Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/471c8e28-8998-3a61-9d0a-48fc3062cb19.roa
File:                     471c8e28-8998-3a61-9d0a-48fc3062cb19.roa (raw, json)
Hash identifier:          rcZ02pRpedG26Gwpg28hWDDzTI8CVC3iaJGKkatS9XY=
Subject key identifier:   D8:93:00:35:64:AD:3F:CD:21:EF:6B:1B:3F:B1:32:9C:71:81:A5:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847791CF9A574021A1AAF247700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/471c8e28-8998-3a61-9d0a-48fc3062cb19.roa
Signing time:             Tue 08 Oct 2024 12:31:08 +0000
ROA not before:           Tue 08 Oct 2024 12:31:08 +0000
ROA not after:            Mon 06 Jan 2025 13:31:08 +0000
asID:                     397197
IP address blocks:        2001:500:120::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:1c:f9:a5:74:02:1a:1a:af:24:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  8 12:31:08 2024 GMT
            Not After : Jan  6 13:31:08 2025 GMT
        Subject: CN=d420ddfa-1542-41d3-86ad-b341051f1c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:5d:95:41:78:c9:6f:ed:a4:3a:37:96:ce:
                    8d:90:a2:5a:73:4c:78:b4:f0:62:81:79:53:86:c2:
                    11:77:23:6d:88:81:32:a2:fc:0a:d7:66:fe:1b:30:
                    47:11:db:7e:e3:65:33:3f:23:ed:94:a9:b2:21:e5:
                    0e:73:ff:95:7d:31:d7:25:55:4a:70:ef:09:fc:14:
                    08:ee:f5:5f:45:a3:d0:44:d5:c4:a2:3c:bb:dd:82:
                    39:65:a0:be:b8:1e:ba:8f:8b:a9:17:ff:f8:35:b9:
                    1b:88:51:24:4d:49:d1:e9:31:10:82:ac:7a:ad:79:
                    63:90:51:fa:6f:c0:67:9c:6a:15:43:72:23:c9:f1:
                    dc:48:6b:07:1a:3d:00:ed:45:b5:af:d0:25:01:a2:
                    fe:28:bf:5e:7f:e3:7a:60:51:e3:11:ad:6d:e9:0b:
                    8c:ae:8e:09:0a:6c:d2:50:a0:4c:cd:8b:7e:6d:98:
                    82:32:33:80:04:f6:7c:91:69:1d:42:d7:30:50:af:
                    ae:ea:bc:39:76:6d:f7:23:29:7c:d1:4b:dd:ed:b3:
                    17:15:5a:e9:82:26:d4:fb:7d:9a:16:ed:02:b9:e2:
                    38:e5:11:26:be:cf:8a:65:ce:eb:2e:7f:21:b4:25:
                    64:6f:d7:c8:74:20:45:e8:a4:13:9e:ae:2b:98:b7:
                    5f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:93:00:35:64:AD:3F:CD:21:EF:6B:1B:3F:B1:32:9C:71:81:A5:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/471c8e28-8998-3a61-9d0a-48fc3062cb19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:b0:c4:66:9f:a9:4f:86:92:27:ed:31:37:18:b5:24:6c:10:
         f9:fa:f1:be:b4:1b:7c:0a:9d:9a:0b:cc:71:dc:2f:8a:89:1d:
         25:f6:cc:c8:2d:12:54:4c:ba:40:f1:fd:cf:a1:65:74:bb:60:
         e3:c1:a3:bd:72:e2:b6:53:51:98:e1:e9:88:00:eb:2c:80:ff:
         61:7d:d1:cb:76:c3:1d:4f:7e:e7:b0:c4:4b:b2:01:c5:0e:ed:
         67:fa:c6:0a:7a:e4:de:4f:06:cb:cf:07:eb:4a:62:4e:bd:06:
         89:3f:74:9b:35:3b:c8:bc:0e:3b:cc:f0:1a:66:d9:d5:3c:fc:
         b5:a9:bd:15:b0:ed:6f:7b:91:27:26:03:1a:2c:38:6b:79:e9:
         85:bb:f5:77:32:46:3d:ac:7c:21:3e:80:13:6a:56:e5:5b:0c:
         3b:3c:6d:cc:e7:30:c0:dd:09:fa:01:1f:55:32:bc:29:7f:c1:
         45:c3:56:8e:75:3b:9d:19:61:48:e1:a7:86:03:04:ce:2a:a6:
         94:eb:ce:3f:76:cd:e9:a7:ee:b5:45:c2:2b:5b:19:14:89:42:
         63:b3:e7:60:9b:b0:b5:6a:a8:ec:f6:88:15:87:ad:34:9e:96:
         44:83:0f:06:45:0b:58:fe:ae:1e:4c:71:6f:a5:0e:96:94:17:
         80:83:f8:2f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEd5HPmldAIaGq8kdwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAwODEyMzEwOFoXDTI1MDEwNjEzMzEwOFowLzEtMCsGA1UEAxMk
ZDQyMGRkZmEtMTU0Mi00MWQzLTg2YWQtYjM0MTA1MWYxYzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM1dlUF4yW/tpDo3ls6NkKJac0x4tPBigXlT
hsIRdyNtiIEyovwK12b+GzBHEdt+42UzPyPtlKmyIeUOc/+VfTHXJVVKcO8J/BQI
7vVfRaPQRNXEojy73YI5ZaC+uB66j4upF//4NbkbiFEkTUnR6TEQgqx6rXljkFH6
b8BnnGoVQ3IjyfHcSGsHGj0A7UW1r9AlAaL+KL9ef+N6YFHjEa1t6QuMro4JCmzS
UKBMzYt+bZiCMjOABPZ8kWkdQtcwUK+u6rw5dm33Iyl80Uvd7bMXFVrpgibU+32a
Fu0CueI45REmvs+KZc7rLn8htCVkb9fIdCBF6KQTnq4rmLdfOQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNiTADVkrT/NIe9rGz+xMpxxgaX+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDcxYzhlMjgtODk5OC0z
YTYxLTlkMGEtNDhmYzMwNjJjYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCKsMRmn6lPhpIn7TE3GLUkbBD5+vG+tBt8Cp2a
C8xx3C+KiR0l9szILRJUTLpA8f3PoWV0u2DjwaO9cuK2U1GY4emIAOssgP9hfdHL
dsMdT37nsMRLsgHFDu1n+sYKeuTeTwbLzwfrSmJOvQaJP3SbNTvIvA47zPAaZtnV
PPy1qb0VsO1ve5EnJgMaLDhreemFu/V3MkY9rHwhPoATalblWww7PG3M5zDA3Qn6
AR9VMrwpf8FFw1aOdTudGWFI4aeGAwTOKqaU684/ds3pp+61RcIrWxkUiUJjs+dg
m7C1aqjs9ogVh600npZEgw8GRQtY/q4eTHFvpQ6WlBeAg/gv
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:29 2024 by rpki-client on console-fra.rpki-client.org