Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6852d37c-1d4e-3070-a32b-be3738090774.roa
File:                     6852d37c-1d4e-3070-a32b-be3738090774.roa (raw, json)
Hash identifier:          QfXoQqlpF4YDP6+7BY4YaDSWke1lVEVwQDJmoJE8BGs=
Subject key identifier:   23:46:1D:03:87:B8:9D:89:C8:5D:49:0E:2A:44:65:B2:75:B2:3E:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847818BB550ACA9F684023EFD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6852d37c-1d4e-3070-a32b-be3738090774.roa
Signing time:             Fri 11 Oct 2024 13:00:41 +0000
ROA not before:           Fri 11 Oct 2024 13:00:41 +0000
ROA not after:            Thu 09 Jan 2025 14:00:41 +0000
asID:                     396604
IP address blocks:        2001:501:8a29::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:81:8b:b5:50:ac:a9:f6:84:02:3e:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 11 13:00:41 2024 GMT
            Not After : Jan  9 14:00:41 2025 GMT
        Subject: CN=3c13c7f0-7eec-4801-9e45-2bbda656a5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:80:6e:c1:a4:38:59:f0:d4:46:03:4a:68:39:
                    7c:fd:5a:6c:e4:68:56:e1:88:fd:67:4b:3e:4f:12:
                    79:ba:f1:ff:8e:7b:95:51:4b:08:f0:84:5c:07:a2:
                    06:8f:4f:6a:98:c7:f0:c1:ef:ac:12:49:e9:56:67:
                    35:62:16:79:5b:bc:5d:27:c5:08:83:45:02:66:40:
                    ed:d5:75:5b:6f:7a:53:66:03:ee:4a:b5:53:f4:a6:
                    40:e3:2f:dd:ad:be:13:03:66:6f:f9:71:8b:f3:cd:
                    ee:8e:e8:6a:5a:93:cd:15:4e:cc:ad:bf:39:e0:4d:
                    68:cb:12:63:c6:36:1e:12:a0:fd:57:ec:f6:78:6f:
                    dc:a7:f2:05:07:30:e0:13:65:29:7c:fd:b3:b1:a5:
                    6a:83:78:47:00:57:02:fd:f7:12:01:0a:a1:f8:e3:
                    4d:bb:45:ca:14:81:25:08:2e:8b:57:3a:bb:4a:fb:
                    d3:40:ef:97:fd:cf:9d:96:9f:ee:db:45:03:2a:87:
                    cc:b9:a5:58:ac:16:7b:cc:bf:19:69:f5:44:9b:57:
                    42:66:4a:68:f4:fb:05:d2:94:04:28:23:7e:95:7a:
                    54:f2:e5:e4:38:e7:32:61:57:c4:d4:30:29:1c:80:
                    0f:d2:65:0a:dd:a1:e6:ab:58:03:f2:68:e2:be:4c:
                    4a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:46:1D:03:87:B8:9D:89:C8:5D:49:0E:2A:44:65:B2:75:B2:3E:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6852d37c-1d4e-3070-a32b-be3738090774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e5:fb:33:cb:6f:8b:5b:74:c8:3c:39:74:b7:b3:b6:32:26:
         10:95:87:0b:5d:df:43:18:58:8b:84:9f:b2:b4:d0:f6:6f:3f:
         db:10:24:95:56:14:bd:f2:f1:88:f7:ad:c4:20:53:9c:dc:aa:
         12:17:3e:4c:45:2a:ca:f2:73:95:82:46:6c:3b:d7:24:06:45:
         77:fd:5c:9e:e4:25:0c:4e:19:be:19:10:01:7c:98:ee:aa:26:
         04:46:8b:8e:e0:e3:ac:28:b4:8a:57:35:67:f9:59:a4:58:ff:
         3a:58:ee:a8:da:05:81:17:8b:af:57:15:14:6e:d8:51:6d:06:
         40:31:be:2e:3a:99:b6:3e:a4:79:96:cf:aa:67:de:08:4b:44:
         ee:99:63:7d:4e:f1:43:4e:96:eb:45:8c:75:f6:57:c9:bc:05:
         a0:cc:26:3d:b2:93:93:ed:be:ba:63:ac:1c:22:75:bb:3e:fb:
         51:68:d6:0c:bb:02:f4:c4:0e:8b:98:0b:fd:6e:91:32:f6:6c:
         b3:fb:12:19:05:fd:64:0a:72:90:e0:d2:77:7e:d0:2d:79:cf:
         de:d7:a9:26:3e:19:71:51:64:0b:39:72:fb:10:44:f2:f3:03:
         42:c3:cd:09:24:fe:f8:05:c4:1c:98:ab:ee:fa:32:ca:38:3d:
         a1:b9:7f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:32 2024 by rpki-client on console-fra.rpki-client.org