Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5781184-0c51-3a18-aa5b-c1eeb2f04d7d.roa
File:                     a5781184-0c51-3a18-aa5b-c1eeb2f04d7d.roa (raw, json)
Hash identifier:          KRXiVlmzQvUpuMN3SFt/3NDjgnLeYBnSmmVelkye0Zk=
Subject key identifier:   63:12:25:BA:DC:71:BE:B4:5E:FE:AE:9B:A4:AE:75:2F:29:C8:A0:CC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847BC2C14D9885455CE9B0C9780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5781184-0c51-3a18-aa5b-c1eeb2f04d7d.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     396541
IP address blocks:        2001:500:30ff::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:14:d9:88:54:55:ce:9b:0c:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=56009e6d-7c55-40f5-9864-fd8424cb53f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:79:5a:f6:df:3c:74:9f:a7:75:37:31:01:
                    71:02:24:7b:d8:71:16:9f:d8:c4:46:67:f3:90:f7:
                    fb:52:78:dc:63:07:e3:1f:1b:ef:4c:e7:58:ed:2f:
                    51:fb:f3:f9:4e:dd:dd:0d:b7:75:35:57:b5:36:24:
                    5b:d2:d6:97:19:17:9c:c2:66:a5:d4:72:ef:bb:ec:
                    66:67:9a:06:78:83:d3:28:73:54:99:2f:71:08:9d:
                    1a:33:45:8c:86:15:e5:f6:15:a3:6c:8a:8c:99:da:
                    1c:ef:4f:8a:88:99:00:d4:aa:12:22:8e:3f:8c:fb:
                    c3:80:77:00:f3:6e:d9:88:68:c9:c9:7a:30:b8:d0:
                    82:8f:d3:61:c4:25:95:97:aa:63:74:4b:16:ae:6c:
                    ba:ef:0e:f0:40:c4:18:86:90:b8:36:e2:b1:e6:b7:
                    77:42:51:c3:81:37:22:11:96:45:16:62:5d:27:0d:
                    47:13:3d:21:fd:2e:38:14:ac:c5:a1:c9:8e:2c:55:
                    b6:5e:6f:b6:f2:5c:02:87:08:91:29:e8:67:45:f4:
                    e1:80:84:86:76:0e:ce:a7:84:0e:1d:98:98:fa:f0:
                    91:d9:87:e0:9d:a2:ed:51:47:76:c2:99:8e:a4:bf:
                    52:97:1e:08:8f:fa:77:9f:70:19:94:98:9c:e3:4a:
                    c5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:12:25:BA:DC:71:BE:B4:5E:FE:AE:9B:A4:AE:75:2F:29:C8:A0:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5781184-0c51-3a18-aa5b-c1eeb2f04d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c9:29:ab:1f:9a:4a:2c:7d:a4:8d:21:31:bb:3e:83:44:34:
         01:65:7b:b5:67:94:41:aa:73:24:7c:bc:7c:eb:29:65:6a:c0:
         99:37:04:fa:ef:fe:00:d7:b0:67:c7:17:37:10:6a:6d:20:33:
         8a:62:af:74:6e:63:12:32:08:8f:fd:c5:0c:e7:92:91:30:d8:
         59:42:9f:9e:07:da:ce:53:b6:17:b3:5f:b8:7b:e5:28:c4:a2:
         ee:ca:a8:36:55:a8:34:48:d5:21:57:d8:f5:c9:3b:b1:92:6e:
         8a:c4:d4:51:e8:30:2b:4c:8f:33:0d:e2:78:4d:03:8f:6f:5a:
         70:c2:1a:3d:f9:18:f4:54:6a:1d:03:02:16:6a:21:86:be:d7:
         0c:c5:90:ff:ee:89:dd:55:9f:4c:5a:37:8d:e9:2a:d7:60:4f:
         24:77:80:a2:dd:5c:d6:e2:3c:9d:b4:a3:7a:a7:dc:22:43:33:
         35:4b:6f:63:5c:23:56:35:08:d4:9d:bc:52:98:87:20:c3:df:
         e1:94:95:a6:5b:97:92:7c:82:1a:9d:c5:06:3e:e1:a1:4b:0c:
         99:b0:60:7b:6d:ab:89:a9:c1:0f:ef:b9:5a:ac:fe:cb:e4:66:
         c3:59:bd:55:06:35:ea:52:af:75:81:15:e0:94:7b:28:ce:0c:
         da:6c:2e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:40 2024 by rpki-client on console-fra.rpki-client.org