Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa
File:                     9f57b5fe-9a49-347f-99a9-78749563a00a.roa (raw, json)
Hash identifier:          IcrEIvmtCNDI1L6i6GkLKgpd9FKq+DOfLD3ji30WkPA=
Subject key identifier:   A2:B4:5F:49:7D:B8:17:B3:38:FA:B0:C4:20:B2:A1:DE:77:08:29:F3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847BC2C1E2BD4FDFAC8FA9F3100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     396611
IP address blocks:        2001:500:30ff::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:1e:2b:d4:fd:fa:c8:fa:9f:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=466192f9-9331-4954-b500-02c54a08866e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fe:08:54:10:23:79:c4:84:b3:72:fe:be:18:
                    76:f8:65:e2:05:15:5a:b3:a2:99:74:ad:4f:eb:33:
                    7a:15:08:88:a1:96:8d:fa:08:91:43:7b:f1:82:7e:
                    68:d6:21:47:2e:ba:da:e9:79:82:6f:25:ec:4c:b2:
                    6e:3b:03:2d:3e:bf:cd:f9:41:8a:e7:b5:f4:7b:1a:
                    d2:01:5f:68:fb:dc:38:4e:e9:20:10:10:f6:2b:7e:
                    27:58:44:b1:8c:5e:9d:38:64:3c:a0:4a:cf:e6:c9:
                    e2:cb:db:6d:c6:95:61:65:aa:2f:20:20:ff:56:aa:
                    ab:3f:63:6c:dd:49:00:20:e4:8c:b0:1a:3c:91:12:
                    da:cd:f6:e4:ea:8c:34:bb:fe:40:1c:50:d2:79:e1:
                    4a:80:f4:5a:69:68:c6:b5:99:33:b6:75:19:89:9d:
                    b0:31:e2:4f:78:bc:d7:c8:4b:aa:19:6c:10:28:8f:
                    1e:7c:a1:32:d9:a0:53:d3:42:79:7a:81:60:20:6f:
                    72:83:98:28:cd:4a:8b:7f:8e:3c:51:b1:8b:1f:47:
                    44:dd:83:51:7d:01:01:85:8f:f9:47:80:57:34:e5:
                    16:f5:d9:c9:12:c8:fe:18:47:d2:31:fc:96:04:4d:
                    c0:8f:b2:51:df:25:44:7f:15:35:05:ba:d1:93:83:
                    98:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B4:5F:49:7D:B8:17:B3:38:FA:B0:C4:20:B2:A1:DE:77:08:29:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9f:6a:a9:80:e0:fd:0f:c6:37:8d:cf:01:6c:03:72:d1:7d:
         6e:bb:1b:ab:91:94:08:e4:8e:0a:46:60:c5:2c:73:31:25:5f:
         79:d4:d1:d3:7d:4f:43:ba:0d:43:d7:67:d7:fd:e5:61:40:04:
         75:a0:dc:25:3f:74:a9:7d:ac:96:61:60:57:03:88:6d:f5:60:
         88:f3:8c:c7:ba:46:9a:c8:e3:03:d8:aa:a4:d4:f8:d2:62:ef:
         02:10:31:d2:25:41:98:11:de:01:d5:db:71:d1:85:66:7e:7c:
         ed:9b:1f:a6:d3:2b:a3:9f:85:8c:d9:24:60:da:59:fa:58:a5:
         10:1e:58:d1:cc:12:ca:ce:6a:e5:ad:ab:b7:ba:d5:ce:26:24:
         4b:01:44:ef:68:03:9c:15:b2:f9:6e:62:3f:3e:4e:20:65:98:
         ce:de:59:7d:a6:4c:c6:ee:71:cb:76:ce:81:ce:63:d1:c9:44:
         ad:5b:ce:80:4b:f8:97:ef:5c:9d:e6:39:3e:ec:8a:b5:b0:6d:
         b6:96:b8:0d:b2:a3:48:de:fe:29:cb:17:eb:d0:05:5e:5e:a3:
         c9:31:9b:8a:56:4c:c8:dc:2b:12:6d:05:41:91:a0:ed:54:ca:
         c7:84:3a:21:62:95:6c:7b:95:b4:47:29:87:45:99:90:e2:8d:
         89:79:a2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:11 2024 by rpki-client on console-ams.rpki-client.org