Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60bc3aea-dbda-32e3-a1e7-c1fdc6a577e6.roa
File:                     60bc3aea-dbda-32e3-a1e7-c1fdc6a577e6.roa (raw, json)
Hash identifier:          sFRYhjtG4ZuHm9SSztqgagB7fPP1b19Pyeyt7eyufTQ=
Subject key identifier:   BF:37:B5:3C:EC:58:F1:3C:83:A8:92:1A:6B:CB:DF:FB:DA:0A:D9:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858477396554664583458E775ADA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60bc3aea-dbda-32e3-a1e7-c1fdc6a577e6.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     396582
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:55:46:64:58:34:58:e7:75:ad:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=93dfa58d-35ef-4db4-9fc7-7953f1a865e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:5e:f5:2c:47:32:e6:64:82:13:db:a7:b7:
                    61:b3:41:ec:c7:46:87:fb:71:0f:ed:77:5b:b9:3a:
                    df:5a:c0:7b:ef:47:b3:4c:f0:ed:f6:a3:4f:b8:40:
                    49:a1:58:04:c2:0c:90:57:d5:1d:ad:08:5a:f1:72:
                    53:2f:1b:75:75:cb:88:bf:97:c3:41:c4:93:e1:cd:
                    a8:35:40:a4:e7:cd:b4:86:0c:81:94:ef:9e:f1:4b:
                    6a:3c:77:9f:44:9c:78:8b:7f:85:68:31:ff:6f:fe:
                    bd:5f:4f:9e:ac:4a:d0:27:4b:6d:c2:fa:12:67:c6:
                    96:ef:ff:c0:30:82:d1:6e:5c:4c:87:2c:85:14:33:
                    f3:e7:99:4c:7f:b2:53:fb:ec:87:5d:f9:82:a0:18:
                    8c:df:f0:20:d6:16:bf:38:ef:f2:83:ae:9c:cb:70:
                    9a:5a:d5:f5:7e:04:23:65:e9:7b:7c:8d:c3:bc:8a:
                    fa:6a:62:94:ce:c3:bf:20:85:ad:6b:e0:6f:8c:ef:
                    c5:62:b2:42:0b:55:24:17:c5:ff:94:a8:72:28:e6:
                    65:b5:91:9a:1b:69:38:78:21:ab:63:6c:86:db:38:
                    e5:69:3e:96:10:45:a6:d0:19:2c:e1:7f:3f:d0:c4:
                    22:3d:27:ff:bf:19:78:60:3c:3a:25:82:b5:5e:86:
                    9f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:37:B5:3C:EC:58:F1:3C:83:A8:92:1A:6B:CB:DF:FB:DA:0A:D9:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60bc3aea-dbda-32e3-a1e7-c1fdc6a577e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:5e:fd:5f:5d:8d:bb:64:42:31:ed:69:53:79:f5:38:27:d9:
         c2:b0:70:af:59:11:d3:ac:81:1e:24:f6:e3:f9:03:0c:34:45:
         6e:8a:c3:65:be:3d:e1:2d:26:fa:b6:d4:f5:d6:31:42:ee:92:
         f4:49:78:86:33:37:76:65:59:c4:66:b8:74:be:c6:71:6f:c0:
         9c:72:4c:3f:15:6c:a7:05:d1:95:6c:7c:fb:9d:d0:40:f7:f5:
         4c:e9:14:d8:30:c5:62:62:d4:eb:1a:f6:31:50:15:c7:df:d3:
         f6:2e:df:18:32:7b:7c:e4:30:bb:3b:bc:42:2f:9a:45:ed:a0:
         d5:21:c1:2a:17:df:b4:d6:f0:9c:27:6c:34:86:85:26:a5:be:
         f3:c8:fe:33:e2:2b:26:79:c6:bd:80:24:f0:0a:5f:b0:ba:44:
         b1:60:77:15:fc:2b:5f:59:c4:2b:bd:46:86:5a:a7:f0:d8:7c:
         c2:d5:b9:ae:7c:e4:a4:7d:7d:fa:4b:8b:99:d2:d5:ce:36:ed:
         cb:23:5e:d8:58:c9:a8:8b:06:09:85:1a:d3:59:6f:b7:43:ba:
         8c:45:b0:bb:43:2c:72:89:28:44:d2:45:35:ac:b5:3f:be:b4:
         75:5b:f8:a6:86:fb:94:3f:55:33:d5:7c:74:8f:16:5b:9c:ed:
         e2:f1:34:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:04 2024 by rpki-client on console-ams.rpki-client.org