Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a3e0f0d-8d67-37ef-9cb4-f11a25e42329.roa
File:                     4a3e0f0d-8d67-37ef-9cb4-f11a25e42329.roa (raw, json)
Hash identifier:          yzo8Mhu0G42dkH9IInMAIiqFBb6D00capdEjDj34We4=
Subject key identifier:   07:44:0A:0E:05:1E:ED:65:F3:85:1D:E4:DE:8E:15:68:E6:7E:88:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476B29678A2F1A550368496C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a3e0f0d-8d67-37ef-9cb4-f11a25e42329.roa
Signing time:             Thu 03 Oct 2024 12:34:52 +0000
ROA not before:           Thu 03 Oct 2024 12:34:52 +0000
ROA not after:            Wed 01 Jan 2025 13:34:52 +0000
asID:                     397197
IP address blocks:        2001:500:121::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:29:67:8a:2f:1a:55:03:68:49:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 12:34:52 2024 GMT
            Not After : Jan  1 13:34:52 2025 GMT
        Subject: CN=68edab98-1e16-458a-b926-c2c627a4a54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:b4:a3:8d:2d:56:28:fc:b0:12:de:72:4a:
                    78:7d:60:1f:e9:74:22:f2:ee:4d:7d:9c:04:40:6d:
                    8b:14:33:88:b1:d8:49:24:9b:b8:56:81:65:d4:e1:
                    03:4a:08:2a:16:e7:14:7d:36:16:ec:09:e9:82:1e:
                    83:8e:91:60:dc:9f:f3:9e:14:ef:b3:ef:80:40:77:
                    c7:d1:a2:23:34:2c:d2:b2:d6:4e:77:4c:e0:c2:b2:
                    1a:09:b1:13:65:4d:45:d2:24:a2:12:6d:38:ab:4b:
                    c7:66:82:bc:f5:1a:d5:eb:c7:ea:87:a4:fb:5a:37:
                    28:2c:39:a7:b7:bd:e2:03:f0:7a:05:c3:81:f3:74:
                    08:bb:7f:6b:26:7f:ee:94:77:65:63:a9:cc:51:1a:
                    9c:ba:c9:d4:08:1a:95:9e:38:c8:66:b1:72:d8:a2:
                    17:ab:a8:3f:ad:78:ef:a5:27:12:cb:30:fe:3c:ba:
                    0e:9b:07:4d:4f:a3:af:11:65:f4:f6:14:16:78:c7:
                    23:b1:13:5f:49:fd:48:e4:be:da:de:ac:e7:8c:bd:
                    b9:ca:c0:09:e9:d2:79:68:e3:81:fa:de:16:f0:f1:
                    d5:8d:62:9b:36:2e:e2:94:f9:dc:ca:42:32:3a:16:
                    09:b1:57:38:0e:01:65:bb:52:cd:05:3f:ab:50:46:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:44:0A:0E:05:1E:ED:65:F3:85:1D:E4:DE:8E:15:68:E6:7E:88:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a3e0f0d-8d67-37ef-9cb4-f11a25e42329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:dd:77:04:d9:d8:2c:14:54:98:c0:e8:f8:da:7d:e8:9f:b2:
         c1:14:23:f8:e2:a1:df:f8:d4:6d:90:3b:3c:bb:c1:a4:b4:c6:
         82:da:a4:25:d9:d1:b5:04:de:0e:35:0b:de:ac:a1:77:0c:6e:
         b0:8a:5d:28:63:a3:22:fd:14:26:6e:00:7f:df:3e:88:80:c7:
         73:47:ba:8f:24:f3:71:7f:79:55:75:aa:a5:d8:8a:41:06:59:
         97:8a:cb:63:cf:5d:2a:ad:ad:0c:1c:a4:b6:6d:39:f1:1d:e4:
         2a:00:04:5d:be:c7:b7:0a:db:94:96:2d:ce:23:d3:ab:be:6d:
         73:91:3b:33:3f:08:b8:a2:01:97:96:b4:a5:40:b2:f8:f2:22:
         d1:fc:98:8e:d7:28:88:cc:19:00:15:e5:ab:03:82:06:36:97:
         3b:24:08:04:52:d5:c7:c2:f1:21:93:b8:dd:33:62:55:4d:cc:
         74:d8:cf:f5:18:c7:8c:39:b0:fa:81:3e:eb:67:ae:76:3e:97:
         06:1b:c0:6a:89:6b:0c:08:24:3f:88:ac:4d:02:ef:8f:ed:97:
         44:dc:bc:32:ca:4a:03:0a:55:3f:05:b3:9d:43:c7:33:c7:f9:
         47:ab:25:1b:93:98:3e:64:c5:5a:41:ca:36:6e:5f:dd:90:4b:
         cc:94:5c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:03 2024 by rpki-client on console-ams.rpki-client.org