Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7103911-575d-3f2f-a071-73334ae74d5e.roa
File:                     a7103911-575d-3f2f-a071-73334ae74d5e.roa (raw, json)
Hash identifier:          VuUJyRIHjYi1iOWOqn7pKCf6+jvXSTtVM3e3/PbrOJ4=
Subject key identifier:   18:CF:54:EC:F9:0B:4C:97:48:52:03:4C:06:47:D4:1C:DF:C5:67:3B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847791CF5F6B7196B87FCC6C140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7103911-575d-3f2f-a071-73334ae74d5e.roa
Signing time:             Tue 08 Oct 2024 12:31:07 +0000
ROA not before:           Tue 08 Oct 2024 12:31:07 +0000
ROA not after:            Mon 06 Jan 2025 13:31:07 +0000
asID:                     396826
IP address blocks:        2001:500:120::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:1c:f5:f6:b7:19:6b:87:fc:c6:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  8 12:31:07 2024 GMT
            Not After : Jan  6 13:31:07 2025 GMT
        Subject: CN=419e2ee8-e191-46a8-a740-64c0e0503936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f0:18:53:da:a8:d9:0a:49:67:93:58:ac:3a:
                    e9:20:f4:66:72:0b:3a:30:47:94:13:29:b0:cd:81:
                    be:71:c4:ec:d0:a8:9a:1b:f2:1a:5d:70:77:17:9c:
                    5c:b2:db:d9:9f:81:da:b5:75:fd:dc:4d:e8:8b:e5:
                    d7:27:bd:d7:62:d2:c7:77:51:05:70:ca:8d:25:b0:
                    f5:90:44:2e:fe:30:81:48:94:9f:7a:52:93:f1:32:
                    4e:f9:33:2c:ce:8c:68:4d:7b:50:c4:f1:11:b3:74:
                    38:87:d0:7b:66:64:bd:a7:5a:92:db:6e:f6:74:76:
                    c0:98:01:f1:14:2b:76:f3:f4:bc:24:b7:50:c0:43:
                    71:99:b5:b1:19:a4:4a:db:3f:32:0e:5b:ce:6c:d4:
                    32:4d:b5:e3:92:67:1c:8e:b6:91:c8:6f:90:2d:31:
                    7c:cf:c8:09:a4:cf:ca:f4:1f:65:3a:b5:07:3b:10:
                    66:f2:cc:bf:c6:4b:90:16:09:a0:d3:2e:71:a9:6f:
                    7f:dd:57:50:ab:b1:9e:a7:3c:96:08:b4:a5:7e:b8:
                    e2:4e:31:4a:a1:e3:30:e4:40:57:f6:66:06:de:12:
                    ad:7b:0f:1f:1a:ee:7f:1a:cf:ba:a4:b7:b9:bb:4f:
                    58:ad:96:9d:2d:ac:00:9f:24:4e:c6:d1:ff:78:44:
                    18:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CF:54:EC:F9:0B:4C:97:48:52:03:4C:06:47:D4:1C:DF:C5:67:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7103911-575d-3f2f-a071-73334ae74d5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:61:57:02:d9:d5:49:b3:d2:76:ea:e9:9f:fe:38:03:41:65:
         56:9c:43:b1:98:a9:24:a5:68:dc:2c:ca:23:95:ff:31:54:2a:
         f7:28:1f:b3:e9:de:b1:0b:5a:6e:3f:c8:63:a2:b6:bb:b8:40:
         36:27:ef:b1:0c:57:98:c7:df:2a:f7:79:23:fd:c0:c5:4d:34:
         8a:86:3f:4c:b0:a9:08:fb:71:d1:89:01:6b:75:2d:0c:e8:d4:
         66:a2:71:ce:f3:2e:76:f2:d0:de:56:02:72:2a:21:05:3a:58:
         54:4a:db:94:78:32:82:44:ef:d6:e3:0c:10:4d:20:dd:8f:31:
         89:f0:88:a2:d8:60:51:9f:db:78:07:29:7f:18:ee:6a:e3:39:
         ea:88:bc:b9:00:07:4d:5b:40:06:f9:29:84:71:a2:2c:d2:4b:
         12:32:e4:58:54:98:4c:8e:e3:84:8f:f0:50:ad:9f:3b:1f:7f:
         d6:24:d3:7d:11:0f:07:22:ef:71:5a:10:c1:05:3a:fd:68:23:
         86:2a:ad:74:83:96:c4:b3:55:4f:c7:58:c9:28:c8:52:11:23:
         76:18:d3:5f:ce:85:a3:f9:46:f9:67:07:b7:5c:f8:06:46:ac:
         bc:b5:e3:56:35:23:95:9e:2c:7b:63:2f:b1:0d:bc:09:1f:bc:
         e2:2b:88:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:40 2024 by rpki-client on console-fra.rpki-client.org