Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63b71617-8d08-3e6c-abc6-cc52d2db673c.roa
File:                     63b71617-8d08-3e6c-abc6-cc52d2db673c.roa (raw, json)
Hash identifier:          XP5uuJ6qEeETE4Ld0a+pWAh588q08X3O0fLwjettAUg=
Subject key identifier:   76:C6:E4:6B:11:B1:5D:B8:A5:70:E9:30:10:C4:8D:67:CB:1F:98:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847BC2C1C7F05A06BE707CE46D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63b71617-8d08-3e6c-abc6-cc52d2db673c.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     396568
IP address blocks:        2001:500:30ff::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:1c:7f:05:a0:6b:e7:07:ce:46:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=b4b774d7-8ef9-453a-85f6-dafe2ffc19f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:73:69:1a:a9:de:7f:e2:51:00:8d:70:07:07:
                    e7:69:3f:7d:cf:c2:8b:c9:87:88:1c:cf:10:87:a2:
                    df:bb:a5:03:7f:f8:cc:a3:18:b4:8b:89:cb:bd:fe:
                    93:e4:2b:45:15:05:2c:6a:43:cb:83:64:a3:9b:91:
                    c7:5d:ff:65:44:7d:5c:36:cf:02:96:3d:b0:a8:17:
                    af:1d:75:2a:57:95:db:16:07:a5:16:aa:91:03:b9:
                    3c:46:20:67:4d:22:9a:77:37:53:9f:4b:79:8d:12:
                    88:a7:84:1e:e4:13:b5:82:60:24:be:d0:e7:e5:3f:
                    10:5a:8d:13:2b:8d:e4:fc:8f:34:cf:3c:bf:d4:42:
                    a7:84:16:07:15:0d:84:cb:09:20:d6:55:c8:32:4d:
                    fb:71:be:b0:61:0e:63:32:62:de:ab:ca:10:29:f7:
                    94:c5:2e:88:95:f3:13:46:e1:78:69:27:37:55:e1:
                    ec:63:28:38:fb:45:1c:f2:19:54:c2:02:6d:06:c4:
                    89:76:ed:94:6f:03:5c:39:be:7c:18:a9:a8:a6:2a:
                    0b:bc:a1:34:26:3b:07:ef:cc:11:39:6e:df:05:c7:
                    bc:2d:80:06:3a:18:fd:e0:26:43:e5:88:91:1f:f5:
                    19:5d:6a:02:06:20:d6:ec:d5:38:1f:f4:df:92:96:
                    9a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C6:E4:6B:11:B1:5D:B8:A5:70:E9:30:10:C4:8D:67:CB:1F:98:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63b71617-8d08-3e6c-abc6-cc52d2db673c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:96:b2:ff:b8:57:d5:a0:68:0c:05:ab:d9:b2:26:60:82:c1:
         85:cf:84:22:70:1d:35:12:7a:7b:bc:87:b0:ac:50:3a:1b:e1:
         31:34:b6:41:21:5e:43:0c:ee:9e:22:e6:eb:9f:8b:e4:bb:a7:
         d4:33:ed:ad:12:95:c6:f0:45:0f:52:12:52:f8:a5:f0:d6:e3:
         14:78:bf:ec:4c:81:77:94:3d:04:03:3c:cc:e4:be:52:7d:0e:
         4c:94:c1:d2:31:78:eb:cc:5e:2d:d8:c7:59:b3:fa:8a:7a:cb:
         95:cc:3b:91:05:51:cf:4c:31:c3:37:6e:db:86:6d:de:06:ff:
         03:6b:b3:88:b6:11:60:e8:da:bf:36:56:56:71:40:a4:68:e7:
         40:2a:d0:5e:1b:75:80:34:99:ab:10:4e:d8:6e:c7:8e:5d:60:
         0a:6c:65:7f:e6:6d:f2:6b:53:c6:e1:9a:01:f7:83:b8:a3:5e:
         53:9e:9e:11:b2:5a:3a:e3:1a:7d:ee:af:29:12:23:cc:64:bd:
         c0:67:57:01:e9:3c:03:78:ea:e0:ad:41:f9:2a:e5:1d:f3:4a:
         81:68:29:5f:b1:a1:78:03:22:68:85:14:0f:21:69:1d:d0:d4:
         d9:ce:aa:8e:9a:8e:b7:01:4b:d5:25:cb:f4:2d:9f:74:e5:37:
         49:f3:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:05 2024 by rpki-client on console-ams.rpki-client.org