Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67ccf85b-8c51-3f00-b35d-7c2b5dfede00.roa
File:                     67ccf85b-8c51-3f00-b35d-7c2b5dfede00.roa (raw, json)
Hash identifier:          bd/4x6mDlsVaCzm+HCMHLurSMn9FfF7r0cnb3kEcb70=
Subject key identifier:   AA:34:64:67:2B:8E:E4:82:76:2E:AB:57:00:82:56:41:AD:5B:2F:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EF10CEC6BFF45B82AF380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67ccf85b-8c51-3f00-b35d-7c2b5dfede00.roa
Signing time:             Thu 26 Sep 2024 12:35:31 +0000
ROA not before:           Thu 26 Sep 2024 12:35:31 +0000
ROA not after:            Wed 25 Dec 2024 13:35:31 +0000
asID:                     397206
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:f1:0c:ec:6b:ff:45:b8:2a:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:31 2024 GMT
            Not After : Dec 25 13:35:31 2024 GMT
        Subject: CN=d3d983d9-9137-488a-ad72-e49770495a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:40:3f:70:dd:64:de:53:9a:b8:4f:10:39:31:
                    13:ef:2b:82:b9:7d:62:ff:34:72:2e:00:b0:86:12:
                    46:00:f0:22:5a:3a:0c:ab:05:ca:5b:02:f9:ea:37:
                    56:18:f7:de:c5:5d:d4:34:31:9b:17:47:0c:2d:26:
                    fa:29:bc:46:f6:8c:5e:22:b8:40:50:f2:ea:8b:90:
                    01:ab:5e:ae:24:a7:dc:93:78:ec:b1:47:2b:0c:25:
                    00:e6:36:bb:bb:bd:41:42:44:86:25:69:3b:3b:bc:
                    0c:b0:47:c8:ac:50:53:b4:7d:8e:eb:bb:c8:4d:31:
                    2f:88:10:fd:5a:83:0e:2f:ab:83:c2:72:a5:02:a1:
                    d9:06:a9:1f:30:50:f9:b1:17:64:8e:09:30:11:d9:
                    a5:af:11:e3:0b:17:61:6b:8e:81:b6:d3:fa:eb:24:
                    0f:9a:ed:59:86:f1:6d:cb:1e:6f:8e:94:30:46:e2:
                    cc:1a:e3:ac:cc:97:e2:72:58:25:b7:3c:13:e1:17:
                    d9:e9:5a:ae:24:dd:c1:b2:47:cc:a8:1d:5e:4a:ce:
                    3d:7d:64:16:2c:9a:41:2d:0e:3c:26:ed:fe:28:27:
                    94:8c:48:53:29:ba:52:bb:48:68:f6:c7:78:91:6f:
                    ef:00:2a:a6:8d:f1:cc:72:cb:fd:fe:c8:9d:79:c3:
                    99:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:34:64:67:2B:8E:E4:82:76:2E:AB:57:00:82:56:41:AD:5B:2F:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67ccf85b-8c51-3f00-b35d-7c2b5dfede00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:1d:85:cf:7f:1e:21:4a:e3:f5:29:62:de:c8:62:d2:03:1d:
         93:37:29:1e:a4:5c:b7:46:08:03:aa:0b:47:9c:99:2d:9f:df:
         85:5c:5c:a9:6c:39:1b:cd:be:1e:40:20:58:fa:0d:d8:9a:13:
         56:c8:52:00:63:6c:1b:17:a6:05:f4:c5:c3:81:2e:44:34:0c:
         68:04:26:a0:56:72:67:55:54:2b:79:81:8e:d8:23:25:43:ec:
         81:65:68:30:9f:48:9c:9b:13:e2:91:bb:4d:46:5b:2d:a4:0c:
         fe:09:e4:aa:4e:06:ba:7b:b8:6a:fd:de:e0:0a:06:00:cf:91:
         57:a3:91:e5:03:90:10:23:d7:83:40:32:40:62:bd:0c:a0:8c:
         f4:d4:b5:50:a5:59:7b:b5:6e:7e:f1:fa:e0:aa:2e:a9:aa:ab:
         f1:5f:da:ec:0d:10:8e:2e:58:9e:60:43:67:83:91:10:62:1c:
         a1:13:36:7d:84:11:45:b2:66:2d:31:62:0a:64:22:12:fe:f0:
         f6:65:5c:15:fe:5f:25:bb:e5:a0:d8:20:0e:17:76:b0:19:fa:
         fa:bd:ca:18:d4:88:81:4f:af:a5:7b:de:ce:ed:60:37:c8:29:
         13:fe:ce:00:64:1c:5b:e1:b2:4f:b0:66:db:50:b0:36:b6:d6:
         0c:02:87:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:05 2024 by rpki-client on console-ams.rpki-client.org