Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e0dd6d7-73b2-3f66-89be-7a226b29a874.roa
File:                     8e0dd6d7-73b2-3f66-89be-7a226b29a874.roa (raw, json)
Hash identifier:          2fZ98jMYIKb+gfunrx+Sf7WHWh0Rl5DsuVfVyzoRmfQ=
Subject key identifier:   1E:AE:44:61:F6:0C:67:D4:EB:44:B8:10:BB:1F:AE:A9:2B:78:90:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858477396526EE87D606D048A4680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e0dd6d7-73b2-3f66-89be-7a226b29a874.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     36616
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:52:6e:e8:7d:60:6d:04:8a:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=bf731e35-d3b5-4a4e-9860-9c149d909911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:03:b0:0c:e6:7a:5a:0a:e4:27:b4:0b:ab:af:
                    e9:df:ae:b1:95:64:10:4b:e8:e3:82:19:7f:9f:32:
                    58:29:c7:1e:87:80:8a:aa:67:00:5e:81:71:52:d7:
                    bb:c6:34:6b:8a:ea:d0:49:d4:e8:44:2a:57:73:05:
                    51:19:82:7f:42:11:fb:68:c0:23:83:45:9a:85:5d:
                    30:07:dc:68:6d:b6:a3:b4:f9:07:59:b2:52:8a:96:
                    f6:4f:f7:af:09:3f:bd:ac:1f:06:dc:3c:fb:06:47:
                    49:47:ae:7b:aa:d9:fe:79:8f:3d:7e:4e:5e:35:a9:
                    b2:3d:b6:ce:6b:0a:d7:17:11:bc:b3:04:42:8d:f7:
                    88:85:1f:09:f7:97:6c:84:fe:48:99:cf:9b:d7:9a:
                    9d:fc:51:cc:1c:09:af:97:1d:ff:4f:1a:c2:46:67:
                    09:a7:1f:5f:d6:ef:10:ca:ed:a4:62:57:50:c0:d8:
                    10:ff:18:93:0b:75:89:15:9a:24:ff:59:1f:47:8f:
                    fe:c5:0e:87:d5:cf:1f:2f:cf:78:2e:8d:d3:f0:24:
                    ee:a8:58:50:af:89:ef:f5:fe:13:08:08:a0:6d:b0:
                    9f:df:29:b0:e9:f9:2e:6d:ec:04:b8:6a:3a:76:83:
                    ce:59:01:48:27:b4:31:3a:0e:96:da:12:5a:30:96:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AE:44:61:F6:0C:67:D4:EB:44:B8:10:BB:1F:AE:A9:2B:78:90:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e0dd6d7-73b2-3f66-89be-7a226b29a874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:00:21:2d:e9:c5:2f:c8:07:15:85:3f:e8:4b:79:a5:04:b4:
         4e:13:6b:d3:b7:52:a1:d3:6e:b9:a3:eb:58:a6:aa:5e:c8:15:
         93:72:a1:fc:f5:bb:8c:6a:a5:d3:5f:b5:2b:1f:3c:83:e3:21:
         ac:d9:67:d0:2f:60:90:31:7e:6e:bf:24:50:b2:c8:6b:a1:b4:
         de:be:14:6e:aa:90:29:f8:bc:d9:33:0a:a1:f7:5f:21:73:d6:
         f0:a3:6c:05:d7:76:85:57:74:5f:0f:de:09:80:29:fd:31:ff:
         cb:2a:dd:c4:73:91:7c:79:e2:ee:3c:eb:70:d4:f5:ff:c0:a7:
         fd:14:fb:b8:c6:cf:2e:78:fd:0f:fd:70:d6:af:8c:66:66:0e:
         9c:0d:6f:1f:c4:eb:43:9b:d1:d9:24:47:4b:aa:cf:cb:e6:56:
         1c:22:31:7e:c8:be:d2:57:6b:d3:31:29:da:b0:9d:f8:93:9c:
         e2:7e:b1:10:f2:d7:c6:cb:5f:72:d5:94:7c:bd:88:e1:20:39:
         41:e6:cc:f5:6b:53:0c:75:58:c7:2b:84:22:31:f2:ca:cf:19:
         68:35:0a:fe:cb:0e:e7:a9:f5:37:b0:b4:0d:bf:99:a7:10:26:
         71:41:54:b2:f6:14:c2:56:18:c9:b5:2a:28:fa:8c:11:30:63:
         82:e7:cb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:36 2024 by rpki-client on console-fra.rpki-client.org