Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0ff6c7f-80c2-37d6-8818-cbe5804045ca.roa
File:                     b0ff6c7f-80c2-37d6-8818-cbe5804045ca.roa (raw, json)
Hash identifier:          GFoVICFrvXa6FPktpBEHypUScnDeVFUQaQsg/KIVBcQ=
Subject key identifier:   34:99:2E:6C:AE:03:57:7E:03:EE:8A:67:1F:94:C3:1F:0C:C1:A5:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847791CF537E3759087A8EDD7E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0ff6c7f-80c2-37d6-8818-cbe5804045ca.roa
Signing time:             Tue 08 Oct 2024 12:31:06 +0000
ROA not before:           Tue 08 Oct 2024 12:31:06 +0000
ROA not after:            Mon 06 Jan 2025 13:31:06 +0000
asID:                     396603
IP address blocks:        2001:500:120::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:1c:f5:37:e3:75:90:87:a8:ed:d7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  8 12:31:06 2024 GMT
            Not After : Jan  6 13:31:06 2025 GMT
        Subject: CN=0cdd0b7f-636e-4867-ab80-503724d7ef92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:92:25:81:33:43:40:2a:cb:58:a7:f4:98:7a:
                    2d:a6:39:d5:aa:af:b6:dd:94:7a:c2:70:8d:db:41:
                    0a:b9:da:3e:40:e0:d0:c9:62:3c:95:64:a9:2e:fe:
                    ce:33:a8:c4:43:62:95:36:71:f9:1b:64:3b:da:78:
                    e7:c2:55:d6:1b:7a:04:09:e9:4a:42:cc:d9:9d:5c:
                    02:59:58:5d:ce:6b:d2:30:df:cf:7c:69:de:e5:dd:
                    45:fd:ae:68:07:9a:cd:fd:bd:87:6b:fe:08:67:c3:
                    6e:1b:e0:8d:e5:44:66:67:5d:8d:4f:97:00:b9:0e:
                    93:90:61:85:76:29:68:87:1b:0e:9c:7d:62:30:37:
                    39:fe:3f:0e:86:eb:58:76:ac:75:8a:23:16:d4:4a:
                    2a:18:34:9d:c3:a3:e2:cf:19:ac:b4:03:c4:c0:ad:
                    d4:05:1e:ed:bb:85:3c:7a:b5:b4:f1:a1:45:40:7f:
                    11:2e:b5:b7:ea:70:c2:b4:f1:a9:5d:74:b7:5e:77:
                    ed:ed:43:1e:6d:0e:d5:c9:fb:c1:b9:8b:c6:d8:c7:
                    a4:6b:3d:54:95:84:8e:fd:ea:f7:e4:78:e9:25:08:
                    78:f3:87:46:f8:48:7b:b0:0d:7f:8a:a1:c5:2b:d2:
                    81:41:b6:b5:f6:72:40:44:3a:f7:f9:94:d1:5c:c9:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:99:2E:6C:AE:03:57:7E:03:EE:8A:67:1F:94:C3:1F:0C:C1:A5:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0ff6c7f-80c2-37d6-8818-cbe5804045ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:16:b5:3d:42:01:42:1a:f5:05:a8:15:6b:55:53:f2:24:8f:
         a2:17:23:84:02:25:c3:da:8b:c0:d0:17:5a:e4:38:96:5c:65:
         2c:1b:22:ad:86:67:82:bf:00:9a:75:8e:5c:db:d5:f6:54:ca:
         5b:ab:eb:59:ca:7a:11:df:ea:e5:17:8d:ee:d9:d8:b4:4d:c1:
         38:6b:35:d0:e6:ca:e8:a9:ad:5c:e7:fb:5a:27:7e:9d:57:77:
         5a:56:09:76:fa:04:58:d3:be:5d:de:f9:ba:3f:55:5f:02:ea:
         c7:e8:bc:a4:64:bd:6b:69:94:81:cd:5b:aa:e9:aa:d8:1f:34:
         94:ee:a8:85:e1:cc:da:e8:ec:6c:27:34:a0:73:13:79:35:45:
         48:98:8d:24:39:08:9d:97:ca:58:83:f0:6b:01:d8:e3:5a:3c:
         ca:45:25:e5:7e:76:b3:95:8d:c0:46:8f:5d:6a:d2:6f:92:77:
         23:87:e3:c1:2d:59:4a:c5:d3:a8:9f:0a:b7:fe:1d:96:71:52:
         14:d4:43:cb:d5:eb:05:92:cb:58:ca:7f:9c:3f:4a:ef:e1:da:
         5a:0d:81:ee:80:16:43:8e:ea:e9:57:74:ff:ae:6c:b1:f8:b6:
         a4:8b:14:9f:6f:e8:47:72:84:91:fd:2e:5a:83:f8:87:07:a4:
         7d:97:fd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:42 2024 by rpki-client on console-fra.rpki-client.org