:bd:0a:96:4e:01:13:eb:2c:47:71:
                    9b:1f:47:2d:c5:ef:3c:fc:a7:3c:08:33:4c:07:20:
                    76:68:46:70:fa:ca:b9:08:23:ca:db:56:6b:15:62:
                    37:9b:cc:8b:a7:b6:69:6d:96:e8:c8:f5:a3:00:5a:
                    37:e2:ec:95:fd:3e:33:4f:66:28:ba:4c:12:86:58:
                    51:c6:12:d0:19:f1:57:f6:71:30:7f:e9:79:50:2f:
                    08:98:35:b9:b8:97:54:e6:e1:22:1c:55:d0:18:98:
                    51:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:68:DE:BA:72:71:ED:95:A8:94:83:79:AB:9A:64:22:2C:86:BE:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27771fc2-d4d2-33b2-bb19-4e4b594d6458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:fe:cc:15:42:c2:0d:e0:2a:28:78:6b:1d:06:7a:76:4f:0a:
         cc:5e:53:09:0a:82:ec:6d:6e:ca:c7:dc:ba:e9:51:20:4b:04:
         e1:90:6e:af:5a:cc:61:00:36:58:e0:c6:56:81:5f:b6:e3:ee:
         55:04:42:5e:b0:6d:0a:ec:09:44:45:08:39:18:59:9d:3e:53:
         ce:26:9f:36:05:bb:64:53:c3:cd:77:7f:fd:c7:ba:81:95:a8:
         c7:28:a7:bd:69:56:c9:69:77:84:0c:f4:26:27:2c:0d:91:95:
         74:dd:72:5b:95:1b:9b:53:19:9c:87:ab:9c:d2:b8:32:d8:f0:
         34:ed:91:f9:2a:a6:fe:89:a8:15:c6:e5:40:c5:97:2e:53:9d:
         4a:e6:35:b2:a7:0c:dc:85:2a:65:ac:8e:8d:71:94:34:47:0d:
         e4:9c:fa:75:04:c6:82:76:20:ac:07:e3:65:e9:d2:cb:7c:62:
         9a:3e:64:06:f8:35:77:81:5c:cc:3e:18:37:0d:20:2a:01:ca:
         bd:f5:5f:f6:ec:97:f8:e3:15:9a:dc:2a:af:07:ff:8d:bc:50:
         fb:c2:a9:a1:36:6b:b8:06:09:e6:be:ca:23:83:a6:e7:21:e0:
         84:db:e8:a6:7f:06:e5:91:cf:8c:29:27:a7:7e:af:58:89:62:
         e0:56:7e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:59 2024 by rpki-client on console-ams.rpki-client.org