Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/284f6467-2199-3265-b43f-117ee3787a86.roa
File:                     284f6467-2199-3265-b43f-117ee3787a86.roa (raw, json)
Hash identifier:          wZlgn7ODJ8Gq7ZUNk5PCpbCljSQdb3dcdN938aNILxg=
Subject key identifier:   38:10:29:EA:AE:98:F0:2D:E5:3C:EC:74:9C:35:D9:C8:6E:C4:E7:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EEDA0DA50B1C0EBFAF940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/284f6467-2199-3265-b43f-117ee3787a86.roa
Signing time:             Thu 26 Sep 2024 12:35:30 +0000
ROA not before:           Thu 26 Sep 2024 12:35:30 +0000
ROA not after:            Wed 25 Dec 2024 13:35:30 +0000
asID:                     396564
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:ed:a0:da:50:b1:c0:eb:fa:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:30 2024 GMT
            Not After : Dec 25 13:35:30 2024 GMT
        Subject: CN=f3c3ebb2-2ce8-4e63-a49f-8736b41b9f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:29:8e:b0:e2:96:04:b4:cc:7c:4a:fb:d2:
                    50:f1:d8:98:9a:be:e2:a2:01:68:1a:8c:08:5e:2f:
                    33:29:75:e5:19:b2:33:a1:88:0e:ba:a3:cd:4c:22:
                    a5:42:7c:29:54:03:2f:1f:e1:b8:86:a6:55:e6:b2:
                    f4:98:f3:d1:54:47:a1:04:c1:75:67:72:70:5f:20:
                    1b:3e:15:9c:99:49:ab:84:14:55:4b:49:ad:55:fe:
                    93:d5:51:59:20:31:2b:aa:d2:6c:fe:6f:d8:3c:f5:
                    43:1f:c0:02:53:1f:ad:b0:f5:9c:1c:8f:e4:4f:a4:
                    b1:9a:77:a9:98:5c:c3:5f:6e:d7:9a:67:8a:15:d9:
                    99:5a:27:b9:ed:2a:ee:f3:43:dc:00:9d:1b:de:cf:
                    d0:5a:46:9e:dc:6c:99:14:96:49:e4:1c:b8:b6:76:
                    4e:a5:a0:31:91:78:69:5d:36:46:34:1a:0a:e5:37:
                    0c:ae:f4:76:5e:54:04:aa:08:c1:c3:2d:9b:ee:b5:
                    a2:23:36:eb:7d:e0:3f:57:38:29:38:f6:9f:52:c2:
                    be:9d:f7:4f:dc:8c:82:f4:ba:9b:8a:de:fc:56:99:
                    1d:5d:c7:8b:6e:e2:f5:a0:9f:5d:89:2e:00:23:3e:
                    1b:47:d2:fd:c7:3a:f6:af:db:7a:d8:0e:a8:c3:00:
                    02:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:10:29:EA:AE:98:F0:2D:E5:3C:EC:74:9C:35:D9:C8:6E:C4:E7:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/284f6467-2199-3265-b43f-117ee3787a86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:1f:08:5e:ec:80:0e:d1:0c:b7:fb:08:e5:87:7d:46:23:35:
         75:8b:44:a1:b3:66:c3:d7:6e:32:5b:fb:d6:f5:16:09:72:95:
         89:7b:e5:55:47:4a:f6:d6:f7:9f:8a:b2:f3:1b:8e:03:51:5f:
         7c:ec:73:5d:f4:6d:c9:84:dd:a2:58:b0:83:b4:09:30:76:28:
         4e:12:6a:b1:04:6c:df:62:ed:6c:fe:73:d1:3e:f1:67:e7:b7:
         f7:5b:ae:6f:74:09:3a:dc:cc:b3:aa:cc:e3:5f:4e:c1:c8:60:
         a2:a3:8a:4f:f5:62:88:91:c3:3b:6a:22:4f:f8:88:b1:76:40:
         0c:a9:a6:31:17:4f:07:ed:a6:de:bc:01:cd:b4:77:71:08:12:
         9e:37:6c:fa:f9:b8:61:7b:05:9a:d8:d8:e3:23:c7:c9:40:88:
         2e:71:9e:9f:3a:83:a9:c3:74:77:5b:7a:86:6f:41:91:22:1f:
         d2:c1:90:66:04:d2:6c:0d:31:f1:a3:6c:85:2a:35:a3:e2:da:
         6b:d1:36:59:56:37:e4:8f:22:19:1f:97:5c:9e:72:f6:ff:0b:
         42:36:02:47:13:44:77:42:ff:6d:f3:14:13:68:a9:a0:05:48:
         35:99:65:c2:5f:8d:82:32:7d:33:83:b6:1f:24:a4:1c:45:f5:
         93:5c:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:25 2024 by rpki-client on console-fra.rpki-client.org