Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/679c30bc-6ac3-3f73-9439-bcb85bd1aa7c.roa
File:                     679c30bc-6ac3-3f73-9439-bcb85bd1aa7c.roa (raw, json)
Hash identifier:          mTs0bbHq+M2Tp1Mw2WGx/sfQGBP4MhANtsolu1RLkQg=
Subject key identifier:   49:29:46:BD:6F:81:56:88:4E:7B:FE:81:B4:AD:05:FD:B3:1E:41:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EEBE710C9F83F5DF1CA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/679c30bc-6ac3-3f73-9439-bcb85bd1aa7c.roa
Signing time:             Thu 26 Sep 2024 12:35:29 +0000
ROA not before:           Thu 26 Sep 2024 12:35:29 +0000
ROA not after:            Wed 25 Dec 2024 13:35:29 +0000
asID:                     397195
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:eb:e7:10:c9:f8:3f:5d:f1:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:29 2024 GMT
            Not After : Dec 25 13:35:29 2024 GMT
        Subject: CN=f9085c71-a159-4390-ba54-f9d4d190ddbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7b:25:c6:18:02:b6:bf:a5:b7:a0:fd:97:4a:
                    94:ed:77:82:88:b2:ab:e2:ac:75:55:21:8a:6b:ed:
                    bb:30:f4:ea:43:77:43:37:e7:24:fd:9d:a7:5c:c7:
                    0e:3e:70:57:e7:60:53:55:f1:bf:fc:0a:35:5d:b1:
                    cd:3c:93:a6:d2:a8:b1:49:4f:ce:af:f3:fa:0c:5d:
                    66:b8:f1:76:5a:b5:4e:7c:8e:05:9d:00:d6:81:ef:
                    76:40:03:e5:14:c3:db:ae:0e:00:f1:91:92:8b:20:
                    8e:cf:54:2d:1e:69:3e:16:aa:94:76:33:f1:0f:d6:
                    63:16:db:40:36:de:bb:d5:dd:56:2a:89:d7:df:7f:
                    a9:eb:c8:5b:3e:cc:50:8c:fb:96:37:49:89:41:0e:
                    15:12:b5:41:1a:8b:d2:cc:55:52:e3:9d:42:cb:13:
                    f3:70:c0:6a:0c:62:2b:79:0d:a2:73:8a:1b:2b:22:
                    90:71:1e:c2:f8:af:69:f6:fc:54:61:fe:d5:f6:cb:
                    92:69:03:88:33:aa:a2:9b:35:13:f9:b1:75:0f:44:
                    f4:f1:29:13:e5:70:80:88:f3:c1:ac:b3:c1:4d:e0:
                    c1:6c:20:22:f8:42:75:45:b1:d7:65:09:35:0f:4d:
                    d6:5c:1d:91:d8:0f:7b:5c:29:94:ee:c7:94:f8:10:
                    1c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:29:46:BD:6F:81:56:88:4E:7B:FE:81:B4:AD:05:FD:B3:1E:41:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/679c30bc-6ac3-3f73-9439-bcb85bd1aa7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:4f:6d:b5:13:af:13:9c:91:4b:59:06:80:ab:39:f1:04:22:
         fd:a9:f9:ec:05:63:7e:9a:61:f2:3d:6a:71:39:8b:0c:e8:7d:
         d8:52:8b:8d:67:94:60:c7:7b:e7:5f:22:e0:49:b2:7b:ed:c5:
         77:27:1d:48:1d:15:32:d5:ae:4f:72:bf:b5:a7:35:0b:ac:7d:
         d7:19:5a:69:dc:0a:7c:b8:db:58:0f:70:99:e8:74:2b:48:8a:
         d5:e0:fb:27:09:c9:8e:bc:26:33:c3:63:6b:c4:fe:8c:fb:aa:
         b1:04:bc:da:bc:55:00:84:cc:17:bc:77:50:a2:da:3c:dc:c4:
         09:c9:97:80:16:ce:8d:66:ab:af:1e:b8:aa:5c:17:71:26:46:
         20:25:fd:52:25:5b:8a:43:65:40:fb:f5:e1:78:b4:d5:a1:cb:
         76:57:f4:6a:ce:7e:fa:b2:42:24:0c:12:ec:26:4c:a6:42:02:
         38:cf:7c:48:17:c2:7e:cc:f3:a8:12:16:21:c2:35:7f:74:5a:
         39:6b:3b:9d:6e:98:8c:e5:2f:fe:86:2b:3e:9b:6a:13:90:1d:
         d4:2e:7e:f2:19:5d:a5:d7:02:fa:b4:c5:43:ad:33:3d:b7:17:
         cd:93:e1:80:23:3b:27:d6:a4:98:29:0a:30:48:1d:42:15:47:
         f9:e6:28:ec
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdXnuvnEMn4P13xyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MDkyNjEyMzUyOVoXDTI0MTIyNTEzMzUyOVowLzEtMCsGA1UEAxMk
ZjkwODVjNzEtYTE1OS00MzkwLWJhNTQtZjlkNGQxOTBkZGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nslxhgCtr+lt6D9l0qU7XeCiLKr4qx1VSGK
a+27MPTqQ3dDN+ck/Z2nXMcOPnBX52BTVfG//Ao1XbHNPJOm0qixSU/Or/P6DF1m
uPF2WrVOfI4FnQDWge92QAPlFMPbrg4A8ZGSiyCOz1QtHmk+FqqUdjPxD9ZjFttA
Nt671d1WKonX33+p68hbPsxQjPuWN0mJQQ4VErVBGovSzFVS451CyxPzcMBqDGIr
eQ2ic4obKyKQcR7C+K9p9vxUYf7V9suSaQOIM6qimzUT+bF1D0T08SkT5XCAiPPB
rLPBTeDBbCAi+EJ1RbHXZQk1D03WXB2R2A97XCmU7seU+BAcDwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEkpRr1vgVaITnv+gbStBf2zHkH9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjc5YzMwYmMtNmFjMy0z
ZjczLTk0MzktYmNiODViZDFhYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBRT221E68TnJFLWQaAqznxBCL9qfnsBWN+mmHy
PWpxOYsM6H3YUouNZ5Rgx3vnXyLgSbJ77cV3Jx1IHRUy1a5Pcr+1pzULrH3XGVpp
3Ap8uNtYD3CZ6HQrSIrV4PsnCcmOvCYzw2NrxP6M+6qxBLzavFUAhMwXvHdQoto8
3MQJyZeAFs6NZquvHriqXBdxJkYgJf1SJVuKQ2VA+/XheLTVoct2V/Rqzn76skIk
DBLsJkymQgI4z3xIF8J+zPOoEhYhwjV/dFo5azudbpiM5S/+his+m2oTkB3ULn7y
GV2l1wL6tMVDrTM9txfNk+GAIzsn1qSYKQowSB1CFUf55ijs
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:05 2024 by rpki-client on console-ams.rpki-client.org