Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61406968-3e4e-3f14-9cf0-285ba0998010.roa
File:                     61406968-3e4e-3f14-9cf0-285ba0998010.roa (raw, json)
Hash identifier:          fsQB+4xZja4Pa3EWluu9j1dAAR/O89JD+M8t2bM/JJY=
Subject key identifier:   5F:3F:BB:9D:7E:B6:83:2F:9D:0D:19:1F:1F:61:61:5D:3B:B4:85:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847818BB654538ADB09107AD140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61406968-3e4e-3f14-9cf0-285ba0998010.roa
Signing time:             Fri 11 Oct 2024 13:00:41 +0000
ROA not before:           Fri 11 Oct 2024 13:00:41 +0000
ROA not after:            Thu 09 Jan 2025 14:00:41 +0000
asID:                     396566
IP address blocks:        2001:501:8a29::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:81:8b:b6:54:53:8a:db:09:10:7a:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 11 13:00:41 2024 GMT
            Not After : Jan  9 14:00:41 2025 GMT
        Subject: CN=7ed9677e-78ac-4f5b-b8a7-be1f7f66a491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:36:58:ca:b6:a9:fb:dd:47:d9:b9:34:aa:
                    05:bd:fd:78:c6:40:0c:2e:72:f3:62:dd:41:ce:b2:
                    3d:bd:1b:5b:13:7c:b1:7a:3a:54:39:5b:c2:48:fb:
                    6e:4b:76:3c:4c:f9:70:b5:43:2b:b1:c5:93:46:44:
                    40:7f:e6:ec:dd:8c:97:de:c1:43:f7:14:3c:06:f8:
                    84:15:9f:3b:7c:c4:26:01:40:85:b4:5a:9f:18:ff:
                    de:c9:b7:31:d2:19:c5:da:65:b1:11:a3:2b:34:4a:
                    9b:fa:de:da:f2:4b:90:3a:60:09:26:75:11:b0:c1:
                    0d:b2:17:be:e5:b5:91:3c:32:b9:bf:40:4b:0f:ab:
                    29:96:7b:fa:01:b2:82:e1:04:18:21:2f:ec:82:27:
                    69:1e:a2:05:f7:22:00:f3:59:a6:56:3b:02:08:9c:
                    15:6c:8e:a9:bf:39:40:50:b2:c5:f7:0c:0f:95:af:
                    29:42:eb:f0:73:42:ce:23:2d:e2:c3:1c:a5:02:2b:
                    44:b4:b4:07:84:6c:dd:dc:4f:77:78:14:ed:a9:66:
                    f4:e6:1f:32:d7:b9:fa:98:45:08:7d:e7:3d:a6:55:
                    15:32:1d:3e:5a:cc:83:88:48:ba:15:05:b3:e7:e2:
                    0f:f4:f4:b6:58:ac:1d:94:b0:00:c5:db:72:2c:ab:
                    77:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3F:BB:9D:7E:B6:83:2F:9D:0D:19:1F:1F:61:61:5D:3B:B4:85:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61406968-3e4e-3f14-9cf0-285ba0998010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d8:cf:a4:57:d2:90:74:85:a9:f2:3e:0e:da:58:4f:b2:70:
         61:64:11:33:65:ae:e5:cd:28:ef:0b:2f:ea:ba:46:82:97:b1:
         59:77:1b:e5:1b:09:0c:e2:cc:36:4e:6d:7b:c4:7e:ce:4a:17:
         c6:46:c0:79:a6:fc:4e:66:78:fd:5c:5a:98:84:9c:87:14:ad:
         93:b1:b3:b9:70:b4:2f:0c:16:c0:94:4d:69:06:bc:05:d6:2f:
         f5:5c:fb:ef:b8:28:e5:98:83:5b:4d:29:57:df:e0:21:0a:d0:
         21:91:c5:c8:0f:01:20:54:e4:88:f3:d6:07:35:8d:d8:e1:b8:
         41:08:00:f4:ee:75:7c:7c:41:28:ee:75:d8:89:51:aa:28:cd:
         35:59:db:32:ca:fb:93:8a:34:df:9b:55:8c:9a:20:15:c1:cb:
         31:c4:03:3f:95:8d:91:3e:7a:95:24:c9:1f:1a:60:7c:43:00:
         a4:3e:71:ee:c2:9b:aa:a5:4b:e3:5e:7e:a4:ec:77:bb:0f:60:
         96:27:62:0e:96:36:6f:09:42:ca:7e:6d:35:11:a3:06:5e:cf:
         a4:93:2f:a2:41:8a:89:44:ed:d5:8a:66:76:f5:42:97:cd:62:
         a2:dc:a4:19:19:7b:c3:91:24:25:4e:42:de:e8:2e:ff:55:4c:
         fe:b0:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:31 2024 by rpki-client on console-fra.rpki-client.org