Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43542155-4dec-349a-9b3e-6f1d289017ce.roa
File:                     43542155-4dec-349a-9b3e-6f1d289017ce.roa (raw, json)
Hash identifier:          c8wmTrJm2PNLiGtb0jpqXxw0KWzzgqnjm2N+JowOkVw=
Subject key identifier:   AF:47:1A:CB:6E:53:34:AF:D7:90:C5:2D:F8:BA:BE:03:EB:9B:C1:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EEF67282CB00812B64600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43542155-4dec-349a-9b3e-6f1d289017ce.roa
Signing time:             Thu 26 Sep 2024 12:35:31 +0000
ROA not before:           Thu 26 Sep 2024 12:35:31 +0000
ROA not after:            Wed 25 Dec 2024 13:35:31 +0000
asID:                     397199
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:ef:67:28:2c:b0:08:12:b6:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:31 2024 GMT
            Not After : Dec 25 13:35:31 2024 GMT
        Subject: CN=98b09fc3-6677-4ebd-924d-cf572129fdde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:85:06:b3:db:83:59:68:6c:ef:7b:bc:20:93:
                    56:fe:db:67:c1:a6:2f:2f:7e:39:5a:33:b3:4f:ae:
                    69:22:5b:a0:48:c6:a1:b4:fc:a1:5b:c9:eb:9d:d1:
                    d5:a7:db:23:b8:dc:15:ae:cc:e3:7a:a8:de:21:0a:
                    3e:00:81:eb:b9:1e:1b:cd:07:35:40:2a:b3:36:56:
                    42:a8:d4:3c:6c:4b:49:b3:eb:e5:d2:1c:b9:fb:fe:
                    e5:5a:6b:64:5d:1b:81:f0:f2:11:f9:d5:0f:56:91:
                    d4:df:b2:9c:0a:08:cb:1e:3c:f0:a0:61:51:8a:c1:
                    46:7a:f6:00:ea:9c:6b:da:a3:e5:be:3d:0f:3c:d1:
                    4c:29:bc:62:50:ed:1c:82:35:3c:65:6a:b0:3e:9a:
                    3c:c5:79:e5:46:a4:c0:16:d7:53:43:bd:a4:90:0a:
                    a1:11:e1:89:23:b1:46:f1:93:fe:bf:d5:cc:a6:aa:
                    ea:9b:34:50:d1:3b:97:c1:c7:95:33:1b:66:64:f5:
                    46:c5:a0:05:e3:4b:4f:67:79:69:c0:b5:c9:f4:b3:
                    1b:73:47:86:bb:36:0e:87:b2:f0:b7:71:e8:26:21:
                    a3:2b:7f:44:2d:62:06:0d:a2:83:81:07:8f:12:5c:
                    aa:53:f2:11:6c:0a:4e:4b:7c:05:c4:c9:cb:ad:2f:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:47:1A:CB:6E:53:34:AF:D7:90:C5:2D:F8:BA:BE:03:EB:9B:C1:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43542155-4dec-349a-9b3e-6f1d289017ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:bc:81:0d:db:57:aa:55:70:a7:4e:a2:74:ea:93:4a:8f:ce:
         d6:e7:23:31:60:36:c5:d4:9d:7a:c8:91:26:55:70:6a:26:66:
         5b:0b:c3:d0:24:b5:f0:24:dd:4d:b0:0f:02:06:6c:83:b6:51:
         2c:e6:3e:5d:a2:22:b7:11:aa:a3:be:ae:a4:9a:36:fe:15:b5:
         af:ee:57:6b:5a:e4:40:e9:b0:5d:fe:cd:d4:33:d8:8f:32:02:
         f7:4b:86:8b:fe:b0:12:df:4b:6a:cd:93:c5:63:96:eb:63:8d:
         cd:64:ae:87:7c:f9:bb:c0:5d:73:fa:53:2b:3d:bc:db:3b:a1:
         4c:11:43:7b:4b:6a:3a:a8:c5:d8:f1:76:9e:e6:3a:18:26:8a:
         94:df:d0:6d:27:7c:fe:e9:7a:90:70:21:ba:6e:16:15:bf:c5:
         48:83:d0:3d:e7:c7:25:4a:2e:64:31:3c:ee:a4:a0:b1:fb:51:
         e0:bf:b4:96:2b:5b:2d:68:fd:19:d7:34:a7:61:7c:3d:bb:33:
         26:1f:87:10:7d:13:48:54:61:4f:42:d1:4a:67:7d:e5:58:b9:
         48:7b:e2:b6:7d:33:d3:e8:41:d3:fd:7b:6f:97:c8:30:0b:6f:
         9b:fe:98:96:d2:79:67:1a:89:5c:ff:c4:9d:41:8b:6b:e4:2d:
         c3:66:0d:cc
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdXnu9nKCywCBK2RgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MDkyNjEyMzUzMVoXDTI0MTIyNTEzMzUzMVowLzEtMCsGA1UEAxMk
OThiMDlmYzMtNjY3Ny00ZWJkLTkyNGQtY2Y1NzIxMjlmZGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoUGs9uDWWhs73u8IJNW/ttnwaYvL345WjOz
T65pIlugSMahtPyhW8nrndHVp9sjuNwVrszjeqjeIQo+AIHruR4bzQc1QCqzNlZC
qNQ8bEtJs+vl0hy5+/7lWmtkXRuB8PIR+dUPVpHU37KcCgjLHjzwoGFRisFGevYA
6pxr2qPlvj0PPNFMKbxiUO0cgjU8ZWqwPpo8xXnlRqTAFtdTQ72kkAqhEeGJI7FG
8ZP+v9XMpqrqmzRQ0TuXwceVMxtmZPVGxaAF40tPZ3lpwLXJ9LMbc0eGuzYOh7Lw
t3HoJiGjK39ELWIGDaKDgQePElyqU/IRbApOS3wFxMnLrS/pnwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFK9HGstuUzSv15DFLfi6vgPrm8EoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDM1NDIxNTUtNGRlYy0z
NDlhLTliM2UtNmYxZDI4OTAxN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCfvIEN21eqVXCnTqJ06pNKj87W5yMxYDbF1J16
yJEmVXBqJmZbC8PQJLXwJN1NsA8CBmyDtlEs5j5doiK3Eaqjvq6kmjb+FbWv7ldr
WuRA6bBd/s3UM9iPMgL3S4aL/rAS30tqzZPFY5brY43NZK6HfPm7wF1z+lMrPbzb
O6FMEUN7S2o6qMXY8Xae5joYJoqU39BtJ3z+6XqQcCG6bhYVv8VIg9A958clSi5k
MTzupKCx+1Hgv7SWK1staP0Z1zSnYXw9uzMmH4cQfRNIVGFPQtFKZ33lWLlIe+K2
fTPT6EHT/Xtvl8gwC2+b/piW0nlnGolc/8SdQYtr5C3DZg3M
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:02 2024 by rpki-client on console-ams.rpki-client.org