Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f953a59-3a4e-380a-a33b-a9abb2cafc59.roa
File:                     2f953a59-3a4e-380a-a33b-a9abb2cafc59.roa (raw, json)
Hash identifier:          qSnhKuUT/L+SxTf1CDx7RLEGZtbUtPWfTqBmoe5X3NE=
Subject key identifier:   0D:D3:EF:5B:D2:FD:48:22:17:FF:DD:16:57:44:6C:DC:97:5A:F5:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847AE36A87980BADD5472AEF520
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f953a59-3a4e-380a-a33b-a9abb2cafc59.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     36625
IP address blocks:        2001:500:7967::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:a8:79:80:ba:dd:54:72:ae:f5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=f0bbed1e-00e0-4f59-8422-d793a747fd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c6:cf:ee:b4:d7:1c:77:86:7b:5f:d5:bd:d7:
                    ea:c6:dd:3e:d2:b3:bb:7f:47:18:26:5c:e1:a2:51:
                    79:8e:c2:da:4d:2b:ee:5e:a0:90:db:82:a4:e2:c9:
                    34:69:37:40:50:46:d9:19:44:f4:81:84:10:a4:42:
                    34:99:ae:39:16:42:00:d1:b6:e4:5c:3c:79:a5:4a:
                    1a:e9:21:71:ad:23:6a:4c:5d:e9:c5:ad:06:f3:09:
                    87:08:d7:aa:56:5b:ad:eb:f3:77:71:54:74:56:16:
                    bd:2d:43:1a:13:81:1a:09:54:46:b3:84:e9:e0:f4:
                    db:ec:11:b2:ab:70:64:ef:ce:3c:72:92:48:b1:13:
                    d0:69:fd:8c:9f:65:37:de:00:58:c8:4f:1b:ad:ff:
                    39:6b:52:59:88:f9:9d:67:62:9f:e3:b3:1c:96:d9:
                    24:2d:07:a4:03:1c:1f:8c:cf:c7:9d:21:82:90:ee:
                    0a:d5:7a:ed:78:77:98:54:cb:4b:d1:48:45:58:69:
                    d5:54:80:2f:49:bc:cc:ca:b1:a3:8b:4d:05:3b:9d:
                    84:be:42:5f:1d:32:2b:14:b7:d4:f7:44:76:68:f1:
                    3b:24:78:5d:2b:b9:4b:cb:35:14:88:11:d1:ec:c0:
                    1c:ab:3e:96:10:b5:65:95:05:7a:21:f7:c5:47:e2:
                    b6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D3:EF:5B:D2:FD:48:22:17:FF:DD:16:57:44:6C:DC:97:5A:F5:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f953a59-3a4e-380a-a33b-a9abb2cafc59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:f7:a6:9a:24:62:22:3d:92:a5:e3:7f:b5:eb:f4:3a:45:12:
         e7:ec:42:35:8b:31:35:fd:19:48:e3:f7:30:c5:27:22:0b:9f:
         c0:85:38:29:ea:63:88:96:70:df:3d:30:44:da:77:e0:44:00:
         70:79:9f:55:3d:15:42:de:a3:33:31:8f:78:d6:17:b1:0e:19:
         a9:8a:6e:74:9f:46:85:73:27:8b:cf:b4:fb:f9:58:cb:7e:32:
         f5:e3:f1:c8:23:3d:0f:79:0e:ef:db:91:b3:a8:94:b5:f4:ec:
         18:04:71:77:03:cb:93:63:19:aa:d1:54:03:14:76:43:23:93:
         62:38:d8:b5:a2:b3:1c:8e:e9:0f:ce:57:68:06:ed:de:c0:ec:
         b2:11:3f:46:48:2a:c6:d2:26:bd:ec:af:fd:ed:3e:ec:8b:33:
         9a:b4:15:1a:59:27:61:82:59:d3:3e:46:04:0d:5b:3e:c4:17:
         e4:e0:98:7e:cc:92:4d:db:0e:4f:15:a7:bd:8a:8c:11:9b:d9:
         0c:0d:19:06:b7:44:9f:56:b0:b1:2c:a5:9c:a6:6e:32:af:84:
         4c:7f:cc:b3:27:2a:08:2c:cb:ef:12:bb:80:cf:4b:f1:b7:bf:
         db:4a:da:06:7b:72:df:f0:3f:8a:88:a6:c3:83:e4:d2:4e:af:
         4b:c4:95:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:59 2024 by rpki-client on console-ams.rpki-client.org