Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/794402ff-c267-3b21-9bf2-743d92e48b2e.roa
File:                     794402ff-c267-3b21-9bf2-743d92e48b2e.roa (raw, json)
Hash identifier:          6PXlyoCkDuqqf1NZtyU/YmYdwrkmMlqSaInVSDTA5eQ=
Subject key identifier:   F7:CD:DA:FE:55:33:33:CE:30:D0:A9:EA:EA:76:6C:78:51:9D:E5:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847818BB71F1543C7C6D10DF340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/794402ff-c267-3b21-9bf2-743d92e48b2e.roa
Signing time:             Fri 11 Oct 2024 13:00:41 +0000
ROA not before:           Fri 11 Oct 2024 13:00:41 +0000
ROA not after:            Thu 09 Jan 2025 14:00:41 +0000
asID:                     396550
IP address blocks:        2001:501:8a29::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:81:8b:b7:1f:15:43:c7:c6:d1:0d:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 11 13:00:41 2024 GMT
            Not After : Jan  9 14:00:41 2025 GMT
        Subject: CN=96892dab-4ef4-4d9c-a8f4-087fcd7a0f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:29:89:a6:e9:84:94:9c:5d:99:d8:f4:c1:be:
                    d2:c1:52:ce:8c:f1:3c:29:f6:d5:c7:6b:4d:cd:57:
                    bc:3e:e1:2d:28:82:6d:f5:9c:80:05:dc:30:b9:ae:
                    27:76:24:48:77:99:a4:9c:f1:c6:d7:7b:58:68:99:
                    b1:e9:2a:e0:0c:d4:b8:29:af:06:f3:67:14:20:94:
                    f1:73:cf:3a:48:d7:6d:20:51:ed:c2:4e:d3:be:f8:
                    a4:6b:93:ea:a5:44:6f:f9:87:03:f3:40:05:d3:1e:
                    1f:a6:18:e5:97:96:60:7f:3e:81:2b:98:f0:70:ca:
                    d9:7f:68:90:f2:c5:e2:62:44:be:34:a6:e9:d0:65:
                    20:16:94:2d:93:25:c3:f0:35:7a:ea:71:a5:17:11:
                    0c:4d:ba:35:ba:ee:ed:3c:3c:a5:78:20:5b:86:01:
                    1c:a9:68:1f:e5:16:7f:43:a5:a1:07:54:be:83:38:
                    28:d2:c9:63:88:9d:5e:99:f2:52:21:63:c6:d1:a7:
                    c5:b0:30:20:4e:fa:22:d4:e7:58:54:5c:0f:c3:3c:
                    3f:f6:a7:39:63:3e:d8:8b:6f:79:1c:00:0d:ee:89:
                    8a:a5:1a:84:d9:97:b6:8a:4f:12:ed:6a:25:da:54:
                    ac:d6:bb:cf:f9:16:af:f5:a2:44:98:57:a1:70:cb:
                    0c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CD:DA:FE:55:33:33:CE:30:D0:A9:EA:EA:76:6C:78:51:9D:E5:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/794402ff-c267-3b21-9bf2-743d92e48b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:4d:17:54:75:ef:a3:a9:17:49:bd:1f:9e:2b:3b:ed:81:f9:
         e8:a4:a8:02:34:fa:ba:77:b4:00:c7:33:65:43:04:cc:78:55:
         7b:d4:37:b3:32:97:78:03:3e:e1:85:07:4e:d6:11:32:94:a2:
         d1:a3:96:00:95:cf:77:41:d6:62:5b:78:76:e5:fb:cb:7e:52:
         84:69:21:96:20:dd:bf:92:9a:bd:c7:b5:cb:6c:09:80:ac:48:
         c8:d6:4f:e4:92:a3:d8:80:46:2e:99:04:7d:b3:ff:fd:32:26:
         7d:5a:2a:7d:d2:4b:0f:52:7f:76:9a:7d:4c:fd:cb:a4:57:b4:
         fc:8f:c5:9d:ac:c4:e4:0c:c7:ff:14:1c:b2:24:5a:2c:8c:50:
         53:08:a3:28:6c:03:46:30:ec:eb:ed:85:b3:da:48:55:7c:88:
         14:6f:dc:5d:e0:e8:56:25:74:6c:a0:34:66:f2:89:51:31:83:
         4e:32:8b:65:a9:50:84:c3:47:9b:8e:98:fd:7f:17:81:0b:fc:
         5d:b3:6a:08:b8:33:a1:26:d0:cb:a4:e9:0d:26:dd:2e:9a:b3:
         c8:6e:b9:59:69:10:21:71:83:98:54:8b:dd:53:09:ce:a6:86:
         66:f1:a0:43:bb:14:6e:84:93:98:9e:8e:3c:ef:b9:40:a4:89:
         b1:1e:1d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:33 2024 by rpki-client on console-fra.rpki-client.org