Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aab89aba-d46e-3f74-80f9-466c3480b68a.roa
File:                     aab89aba-d46e-3f74-80f9-466c3480b68a.roa (raw, json)
Hash identifier:          LQ9rfuXyfTqivreUFdA24XznxUCVla6QANO7WWH4HP4=
Subject key identifier:   CB:30:FA:1D:63:6E:9F:18:D0:3A:48:C7:C1:DE:AC:DD:78:9B:73:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476593F8772E77D80D0C3B4680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aab89aba-d46e-3f74-80f9-466c3480b68a.roa
Signing time:             Tue 01 Oct 2024 12:34:44 +0000
ROA not before:           Tue 01 Oct 2024 12:34:44 +0000
ROA not after:            Mon 30 Dec 2024 13:34:44 +0000
asID:                     396586
IP address blocks:        2001:500:122::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:93:f8:77:2e:77:d8:0d:0c:3b:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  1 12:34:44 2024 GMT
            Not After : Dec 30 13:34:44 2024 GMT
        Subject: CN=6333ae85-28bf-4d34-989e-22a80cc86f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:75:8b:d6:28:e8:fa:c2:00:ff:69:84:5b:ee:
                    c4:c1:c2:a2:bc:ab:ac:72:90:cb:f6:b4:e5:68:77:
                    5c:10:85:d6:52:5f:fb:13:75:73:7a:f3:a7:89:ac:
                    84:82:8e:3d:e8:8b:b4:f3:34:59:ca:27:27:5b:7c:
                    47:47:ad:1c:21:be:0e:c0:2a:72:cb:7d:58:c1:3d:
                    7b:93:35:42:6c:34:c7:06:d1:9c:dc:62:ac:6a:a3:
                    08:11:a7:40:52:2b:7e:a2:71:3a:b3:86:37:43:f2:
                    6f:7c:5e:d1:b1:1c:1a:f6:ca:7a:53:34:7a:22:03:
                    e6:50:69:12:44:a4:94:91:0a:a5:de:d0:2e:03:ad:
                    d7:f4:f4:58:ec:d1:2a:d8:66:c8:3e:da:8c:65:c7:
                    b0:88:83:36:c5:62:a3:27:cf:e1:fe:f8:cf:7f:da:
                    b2:7c:84:30:f2:e7:e9:50:5f:3f:f7:1f:72:e7:82:
                    03:58:c2:54:29:54:0a:89:18:35:dd:0e:16:ff:14:
                    7c:9c:e8:9c:7a:e5:d9:34:d0:4e:e2:1e:58:55:73:
                    7a:c4:c9:3f:60:1c:24:22:99:06:b3:4f:b0:a9:e7:
                    d8:f4:48:73:77:bd:8f:34:e5:a4:1d:a2:6d:d7:74:
                    07:a3:b0:c0:fa:c9:6a:af:31:d5:d7:af:df:c8:83:
                    91:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:30:FA:1D:63:6E:9F:18:D0:3A:48:C7:C1:DE:AC:DD:78:9B:73:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aab89aba-d46e-3f74-80f9-466c3480b68a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:4a:b3:4f:94:8b:d7:b4:52:13:8e:92:7c:31:ad:f9:85:c6:
         ce:93:fb:80:9e:2e:68:f8:75:8a:9d:49:be:17:f9:28:d6:c5:
         bb:5e:ae:f0:74:7c:a9:e0:e0:2e:c2:a7:33:4a:69:72:30:ac:
         5a:30:e6:04:e5:8d:61:2f:b4:39:e9:b2:24:7f:93:3f:8c:b6:
         a2:24:dc:c8:93:3e:7b:b3:72:c1:15:75:62:a2:fe:ad:3f:cb:
         74:75:ed:b4:b5:58:e0:bc:f3:ee:52:d8:cb:90:de:6c:7b:11:
         89:e8:9b:2e:38:d7:01:69:80:9f:1e:4f:55:d2:07:b0:1c:a3:
         ca:06:0e:4c:1a:ae:b4:02:00:d7:d2:04:19:10:3e:3a:ef:f7:
         71:e2:9a:38:6f:ec:cc:c8:2d:9b:11:3e:81:ca:f5:19:f2:a7:
         93:6f:ae:1f:3f:06:b9:0c:2e:00:15:ec:fa:5c:d7:80:4a:30:
         3a:22:1e:27:d0:13:be:ea:93:ae:08:83:bb:13:b5:fc:d9:a6:
         9c:47:04:b4:05:0c:ce:8b:08:78:39:61:07:0c:cf:9a:88:36:
         d7:d5:8a:5e:2e:ba:9b:07:1e:d3:2b:39:bb:88:17:25:8b:6c:
         f0:54:1b:54:7d:79:35:f2:08:7d:e6:48:17:30:c0:0d:33:39:
         cd:c8:08:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:41 2024 by rpki-client on console-fra.rpki-client.org