Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5196fc80-e236-3063-93b6-611395e8e648.roa
File:                     5196fc80-e236-3063-93b6-611395e8e648.roa (raw, json)
Hash identifier:          5jbYCskjz4Cy4IMywhFST4MIyqeib4CcNnBbaxjnMqs=
Subject key identifier:   E1:71:93:63:28:D7:66:2E:25:A5:0B:DA:2B:F9:B6:83:B5:3D:AB:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847791CFA3B946B34E3B898EB60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5196fc80-e236-3063-93b6-611395e8e648.roa
Signing time:             Tue 08 Oct 2024 12:31:09 +0000
ROA not before:           Tue 08 Oct 2024 12:31:09 +0000
ROA not after:            Mon 06 Jan 2025 13:31:09 +0000
asID:                     396573
IP address blocks:        2001:500:120::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:1c:fa:3b:94:6b:34:e3:b8:98:eb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  8 12:31:09 2024 GMT
            Not After : Jan  6 13:31:09 2025 GMT
        Subject: CN=c3a97b53-194a-4df9-b6e5-77d179cc9091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:3a:44:af:6d:23:e9:fb:e3:7a:db:e3:d3:
                    4e:06:b1:05:4a:4c:4c:59:16:72:a8:94:0b:2a:a5:
                    1d:6b:25:a5:fe:95:d6:a7:4a:42:18:6b:6a:72:ca:
                    22:cb:36:c2:5d:8e:a9:84:02:69:68:1c:bb:07:0c:
                    a3:2a:9e:14:1e:5a:09:2b:e7:cd:14:37:58:25:0b:
                    6c:d6:d9:34:46:59:2b:11:35:b7:14:b2:63:a5:a8:
                    36:05:65:6b:66:8d:62:e3:db:21:b4:75:91:cd:74:
                    6c:f6:bd:d4:a0:ce:80:03:72:54:66:db:f8:68:6c:
                    e4:d7:84:a6:85:b3:2f:b4:d4:98:49:69:bf:39:b7:
                    a9:73:e0:cf:05:99:15:dd:8a:41:f1:45:38:cd:af:
                    4c:14:45:f7:a6:a8:18:ed:31:fa:f3:0e:70:41:5c:
                    2e:83:4c:fd:83:c6:4b:90:2e:eb:91:69:f7:db:80:
                    bd:3b:1f:5c:62:00:c0:a0:55:84:70:d0:35:ae:9a:
                    6f:b8:8f:29:ec:eb:4a:35:bf:a1:b2:d9:da:36:fb:
                    d6:c9:e7:dd:ac:a1:e2:e5:3e:1b:f0:fe:30:39:28:
                    5d:31:f7:58:20:45:29:29:c9:d0:39:af:12:f6:60:
                    57:3a:33:93:88:ec:ff:81:56:4b:08:4b:f1:02:86:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:71:93:63:28:D7:66:2E:25:A5:0B:DA:2B:F9:B6:83:B5:3D:AB:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5196fc80-e236-3063-93b6-611395e8e648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:3d:63:9e:08:3a:02:ef:98:40:3b:86:f2:70:c7:0b:00:06:
         b8:c4:7e:85:24:a2:a9:22:ac:5c:23:8e:6f:d1:98:a5:67:4f:
         3b:9f:b3:28:4a:67:a2:fc:b2:84:dd:e8:37:73:27:9d:98:30:
         e2:4b:7a:26:9d:aa:57:00:67:80:b5:5f:35:4b:8f:cf:3c:a2:
         af:46:fd:dd:80:00:57:73:75:82:16:c2:b8:60:c2:78:dc:c4:
         91:60:70:69:0a:52:c9:d6:a4:35:63:29:45:b9:f3:54:cc:85:
         7f:0f:8a:f0:f3:6a:ca:d1:d3:f9:73:58:68:f9:66:f1:e7:6f:
         2b:dd:23:2c:e7:86:56:6f:6f:83:c1:c9:5d:32:f8:0a:75:e8:
         91:f8:aa:f0:ec:68:ff:30:39:a7:13:ea:28:5c:f5:a4:ef:b6:
         a1:1f:db:99:ac:eb:0d:1e:54:8a:64:d4:f7:7d:6e:fa:0a:e6:
         7d:bf:c9:cb:97:e3:99:24:be:94:d5:ce:8e:a2:72:f8:62:1e:
         c1:33:a7:85:7a:81:b6:b9:b7:e6:68:a7:e6:be:ed:27:c8:cb:
         76:d8:f8:14:b5:70:a5:c4:80:0a:e1:88:f7:da:d5:6f:12:a9:
         db:f3:73:5d:c7:57:97:9b:87:95:ba:9f:8a:32:5c:55:fd:c7:
         c6:f8:cc:99
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEd5HPo7lGs047iY62AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAwODEyMzEwOVoXDTI1MDEwNjEzMzEwOVowLzEtMCsGA1UEAxMk
YzNhOTdiNTMtMTk0YS00ZGY5LWI2ZTUtNzdkMTc5Y2M5MDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQw6RK9tI+n743rb49NOBrEFSkxMWRZyqJQL
KqUdayWl/pXWp0pCGGtqcsoiyzbCXY6phAJpaBy7BwyjKp4UHloJK+fNFDdYJQts
1tk0RlkrETW3FLJjpag2BWVrZo1i49shtHWRzXRs9r3UoM6AA3JUZtv4aGzk14Sm
hbMvtNSYSWm/Obepc+DPBZkV3YpB8UU4za9MFEX3pqgY7TH68w5wQVwug0z9g8ZL
kC7rkWn324C9Ox9cYgDAoFWEcNA1rppvuI8p7OtKNb+hstnaNvvWyefdrKHi5T4b
8P4wOShdMfdYIEUpKcnQOa8S9mBXOjOTiOz/gVZLCEvxAoY1ZQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOFxk2Mo12YuJaUL2iv5toO1PataMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTE5NmZjODAtZTIzNi0z
MDYzLTkzYjYtNjExMzk1ZThlNjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBfPWOeCDoC75hAO4bycMcLAAa4xH6FJKKpIqxc
I45v0ZilZ087n7MoSmei/LKE3eg3cyedmDDiS3omnapXAGeAtV81S4/PPKKvRv3d
gABXc3WCFsK4YMJ43MSRYHBpClLJ1qQ1YylFufNUzIV/D4rw82rK0dP5c1ho+Wbx
528r3SMs54ZWb2+DwcldMvgKdeiR+Krw7Gj/MDmnE+ooXPWk77ahH9uZrOsNHlSK
ZNT3fW76CuZ9v8nLl+OZJL6U1c6OonL4Yh7BM6eFeoG2ubfmaKfmvu0nyMt22PgU
tXClxIAK4Yj32tVvEqnb83Ndx1eXm4eVup+KMlxV/cfG+MyZ
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:03 2024 by rpki-client on console-ams.rpki-client.org