Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71d96a1f-69eb-3906-93f5-68f54e2949ba.roa
File:                     71d96a1f-69eb-3906-93f5-68f54e2949ba.roa (raw, json)
Hash identifier:          Lf+POioL+TbNn72+2555BSmgyrJ0UMlDlpeR/No/hv4=
Subject key identifier:   A3:0C:D7:A5:D8:C2:2E:69:B3:4A:7F:F6:C8:5B:F8:12:8F:97:92:6E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476B2966060ADE5AE88CD87BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71d96a1f-69eb-3906-93f5-68f54e2949ba.roa
Signing time:             Thu 03 Oct 2024 12:34:51 +0000
ROA not before:           Thu 03 Oct 2024 12:34:51 +0000
ROA not after:            Wed 01 Jan 2025 13:34:51 +0000
asID:                     396603
IP address blocks:        2001:500:121::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:29:66:06:0a:de:5a:e8:8c:d8:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 12:34:51 2024 GMT
            Not After : Jan  1 13:34:51 2025 GMT
        Subject: CN=4a3c217e-d32c-469d-b3ac-4bab230b9da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bf:d5:63:50:b6:b4:b7:da:0c:f3:ed:3e:0f:
                    c9:34:be:b6:71:6b:6d:77:83:53:f3:73:84:ea:d4:
                    a0:ec:b9:d0:01:6c:1a:73:59:6d:59:ce:17:4b:f4:
                    bd:2b:d5:7c:48:ef:d2:13:41:a6:69:d5:eb:b6:18:
                    0c:7b:1e:0e:4f:03:6e:1a:ed:48:b7:d8:68:27:45:
                    da:f5:00:6d:31:ba:3b:53:44:e2:86:2c:98:89:25:
                    e5:4f:a6:32:8d:75:bd:3a:be:68:dc:3d:c7:fd:72:
                    1b:4a:60:de:86:6f:55:1d:4b:71:8f:b1:54:60:14:
                    d9:81:7a:df:5b:a0:49:02:68:c1:1f:91:8e:1c:7e:
                    f7:bc:70:19:8f:f4:1c:02:8e:94:f9:89:73:aa:02:
                    38:ce:f8:68:27:5e:34:37:68:11:07:33:40:25:d7:
                    39:ee:f9:d8:8e:37:65:aa:d9:89:b9:b7:0d:c4:c4:
                    8d:69:97:63:b6:f9:a3:31:f8:b0:65:94:f7:33:5f:
                    c9:e9:6e:69:8c:73:4b:0c:93:f7:0f:92:a8:ae:27:
                    ae:2c:1d:d4:5b:83:6a:c9:3c:9f:b0:7c:a8:24:19:
                    53:a7:d3:5d:85:e7:c8:98:aa:3b:39:ec:04:73:4b:
                    ff:fe:03:d3:d9:69:63:8e:3c:1a:fa:26:ec:ae:bc:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0C:D7:A5:D8:C2:2E:69:B3:4A:7F:F6:C8:5B:F8:12:8F:97:92:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71d96a1f-69eb-3906-93f5-68f54e2949ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e6:5c:db:9a:37:4d:c8:2f:0a:e6:4f:a5:dc:55:be:0b:37:
         04:c3:9c:c1:9a:a9:0e:37:cd:ce:bc:2d:97:7c:ee:5c:51:2c:
         5b:12:f8:72:0b:b2:6a:c3:b8:0b:32:dd:9a:a2:8b:1b:fe:0c:
         da:11:44:c0:ef:40:f4:e7:e1:e0:03:03:ba:c8:4d:87:50:b2:
         df:44:17:1c:c9:4c:ac:f8:f6:eb:75:ba:ec:46:12:f1:81:ba:
         b3:81:fb:8d:49:1e:ca:2d:cb:dd:0f:70:5a:68:13:bb:c8:03:
         d7:2e:46:1a:08:bd:87:0f:37:8f:20:46:15:7f:78:4c:df:d3:
         0c:61:c3:8a:e0:5d:72:87:21:7a:bc:27:b9:cd:86:be:c0:b8:
         b4:0b:5b:16:75:2d:45:62:f8:8d:18:dc:98:a7:05:1e:e3:b1:
         7f:d7:d1:5e:0e:75:00:bb:e2:35:62:f4:9d:45:b3:a8:40:e3:
         f3:c6:ed:26:40:1a:ac:8d:2e:51:23:4a:b1:9b:df:bb:8b:c5:
         92:aa:bf:e8:74:03:a8:00:cd:14:85:8a:bc:81:7f:66:40:2c:
         7f:c1:56:72:4a:af:fb:b0:39:e2:e5:43:35:42:07:0d:38:b3:
         10:94:bf:35:51:18:41:52:6a:8a:9e:c4:94:23:b6:35:f3:75:
         58:06:9c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:33 2024 by rpki-client on console-fra.rpki-client.org