Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d2488fb-7689-3b0c-a42d-e7285887e7dd.roa
File:                     2d2488fb-7689-3b0c-a42d-e7285887e7dd.roa (raw, json)
Hash identifier:          N9rjbubY5/BmXKQhBXuBMDLnvVvBhfNwx1eGQ9IUvp0=
Subject key identifier:   2E:7F:08:21:56:83:A8:B6:AD:42:5B:99:3A:7F:23:DB:7E:0D:E6:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EEE0C2F5F3173985CE0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d2488fb-7689-3b0c-a42d-e7285887e7dd.roa
Signing time:             Thu 26 Sep 2024 12:35:30 +0000
ROA not before:           Thu 26 Sep 2024 12:35:30 +0000
ROA not after:            Wed 25 Dec 2024 13:35:30 +0000
asID:                     397207
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:ee:0c:2f:5f:31:73:98:5c:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:30 2024 GMT
            Not After : Dec 25 13:35:30 2024 GMT
        Subject: CN=b9a5551c-0e7e-4dff-b543-f6f0806e74e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:db:ca:21:d3:cd:44:21:a9:3a:ed:61:fb:
                    df:d2:11:3d:9c:ee:26:f4:f1:4f:93:ee:f3:0c:c5:
                    cc:96:3a:00:bd:f6:ec:ff:42:49:cf:61:9f:6e:9b:
                    69:9c:61:85:11:d3:b1:db:51:11:4b:45:19:4b:9c:
                    20:b1:17:1d:e5:15:4f:e7:84:87:55:f5:c0:42:e3:
                    7c:c5:03:cc:4b:af:85:35:1e:c9:46:6b:65:03:0e:
                    e6:9e:5b:f8:77:00:cc:9b:b3:ad:11:09:00:26:49:
                    e0:05:ab:da:e5:81:4e:53:be:3d:2a:19:69:20:2a:
                    1f:a0:a0:b1:95:8b:cf:b9:b9:ce:8a:3e:32:1f:88:
                    73:a3:14:3d:4a:f9:c3:2e:d3:b2:43:f7:b4:e3:59:
                    b6:69:f6:00:50:af:ba:06:ac:3c:2b:b6:26:cc:47:
                    57:17:3f:a8:17:bd:e7:a9:40:4d:16:d9:14:06:6e:
                    c2:b5:2d:22:0f:65:7f:67:60:48:ff:dc:95:3d:d1:
                    bf:ac:f2:83:57:20:13:ac:45:a6:92:ae:9d:c2:49:
                    67:89:72:b8:e6:1e:e1:ed:75:e6:73:bb:4f:d1:27:
                    d0:f7:4b:3c:7d:86:fd:a2:74:63:98:94:5f:76:52:
                    1c:7e:0b:74:20:79:40:7f:78:db:51:d8:c5:e4:e7:
                    65:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7F:08:21:56:83:A8:B6:AD:42:5B:99:3A:7F:23:DB:7E:0D:E6:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d2488fb-7689-3b0c-a42d-e7285887e7dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:85:62:15:d0:83:58:25:7e:71:f8:50:df:8c:4c:33:61:1a:
         05:a1:66:4d:03:9a:e0:cc:b6:73:d6:7f:a0:38:29:69:be:09:
         cf:aa:68:f3:26:e0:31:ff:50:08:4a:37:d9:7f:8f:32:b2:2b:
         25:44:1e:72:79:99:1a:24:d6:5f:d9:20:0e:52:92:5b:5e:31:
         ff:27:e0:b2:26:05:7a:41:d2:14:a8:63:00:b7:f1:54:7a:d1:
         ce:54:88:2d:fb:c5:99:3a:62:65:2b:f7:1e:e4:42:6d:a6:ed:
         91:85:37:e1:0b:50:a8:e7:b5:02:50:b1:93:86:8c:01:8f:5d:
         d1:44:c2:71:96:ea:26:24:8e:9d:34:74:b8:86:c2:15:8d:34:
         59:98:05:49:14:c8:a1:0f:46:8a:b2:01:86:1d:03:15:8f:2e:
         2d:64:d6:6e:93:bb:f2:ab:91:c2:d3:bb:a1:bf:10:d2:57:4e:
         dc:28:25:1b:96:ca:ea:66:e4:2f:a6:3f:79:3e:98:fb:2e:da:
         c9:8d:7b:8c:0d:7d:40:02:88:23:ed:2a:3f:74:ae:90:47:70:
         80:5f:6d:3d:ea:28:58:66:76:22:14:d0:25:98:e8:15:87:68:
         fd:bb:93:a7:27:71:f4:00:85:2a:e9:03:78:24:07:ec:86:e4:
         88:53:05:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:59 2024 by rpki-client on console-ams.rpki-client.org