Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0bab649-126a-3a24-9f2e-8cc554e47d5a.roa
File:                     b0bab649-126a-3a24-9f2e-8cc554e47d5a.roa (raw, json)
Hash identifier:          UBVLXdCmi/nnx1+GT5JOgWFWD9sHAOVf66sLtO3moP8=
Subject key identifier:   64:0E:51:99:65:7D:BE:56:85:2C:DF:3D:3C:CC:0B:15:C7:9D:AA:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584773964B74B0AE9CEFF1A38800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0bab649-126a-3a24-9f2e-8cc554e47d5a.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     396585
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:4b:74:b0:ae:9c:ef:f1:a3:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=51c2b663-4d35-4fb1-8295-8a7547a88e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b7:e8:4c:5f:e4:fc:ab:78:4c:da:39:63:99:
                    7a:d9:e3:9d:72:2e:4a:6d:85:61:e1:8e:2a:0c:f5:
                    7f:a1:6f:b9:ba:af:0c:6d:20:2e:29:be:bd:08:80:
                    7b:1c:a2:cf:ec:3b:e5:e8:81:f6:b6:fd:a0:8f:e0:
                    f5:dd:13:99:76:24:cc:f2:19:04:25:35:69:28:ea:
                    03:21:8b:fa:16:2d:04:88:2b:71:4a:a9:ae:95:d9:
                    27:32:97:d7:98:fb:2d:6f:54:22:75:5a:1c:c7:98:
                    5f:df:b9:1a:9d:8f:7e:76:ff:f4:61:7a:f7:2c:38:
                    29:37:8c:d5:9e:2d:4f:2f:4c:77:66:7c:83:3f:64:
                    aa:1b:4e:60:23:14:38:aa:a4:74:ad:4a:0b:fb:d5:
                    39:88:bf:0c:07:8d:99:9c:91:26:18:db:6e:e2:55:
                    cd:d5:2f:bf:df:76:ef:03:97:77:47:a1:06:49:4f:
                    89:5f:cb:6d:4d:c6:ea:7f:2e:48:cc:36:7b:fa:07:
                    93:ca:e4:14:50:b0:47:3b:6c:d6:c6:9e:cc:df:bb:
                    61:88:2f:0d:67:66:03:24:e8:aa:99:25:11:f5:e7:
                    91:1d:20:4d:f8:71:b2:d8:bc:cc:b5:5d:0b:ea:f5:
                    7e:94:39:39:d5:49:b5:f7:8c:e5:f5:43:00:c2:68:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0E:51:99:65:7D:BE:56:85:2C:DF:3D:3C:CC:0B:15:C7:9D:AA:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0bab649-126a-3a24-9f2e-8cc554e47d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:88:12:36:7d:28:67:09:8b:34:e3:80:20:14:9e:33:f7:ba:
         a5:2e:90:33:98:fa:be:0f:e4:9a:b8:15:66:9f:9a:f2:63:da:
         b6:e0:4b:d6:67:e3:47:86:37:2f:a6:08:a4:25:63:ad:93:a8:
         b2:96:28:f7:54:e8:05:b1:ba:e1:69:08:94:21:89:11:33:2c:
         57:76:1c:7e:22:6e:6f:52:63:f6:54:2d:d1:ab:a3:0c:ee:bb:
         2e:c2:a5:dd:20:c0:07:df:da:83:1e:30:7c:17:9b:24:99:e9:
         3b:f3:ef:f3:e1:5c:ed:05:cf:51:3d:5b:01:2b:f9:d4:44:c5:
         d5:79:de:6f:ee:cf:74:dc:d4:48:d8:35:ce:8d:88:81:21:34:
         46:dd:cb:95:06:91:2a:a1:73:43:98:0e:a9:1c:a6:91:c6:4c:
         a8:cc:8d:9c:23:52:cf:35:a0:3e:e0:d0:6a:90:1d:a2:f0:9a:
         80:cb:8d:dc:8a:52:73:e3:f3:f1:13:51:26:6b:93:a1:6a:af:
         b6:70:d9:16:9c:00:d2:3b:b7:c8:61:4d:5b:1f:c0:65:d2:c9:
         bb:36:6a:1f:04:a4:ac:47:ab:5a:0d:f7:e1:45:65:30:31:7d:
         80:7b:56:fb:dd:a1:ad:17:f2:22:5e:69:7c:fa:9a:af:74:f7:
         d1:73:7d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:41 2024 by rpki-client on console-fra.rpki-client.org