Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8790ea3c-9ab9-308e-9354-f76a73e54f43.roa
File:                     8790ea3c-9ab9-308e-9354-f76a73e54f43.roa (raw, json)
Hash identifier:          UofMhljoXai4O4EXzmNA9wmtx8wSRrmehYmAf2pqCnI=
Subject key identifier:   73:31:2B:6B:93:89:8A:E6:7A:6D:9C:88:47:56:1B:21:41:FF:5B:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EEDB2BECFDAA17429C720
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8790ea3c-9ab9-308e-9354-f76a73e54f43.roa
Signing time:             Thu 26 Sep 2024 12:35:30 +0000
ROA not before:           Thu 26 Sep 2024 12:35:30 +0000
ROA not after:            Wed 25 Dec 2024 13:35:30 +0000
asID:                     396544
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:ed:b2:be:cf:da:a1:74:29:c7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:30 2024 GMT
            Not After : Dec 25 13:35:30 2024 GMT
        Subject: CN=dac46837-b9c1-48a3-bd49-a6c1d682fe93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:61:21:02:ad:f7:87:8c:cd:09:1d:f7:76:b2:
                    d8:d1:1c:19:75:0e:af:15:d6:ae:6d:22:31:10:78:
                    54:1e:85:79:7f:7b:da:9f:41:30:d3:ed:ef:98:7e:
                    21:79:e2:d4:f9:cf:6b:cf:67:e7:e5:a8:3e:60:91:
                    2e:04:d2:19:99:64:4f:20:1e:4c:bd:68:5e:1e:9e:
                    d8:93:80:5f:f0:ad:5d:4a:c8:82:6d:09:5f:a7:81:
                    28:b2:66:4c:b3:a2:d6:17:6c:fd:e3:58:a2:6f:97:
                    27:dd:a4:0d:68:3a:99:c6:ea:50:51:5d:cd:51:5f:
                    b0:ac:0b:de:9e:9c:da:b0:0b:49:cc:84:7c:39:26:
                    25:c9:1c:fb:c1:03:b6:f9:5a:5c:de:5e:b5:98:90:
                    7b:17:7d:b3:4c:5f:24:d2:65:8e:f9:97:14:38:b0:
                    14:6e:84:11:3a:b5:f8:d3:66:4f:d8:fc:8c:95:4b:
                    7f:96:90:61:49:74:7c:1d:e6:11:24:25:6e:94:16:
                    8b:95:6a:e2:12:2e:c4:a1:c1:2f:86:9a:c5:06:5e:
                    9d:74:51:d1:5f:17:81:ee:60:13:2a:6e:db:da:e3:
                    1d:c3:d9:b9:33:d0:bd:13:25:73:4a:f8:9c:84:e2:
                    e9:0b:24:ae:cf:8f:a0:82:1d:96:47:75:db:3b:fd:
                    3b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:31:2B:6B:93:89:8A:E6:7A:6D:9C:88:47:56:1B:21:41:FF:5B:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8790ea3c-9ab9-308e-9354-f76a73e54f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:30:ff:a8:b4:20:3e:56:01:69:02:e9:4c:25:2b:25:94:74:
         b1:d3:6f:be:d0:95:98:1a:2e:28:b4:ce:56:b1:75:38:96:79:
         aa:6b:6d:7e:c0:2d:76:11:9b:07:02:96:9b:64:81:9e:f4:c3:
         e9:22:96:01:db:fa:59:ce:b8:ff:21:72:20:d9:02:49:df:a8:
         24:21:bb:69:7c:e7:c5:4b:78:26:10:61:91:ea:56:74:ab:12:
         e3:31:c5:bb:86:06:56:dd:77:19:42:a1:90:76:84:c9:01:c2:
         15:ad:cb:c9:4b:4c:4d:36:8a:e5:66:66:b6:01:e3:ef:2b:49:
         2e:2b:70:a0:fe:e2:eb:b0:0c:0b:d4:87:86:39:c0:a0:27:09:
         7a:b5:45:5d:fc:d7:3a:d6:49:6a:38:ba:98:17:3e:10:04:68:
         83:a2:06:05:f5:7b:78:0e:28:6b:96:16:a1:b7:ff:32:b2:ba:
         6d:67:42:4a:a9:d5:84:2a:9d:75:53:c3:2e:d8:76:e9:68:e3:
         5b:ce:87:9b:45:c8:85:17:ee:27:e4:a1:1c:cf:fb:40:a1:3a:
         1e:e1:56:41:f1:83:05:d1:eb:29:f6:b5:77:e5:69:86:05:95:
         a3:b2:72:90:21:d8:06:de:ae:d8:42:a1:c5:32:0e:f8:c2:c5:
         b2:8a:60:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:35 2024 by rpki-client on console-fra.rpki-client.org