Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8dfe19f-5d71-32c9-b720-cb6857adbe2b.roa
File:                     a8dfe19f-5d71-32c9-b720-cb6857adbe2b.roa (raw, json)
Hash identifier:          v3+gBlnxIKeDwK6R1X/SWxhKNWyfHyQ8LNqET4sw2hs=
Subject key identifier:   B7:00:5E:2C:C9:6E:C3:6D:61:4B:9B:7A:CF:58:11:75:FF:0F:67:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584765940060763D38089FBDE680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8dfe19f-5d71-32c9-b720-cb6857adbe2b.roa
Signing time:             Tue 01 Oct 2024 12:34:48 +0000
ROA not before:           Tue 01 Oct 2024 12:34:48 +0000
ROA not after:            Mon 30 Dec 2024 13:34:48 +0000
asID:                     396592
IP address blocks:        2001:500:122::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:94:00:60:76:3d:38:08:9f:bd:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  1 12:34:48 2024 GMT
            Not After : Dec 30 13:34:48 2024 GMT
        Subject: CN=d146adf4-5bcc-4e10-8215-0204609337f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d6:5a:f3:d9:ce:70:e3:98:17:e2:c5:ef:e1:
                    cb:6c:b7:5e:2e:d3:10:f1:1f:05:11:d7:0a:da:66:
                    8a:1d:4a:b2:31:3f:f5:2c:f2:08:3a:09:67:3b:c8:
                    1d:95:c2:c8:95:48:91:76:e5:2b:36:68:7b:bb:48:
                    c3:33:bc:23:7a:dd:2b:52:d2:f7:3a:de:36:1b:86:
                    23:4a:12:97:93:1b:60:4e:77:e5:2f:cb:6b:14:8e:
                    2e:2d:cf:e1:b9:8e:90:db:7e:a6:01:25:85:21:12:
                    7a:44:b3:e9:3f:f7:91:09:70:7f:ec:88:ec:da:69:
                    3a:cb:6a:0b:45:ce:d3:a8:e7:e4:4f:32:04:4b:21:
                    5a:3f:b4:cb:e1:b3:99:4e:05:fd:bb:8e:f7:7d:63:
                    a4:f5:d2:4f:a6:d3:b2:e8:94:d0:8e:e7:14:bd:37:
                    8a:33:90:02:a0:25:6f:19:62:02:90:6c:54:82:d4:
                    a3:ff:c5:10:fa:16:65:3d:3f:a2:aa:27:91:33:91:
                    23:25:6a:75:9e:82:ac:dd:2b:54:a9:76:34:73:d0:
                    e6:d7:6f:f9:fa:9e:61:f6:07:91:eb:c8:3e:b0:99:
                    84:c5:1a:e1:58:3e:00:13:0d:c3:35:3a:c5:18:21:
                    8c:6d:6c:26:34:24:e1:5e:3d:90:98:14:2b:7a:bf:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:00:5E:2C:C9:6E:C3:6D:61:4B:9B:7A:CF:58:11:75:FF:0F:67:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8dfe19f-5d71-32c9-b720-cb6857adbe2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ef:2d:e4:da:d5:56:5d:9d:c6:38:89:df:24:03:de:87:35:
         37:e8:6e:f9:90:df:3e:1b:7d:c7:db:a1:75:06:20:6f:31:98:
         ee:34:15:b2:95:b2:78:12:64:b0:b2:93:ab:80:54:d9:b6:29:
         96:6b:98:be:d7:3c:95:8f:b4:86:32:12:53:75:e8:3f:ce:09:
         35:3d:f8:dc:10:d0:0b:7e:4f:42:17:34:a2:d6:37:eb:53:07:
         81:9b:e2:18:42:3c:a3:c2:c7:5a:1b:bf:c7:28:64:25:8e:f4:
         70:0f:04:58:bf:80:5c:06:ee:f9:77:bb:ad:83:da:f1:4a:34:
         f5:73:58:66:ad:c9:c6:ae:5e:ce:8f:7a:33:43:4b:a3:34:db:
         36:66:0b:bf:93:91:20:c0:05:81:bf:9b:be:48:37:8b:9c:3d:
         85:c7:2c:cf:63:f6:d3:29:bf:16:ed:7d:22:cd:91:86:6f:d0:
         b6:03:48:5f:78:ea:ff:46:38:ae:f5:4f:4b:bb:6f:60:80:80:
         76:69:7a:d1:40:34:69:f5:1e:63:66:4a:bc:1e:f2:a2:6c:7c:
         d1:a4:61:d8:f0:24:9e:a4:a2:40:26:4e:cf:6c:2e:49:d9:8b:
         6d:7c:47:24:1a:3b:5d:81:16:ce:7a:39:05:cb:f1:01:e5:bc:
         8c:fd:a1:11
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdllABgdj04CJ+95oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAwMTEyMzQ0OFoXDTI0MTIzMDEzMzQ0OFowLzEtMCsGA1UEAxMk
ZDE0NmFkZjQtNWJjYy00ZTEwLTgyMTUtMDIwNDYwOTMzN2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9Za89nOcOOYF+LF7+HLbLdeLtMQ8R8FEdcK
2maKHUqyMT/1LPIIOglnO8gdlcLIlUiRduUrNmh7u0jDM7wjet0rUtL3Ot42G4Yj
ShKXkxtgTnflL8trFI4uLc/huY6Q236mASWFIRJ6RLPpP/eRCXB/7Ijs2mk6y2oL
Rc7TqOfkTzIESyFaP7TL4bOZTgX9u473fWOk9dJPptOy6JTQjucUvTeKM5ACoCVv
GWICkGxUgtSj/8UQ+hZlPT+iqieRM5EjJWp1noKs3StUqXY0c9Dm12/5+p5h9geR
68g+sJmExRrhWD4AEw3DNTrFGCGMbWwmNCThXj2QmBQrer9wEwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLcAXizJbsNtYUubes9YEXX/D2e8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYThkZmUxOWYtNWQ3MS0z
MmM5LWI3MjAtY2I2ODU3YWRiZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBn7y3k2tVWXZ3GOInfJAPehzU36G75kN8+G33H
26F1BiBvMZjuNBWylbJ4EmSwspOrgFTZtimWa5i+1zyVj7SGMhJTdeg/zgk1Pfjc
ENALfk9CFzSi1jfrUweBm+IYQjyjwsdaG7/HKGQljvRwDwRYv4BcBu75d7utg9rx
SjT1c1hmrcnGrl7Oj3ozQ0ujNNs2Zgu/k5EgwAWBv5u+SDeLnD2FxyzPY/bTKb8W
7X0izZGGb9C2A0hfeOr/Rjiu9U9Lu29ggIB2aXrRQDRp9R5jZkq8HvKibHzRpGHY
8CSepKJAJk7PbC5J2YttfEckGjtdgRbOejkFy/EB5byM/aER
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:40 2024 by rpki-client on console-fra.rpki-client.org