Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ade65ed-2986-38b0-9486-bd02f9d76e9d.roa
File:                     8ade65ed-2986-38b0-9486-bd02f9d76e9d.roa (raw, json)
Hash identifier:          eUBFdoRtYkTqtJAtJzD/wv/J6pbY5wulTFqTAOD9bHo=
Subject key identifier:   B6:30:66:C1:6B:58:A1:AE:11:12:80:0E:CC:B8:8C:A1:CE:12:D9:95
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847791CF22A366AB19A9276EC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ade65ed-2986-38b0-9486-bd02f9d76e9d.roa
Signing time:             Tue 08 Oct 2024 12:31:05 +0000
ROA not before:           Tue 08 Oct 2024 12:31:05 +0000
ROA not after:            Mon 06 Jan 2025 13:31:05 +0000
asID:                     396592
IP address blocks:        2001:500:120::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:1c:f2:2a:36:6a:b1:9a:92:76:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  8 12:31:05 2024 GMT
            Not After : Jan  6 13:31:05 2025 GMT
        Subject: CN=4ec49afd-50db-45c9-90a7-cbe5d7d452df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:73:4a:fc:bc:96:4d:e9:e1:ad:0e:9f:bc:a0:
                    86:ea:cc:df:30:d1:3e:09:b7:50:46:a4:af:72:3f:
                    ac:0f:fc:69:16:2a:c9:36:52:bf:77:3d:9e:21:7d:
                    a0:3a:c3:06:ef:27:7c:b1:dd:38:10:8b:6f:d4:ff:
                    93:34:8c:a1:7a:e6:55:4d:08:0d:00:16:2e:71:5f:
                    d9:ee:3b:30:b2:a3:8b:8d:c5:60:a1:3e:91:f5:2a:
                    2a:05:c7:92:5c:21:33:43:32:1c:96:1e:e8:2f:9c:
                    c7:7b:53:3c:06:97:1f:74:e0:6b:de:a6:a1:51:91:
                    fe:3e:d3:c1:8d:b7:d6:e5:a2:83:93:9c:54:69:3a:
                    7f:dc:23:b2:44:b1:ff:1e:7c:a7:93:d2:4e:01:3b:
                    2e:53:b0:09:03:41:a1:47:ea:95:c6:5b:ac:01:f7:
                    a4:3b:9c:df:30:3f:63:40:3b:0f:85:f8:a8:e9:c1:
                    e3:11:90:36:2f:5e:7c:f5:0e:a2:d6:03:1f:31:59:
                    2d:6a:02:da:e4:31:b7:18:81:da:41:ac:0c:37:4a:
                    85:1c:43:87:c2:62:61:1d:ba:33:5e:ce:93:a8:e7:
                    56:29:b2:74:c0:b0:c9:39:3b:19:ef:94:d2:fc:a8:
                    37:e8:c4:88:7b:54:1d:07:9a:9d:82:f5:d5:b9:18:
                    b6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:30:66:C1:6B:58:A1:AE:11:12:80:0E:CC:B8:8C:A1:CE:12:D9:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ade65ed-2986-38b0-9486-bd02f9d76e9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4d:70:02:d3:9f:d4:5b:16:df:0e:e2:77:0a:2a:8c:d5:fe:
         fb:9c:f0:64:fa:64:5b:21:26:93:aa:d6:19:f1:4b:e4:92:55:
         98:d4:5e:78:a0:a7:81:2d:94:9f:03:90:20:0a:ae:60:45:26:
         a5:e0:1b:3c:5a:8e:3b:33:9e:3c:b7:f9:07:92:03:96:e1:1a:
         21:53:ae:ac:b8:f6:23:90:16:2b:97:4d:c1:74:7e:4a:42:ce:
         05:28:82:af:75:e4:52:b0:0d:48:da:dd:d3:94:5d:1d:27:36:
         b1:14:85:bb:92:5f:98:fa:3c:0e:28:e0:88:fa:63:2f:f2:57:
         51:95:85:4c:1c:df:90:92:08:ef:6c:7d:71:2b:61:5d:78:71:
         90:1b:ba:59:d9:ee:28:31:08:8d:4b:0e:a0:a9:05:97:13:19:
         7a:05:70:94:b0:ed:14:99:c3:9c:5f:8a:5c:18:d8:f8:48:cd:
         a9:8d:eb:c5:5e:79:39:4e:08:dc:a7:82:fd:08:13:44:74:2d:
         6c:b4:a7:5b:49:45:53:48:f8:2f:f0:2e:18:d2:67:59:c9:63:
         64:73:33:0f:2b:f7:ed:e4:bb:89:d3:9a:fe:00:28:29:d8:f5:
         31:68:5c:c1:cc:fe:ff:7f:b1:d4:20:d3:b5:a4:01:f2:55:11:
         e2:83:67:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:35 2024 by rpki-client on console-fra.rpki-client.org