Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46443bbe-dfe0-3b0c-9815-060f74077972.roa
File:                     46443bbe-dfe0-3b0c-9815-060f74077972.roa (raw, json)
Hash identifier:          ll44O9UI3ZrGwHd+MNgw1Ei2qGrLnMtR/jcPSOGCwL0=
Subject key identifier:   34:30:E5:8F:EF:B7:97:31:0C:00:92:EA:DA:CA:55:79:68:0F:12:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847BC2C1D2A5C2FC6178EE7DA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46443bbe-dfe0-3b0c-9815-060f74077972.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     396549
IP address blocks:        2001:500:30ff::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:1d:2a:5c:2f:c6:17:8e:e7:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=8f35748c-c6ce-44bf-b278-362b6808b680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:d4:db:1e:e7:42:bc:db:18:bb:8d:41:82:
                    74:0e:79:55:26:e9:06:75:c9:d7:3b:60:30:2b:bd:
                    ac:72:17:0e:b1:37:96:15:02:2f:4a:e9:c7:a4:5e:
                    8d:d2:79:6c:55:7c:94:68:1c:d2:03:2d:01:e0:d2:
                    a9:cd:80:92:ff:ac:40:0b:fc:aa:21:2f:97:54:bc:
                    c9:30:a8:f8:30:26:99:94:57:eb:16:fe:55:6e:86:
                    c6:a4:2c:23:a5:7c:a4:a6:07:20:fe:89:92:5d:ea:
                    ca:83:37:1b:65:4b:cb:51:00:8c:d9:29:85:a0:9d:
                    45:3c:8c:8e:c6:a6:99:e2:ac:f1:f9:2f:92:c6:82:
                    18:f7:81:85:cc:c4:b6:a8:c3:25:83:68:56:06:0f:
                    47:fa:48:53:5a:8e:e9:54:47:1e:3a:de:e4:72:71:
                    49:af:f5:80:60:a9:2d:5b:9b:11:f9:3a:61:12:bf:
                    ba:8a:65:13:08:86:1f:d5:ca:70:90:28:07:45:9e:
                    32:88:d0:95:50:fd:a6:e5:d1:10:07:b6:6b:17:99:
                    48:57:8f:91:7c:88:80:6c:2e:ce:2d:0f:e1:ab:8e:
                    dd:a4:8e:f7:93:90:62:9a:95:b1:2f:98:27:61:e0:
                    e5:4d:aa:47:66:1d:2e:1f:28:3c:cd:29:f2:ce:b4:
                    e7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:30:E5:8F:EF:B7:97:31:0C:00:92:EA:DA:CA:55:79:68:0F:12:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46443bbe-dfe0-3b0c-9815-060f74077972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:de:d6:ee:59:d2:16:cb:78:ab:c8:1f:0e:51:73:61:cf:db:
         7a:de:f5:22:d7:3c:5f:f6:92:a2:87:e1:52:b5:2e:de:4d:ea:
         69:1d:35:2a:45:23:31:fe:f7:e8:9a:37:eb:b7:f5:f0:3c:29:
         fa:74:cb:e2:26:d8:63:cf:ed:0f:46:7d:a8:a1:90:b4:18:a4:
         14:cd:95:cb:7f:73:4a:ce:07:3a:82:b2:e7:73:52:4e:a2:da:
         e8:ea:b4:b6:c4:ea:93:f4:63:0e:01:19:66:66:50:c9:a9:48:
         6c:56:d6:21:83:b4:62:95:2f:4a:d7:dd:99:57:02:e5:ec:a2:
         37:67:4e:71:2a:fe:35:36:d6:b1:62:37:d9:c3:b3:21:a4:16:
         80:6c:b6:eb:b0:4a:ba:54:74:19:5f:95:3f:89:20:8d:7f:f3:
         f4:ba:ce:0e:54:e7:3c:82:43:ec:e8:e9:c9:a4:02:7c:91:09:
         07:f6:26:a5:36:74:77:8b:3a:a2:64:d8:73:59:f3:f1:9d:9d:
         a3:a8:9e:cd:d8:62:79:82:9f:8d:52:c4:77:58:94:80:44:03:
         ee:b1:08:51:ae:e5:eb:3a:84:64:59:11:18:55:6e:5c:74:8c:
         57:ae:86:67:dd:cb:00:89:a8:3a:8e:f6:41:a7:09:d5:4d:bc:
         35:fb:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:28 2024 by rpki-client on console-fra.rpki-client.org