Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395dec09-ec4b-313a-8999-563a198d4324.roa
File:                     395dec09-ec4b-313a-8999-563a198d4324.roa (raw, json)
Hash identifier:          weCiR1oFYAdhUpUryvYyT/hlD0CdFg9rBvwh1LH+9ks=
Subject key identifier:   58:F4:53:E4:B2:CD:48:BD:11:4F:D9:00:DC:12:B9:01:6E:71:BB:95
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476593FE0A82AF2D46B015CB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395dec09-ec4b-313a-8999-563a198d4324.roa
Signing time:             Tue 01 Oct 2024 12:34:47 +0000
ROA not before:           Tue 01 Oct 2024 12:34:47 +0000
ROA not after:            Mon 30 Dec 2024 13:34:47 +0000
asID:                     396577
IP address blocks:        2001:500:122::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:93:fe:0a:82:af:2d:46:b0:15:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  1 12:34:47 2024 GMT
            Not After : Dec 30 13:34:47 2024 GMT
        Subject: CN=2b691a1e-3adb-4942-a49d-dfb09e572dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8a:f6:ab:c3:dc:fd:29:aa:da:07:14:49:af:
                    95:e2:0b:04:ba:6a:e2:23:d9:6f:ac:ed:48:94:02:
                    41:a3:c5:75:aa:3e:31:b4:9e:56:89:08:45:0f:64:
                    27:f9:66:a7:87:32:a0:11:e1:9e:7e:08:26:d9:1a:
                    f8:27:18:de:01:1c:27:2e:8d:cd:c7:9f:9d:e8:ba:
                    0c:02:fe:fa:86:3a:00:42:2b:d8:84:8f:e9:d7:09:
                    b1:60:f4:55:8f:c9:4c:65:eb:23:17:df:a1:98:56:
                    84:9f:9c:84:c8:bb:06:2f:08:9c:06:da:77:04:d3:
                    44:cd:72:fa:9a:66:b5:c1:da:8e:25:47:ed:42:fd:
                    e3:ac:04:88:6f:7f:47:fa:ce:80:ca:6d:16:60:5d:
                    51:34:90:7f:a0:a8:6a:ef:06:e5:3d:1a:ab:d2:fe:
                    ea:b4:af:fc:36:05:ca:f3:4e:f7:8d:7b:9a:7d:7a:
                    36:a3:82:6d:c0:98:df:16:90:ba:ea:81:a6:98:6b:
                    8d:53:5e:93:ce:fb:ed:0f:63:09:12:de:80:fd:68:
                    9b:2a:6a:4e:07:30:eb:43:1e:0b:98:0f:76:b7:b9:
                    d0:f9:5d:53:f3:4c:c2:9f:2f:a1:9d:a1:71:7c:91:
                    e7:0c:49:92:e1:d5:69:d7:db:c5:81:25:d6:33:6a:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F4:53:E4:B2:CD:48:BD:11:4F:D9:00:DC:12:B9:01:6E:71:BB:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395dec09-ec4b-313a-8999-563a198d4324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:1a:f5:90:07:84:4c:e0:9e:60:d3:ad:c0:bf:51:94:49:96:
         f2:5a:c2:b1:76:d3:4c:1e:5c:7c:af:31:9d:44:ee:a2:60:00:
         91:9b:f3:7f:36:e3:44:a7:23:42:11:1c:bc:69:9f:32:aa:f7:
         92:9e:85:c8:b5:bc:67:2a:95:a9:25:e9:dd:2f:81:9d:ad:31:
         e2:08:21:32:45:aa:d3:7d:15:b6:a7:e4:fd:69:9d:0f:44:55:
         8c:2b:20:2d:07:c5:62:04:e5:1d:58:f7:45:22:fd:d4:af:ef:
         9b:72:4d:9b:9b:fb:c9:0d:2f:5d:9d:f6:ad:f8:81:62:52:2f:
         b1:76:3e:c7:74:b8:2b:f8:3f:9a:2a:58:e8:99:e3:42:5e:ff:
         22:49:ce:1a:50:88:95:9f:12:f9:77:2f:99:d2:3a:0f:18:b2:
         d3:26:5f:7c:a6:c2:6a:9b:bc:be:ba:b5:86:49:4c:32:78:f8:
         73:a7:9d:7c:df:97:f3:99:71:eb:0b:b4:31:95:d0:6a:fd:06:
         4a:56:fa:4f:8f:7f:03:6b:c3:a7:a2:f4:13:01:66:2b:5a:67:
         29:bd:fe:34:4c:79:64:d3:62:df:0d:3a:08:e0:1d:0b:0e:52:
         a6:04:3a:79:e8:40:b4:02:48:34:5a:46:d9:34:47:4a:d0:14:
         1c:46:e3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:01 2024 by rpki-client on console-ams.rpki-client.org