Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e64b235-2f2a-3bdc-b562-b595318e343a.roa
File:                     8e64b235-2f2a-3bdc-b562-b595318e343a.roa (raw, json)
Hash identifier:          s5Kk0sMfHWOW9CwFiJ0rTfdm2BgYufOG9RuAd8FRvVM=
Subject key identifier:   6A:18:2F:ED:9D:51:5E:C3:9C:64:F1:FA:AF:FC:DA:C5:C1:F5:F4:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EF334374AF7CA29A62080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e64b235-2f2a-3bdc-b562-b595318e343a.roa
Signing time:             Thu 26 Sep 2024 12:35:32 +0000
ROA not before:           Thu 26 Sep 2024 12:35:32 +0000
ROA not after:            Wed 25 Dec 2024 13:35:32 +0000
asID:                     397203
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:f3:34:37:4a:f7:ca:29:a6:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:32 2024 GMT
            Not After : Dec 25 13:35:32 2024 GMT
        Subject: CN=dde37ff1-25d1-44fd-bc74-52c57831aef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:84:5c:93:23:46:8b:cb:98:8b:33:64:54:
                    0a:0a:1f:f3:ce:f5:d6:7b:78:c9:9d:de:d1:94:b7:
                    bf:e2:2e:c3:7b:b8:ac:8b:0f:2c:a5:d1:62:22:59:
                    ae:f2:fc:65:08:68:d3:e1:4e:44:98:13:8f:20:b4:
                    f2:82:c1:bf:ca:d9:cc:0a:b5:fd:be:81:d4:db:78:
                    16:ba:23:5f:c5:49:0a:15:fa:7c:aa:f1:21:9d:ee:
                    e5:75:8f:bf:79:7e:40:df:dd:d9:91:a2:71:ee:90:
                    14:e4:aa:f5:8b:57:65:c5:79:b7:18:90:df:c7:79:
                    a8:8f:20:7f:76:ad:1a:65:6d:4f:00:36:81:8e:fb:
                    3d:d9:53:53:e2:16:ae:15:33:7e:44:ce:50:f0:00:
                    73:40:84:9d:13:a5:d5:e4:f3:68:9d:d7:38:e8:f3:
                    db:f9:6e:e6:96:65:b0:0e:61:dc:c5:5d:12:ff:4d:
                    f3:dc:a9:b9:20:0a:e0:54:eb:37:c7:c8:96:1c:88:
                    2d:18:e1:0e:09:3e:50:8b:36:a1:5e:52:a2:a3:4f:
                    d3:04:27:7d:b0:27:e8:9a:b8:19:cb:f8:0e:0d:c8:
                    3a:49:64:99:3e:6e:74:65:5e:08:62:dc:0a:e4:fe:
                    b2:50:ed:73:d4:b2:a6:68:e6:be:b0:ff:b9:a4:6f:
                    b8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:18:2F:ED:9D:51:5E:C3:9C:64:F1:FA:AF:FC:DA:C5:C1:F5:F4:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e64b235-2f2a-3bdc-b562-b595318e343a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:34:89:83:4f:63:15:ad:26:29:3d:01:43:75:a9:11:87:71:
         f6:5e:dd:02:9c:b0:dc:3f:b5:d5:82:c4:05:42:b6:47:9e:8f:
         15:db:21:41:47:46:01:aa:2f:20:bd:97:a8:7e:97:21:c8:64:
         0f:21:6e:24:0d:63:93:53:d8:09:61:08:da:72:34:13:9f:ad:
         83:de:82:0c:32:de:d8:24:35:ac:fa:90:ab:19:a9:a2:00:7c:
         48:e3:c2:f6:59:6a:5c:38:93:7b:bb:88:bf:b8:52:0d:61:38:
         72:1c:33:ec:ce:6c:19:d4:15:19:d6:e9:b2:12:fe:90:71:06:
         2c:46:f5:8b:a4:c0:2d:07:6e:34:cf:2b:ef:01:fe:e0:05:48:
         b0:10:d3:cb:f9:dd:1a:3a:61:bb:30:00:99:7a:1a:f1:01:ad:
         36:0b:95:f3:0b:31:9c:54:fa:56:1f:b5:43:32:c3:64:7e:19:
         29:98:bc:0c:1f:15:96:0a:27:4b:c6:de:45:d7:bb:64:55:6d:
         fc:81:ed:a3:e7:6c:21:46:35:3e:1a:6e:13:37:14:8e:e7:52:
         25:c1:01:2c:f2:a2:44:6e:67:7c:a7:e6:07:de:3b:33:9c:45:
         84:d2:ce:18:27:4f:9d:c1:c6:e6:2c:62:8e:6f:54:b5:20:af:
         71:c7:4b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:08 2024 by rpki-client on console-ams.rpki-client.org