Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78fe7d13-2ec5-375a-a98d-24283ac30752.roa
File:                     78fe7d13-2ec5-375a-a98d-24283ac30752.roa (raw, json)
Hash identifier:          Wdq/OQG9l9P6BHSyS4D9xjaxjChtycYAbjaF0up+5Vo=
Subject key identifier:   06:B8:3E:51:52:9E:2D:2B:E4:2B:49:01:AE:AF:E0:6E:B8:B1:BE:1C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847BC2C1B51A1BD88706B932640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78fe7d13-2ec5-375a-a98d-24283ac30752.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     396563
IP address blocks:        2001:500:30ff::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:1b:51:a1:bd:88:70:6b:93:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=64f16ff8-2073-4fc7-809e-2370ad7ff85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:38:f2:c8:e4:33:18:e0:65:23:41:bf:40:6d:
                    df:15:67:ef:3e:88:75:89:e5:d3:fb:05:dd:d0:83:
                    4f:a8:83:99:2f:76:57:2f:f0:ff:96:a6:dd:94:83:
                    28:7f:28:8c:75:65:2e:46:22:e1:95:13:2b:7d:0c:
                    c5:8f:7e:61:a7:53:86:e4:a3:bb:78:ff:24:b6:f5:
                    e0:da:b4:28:d4:03:62:3a:4c:20:47:eb:da:64:c3:
                    09:c8:af:d2:92:39:ad:1a:fe:e2:5d:fc:5a:31:13:
                    a3:d7:3c:50:e8:64:36:9c:cd:c5:4c:98:be:bb:31:
                    b7:19:00:2f:6a:9f:1b:6a:ca:8f:0e:2b:7e:63:ec:
                    52:11:cc:e4:3d:99:f6:02:fe:ec:ec:3f:76:8e:3b:
                    ff:fd:cf:f0:50:6c:36:56:ff:5e:30:4b:da:16:cc:
                    da:71:b5:14:2b:84:57:e3:49:31:78:e0:cb:22:0a:
                    c0:29:2a:29:5e:c3:4e:85:c4:43:a8:92:5b:b9:72:
                    9a:98:b9:8e:f8:e7:3d:e3:e4:52:8c:51:33:5e:48:
                    9b:5d:fb:db:7a:1e:a9:c6:84:ef:8a:2d:01:da:42:
                    b5:17:02:6c:23:3a:e7:47:1b:cd:8c:32:55:e1:d1:
                    71:8b:d5:d6:76:37:3a:bb:74:82:0b:82:41:62:b5:
                    7c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B8:3E:51:52:9E:2D:2B:E4:2B:49:01:AE:AF:E0:6E:B8:B1:BE:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78fe7d13-2ec5-375a-a98d-24283ac30752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:3e:11:78:71:a4:52:d9:fb:95:df:d5:aa:7b:3c:a7:f8:0c:
         23:28:69:11:0a:f4:11:54:e4:f1:71:c0:74:69:d0:2e:c9:22:
         13:e1:66:65:ff:b9:b1:2f:61:e6:f5:22:8c:13:f5:1b:7a:1c:
         28:ac:54:43:ec:57:f6:48:8f:fa:30:04:15:03:1a:13:07:b8:
         29:97:db:a7:7b:9f:7d:4b:41:57:e3:44:61:fe:c0:26:d7:cb:
         b4:cc:d6:d9:8d:e0:13:e1:42:8d:fd:85:5f:3c:39:19:8e:fa:
         87:9f:7c:fe:72:c3:f1:e1:14:68:6a:9d:07:fd:b9:db:da:3d:
         e4:3f:64:71:d9:04:d9:6f:5f:59:ae:aa:70:bf:52:04:d4:ec:
         71:ed:2b:c5:3a:5b:7b:ed:c3:13:4b:e9:73:24:80:ca:94:32:
         53:85:b5:8f:fe:c3:26:27:2b:20:73:f2:e0:75:02:b2:fe:45:
         91:c1:4c:c5:b3:42:b6:98:73:63:45:1f:2c:9d:e0:95:18:12:
         42:5c:7e:86:77:83:e8:33:55:f1:39:55:a2:b9:4f:a5:15:6e:
         b6:ae:d6:10:cf:38:3d:ac:a9:3c:93:4a:f1:45:d6:bf:09:c1:
         32:da:42:ae:37:0d:2f:db:5f:c8:8d:3c:22:5d:e5:aa:82:f4:
         12:ea:b8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:33 2024 by rpki-client on console-fra.rpki-client.org