Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4731efff-1aa5-3c2f-9314-862dcba127d5.roa
File:                     4731efff-1aa5-3c2f-9314-862dcba127d5.roa (raw, json)
Hash identifier:          owgcDa38pxjpBZABZlpwYNEWfRPUl+EvaTkjNxKicbU=
Subject key identifier:   7E:6E:91:4D:D4:5E:D2:2C:74:58:FB:DE:0E:2C:D0:8D:C7:AB:E7:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847791CF808E4C0B0D171E66100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4731efff-1aa5-3c2f-9314-862dcba127d5.roa
Signing time:             Tue 08 Oct 2024 12:31:08 +0000
ROA not before:           Tue 08 Oct 2024 12:31:08 +0000
ROA not after:            Mon 06 Jan 2025 13:31:08 +0000
asID:                     22547
IP address blocks:        2001:500:120::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:1c:f8:08:e4:c0:b0:d1:71:e6:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  8 12:31:08 2024 GMT
            Not After : Jan  6 13:31:08 2025 GMT
        Subject: CN=1f4b8793-ed2c-445e-b173-60e62f044e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:a2:ae:94:b2:66:a3:de:c9:d6:53:28:7e:
                    02:d2:6d:e1:b9:23:df:9e:a9:06:6f:7e:36:c8:66:
                    50:ce:d2:ae:23:ab:54:53:91:1d:34:66:e8:d7:ac:
                    ac:11:fd:e5:68:c3:00:db:33:e6:7f:8d:d6:0c:0c:
                    91:68:17:5b:98:e0:cf:99:0b:14:02:6b:39:12:62:
                    59:63:ba:f3:b3:62:96:9b:1d:d9:1d:ec:a1:e8:60:
                    87:18:f7:f4:e3:7c:4f:ed:38:dd:9e:2a:e7:db:72:
                    0a:2e:f0:77:83:7e:f0:13:98:98:ef:da:8c:a7:08:
                    27:a7:83:24:8b:32:1b:c2:7b:41:20:e8:c3:99:4f:
                    26:46:2b:13:23:56:f0:18:b3:bb:b0:66:57:7f:17:
                    0b:21:b3:33:60:92:34:e8:4f:43:34:16:3c:38:aa:
                    c9:ce:88:3d:fe:fc:81:00:7a:bf:21:8e:1a:f4:e8:
                    af:75:04:b4:2b:76:aa:95:43:11:a9:58:95:bb:8a:
                    8c:fa:62:65:82:07:c7:6d:16:ba:2f:b6:03:b6:15:
                    e3:fa:57:75:c9:07:fd:38:5e:65:a2:07:9f:e6:4f:
                    16:b7:17:43:57:bd:49:f5:df:c4:b7:81:a9:6b:b7:
                    bc:06:b1:92:db:f7:9f:1e:cd:df:a9:ae:f1:62:46:
                    08:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6E:91:4D:D4:5E:D2:2C:74:58:FB:DE:0E:2C:D0:8D:C7:AB:E7:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4731efff-1aa5-3c2f-9314-862dcba127d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:94:f1:cd:af:f1:e1:a9:a0:3a:f4:83:41:47:d5:88:5f:1d:
         81:bc:0a:2b:48:7c:c2:e1:31:94:11:ef:39:55:f9:b3:f8:3b:
         e6:a5:3b:55:e6:23:77:31:94:ad:62:64:f9:b1:cf:89:46:15:
         31:9b:09:3f:7d:0d:c5:e9:23:a8:52:7d:20:ea:05:36:ed:67:
         33:a3:ad:ff:ee:61:36:e8:92:20:cf:ac:4c:83:0e:fc:ae:0c:
         81:2b:e1:e7:bb:82:e8:e0:8a:fe:85:95:2c:f1:6c:87:06:2b:
         19:f1:09:58:93:55:2f:3a:6a:17:aa:ef:b6:fd:4b:26:cf:d7:
         f0:93:5c:92:9e:73:98:ff:82:d2:b5:1d:0a:de:90:ab:dd:09:
         c7:2b:e2:56:86:a0:cd:c6:b3:31:d9:79:1f:a9:3b:e1:75:f0:
         83:34:2c:46:a5:7f:61:00:56:b6:eb:df:5f:1f:6a:1a:1b:34:
         8b:50:41:9c:05:eb:50:fd:06:9e:42:e9:57:5d:48:8f:1f:c6:
         34:29:4b:bc:44:ee:16:b5:84:c9:dd:e1:69:9d:26:79:80:f9:
         a7:a4:2f:50:c6:33:fe:80:25:d2:6d:78:a8:b7:6c:d0:02:a4:
         9e:72:4b:09:bf:f1:6a:c1:02:a6:8c:e0:27:e1:c3:c7:84:8e:
         87:a9:08:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:29 2024 by rpki-client on console-fra.rpki-client.org