Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba42adb8-63d3-345f-95b4-402a3aed8323.roa
File:                     ba42adb8-63d3-345f-95b4-402a3aed8323.roa (raw, json)
Hash identifier:          iZU7Awu+B0Y4+GjTpe0MqQXVQZ4X/Fd/bnKndTxfZUE=
Subject key identifier:   CF:18:6A:F3:70:3A:F8:89:39:93:0B:CE:3E:C3:57:C0:76:AB:C7:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847BC2C1A654E85E96C1DF68400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba42adb8-63d3-345f-95b4-402a3aed8323.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     20172
IP address blocks:        2001:500:30ff::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:1a:65:4e:85:e9:6c:1d:f6:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=86c526c9-3547-48d2-9166-77fef4fa9495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:f4:7f:16:f4:6d:8f:cc:97:76:be:c2:4b:
                    35:95:c4:b3:05:37:6e:3e:1c:03:2d:80:da:7a:2a:
                    81:e1:86:5b:7b:02:a7:19:f0:76:9e:2a:09:dd:aa:
                    82:9a:e8:0d:4a:18:a2:90:5e:81:8d:e0:4c:e3:60:
                    2c:6f:7e:b2:46:59:dc:a2:8d:8a:a4:41:bf:3d:3f:
                    71:e4:3c:bf:2e:ea:16:ec:41:22:9d:03:4e:6b:ce:
                    fe:23:e8:7f:ea:7d:3c:22:be:fb:aa:cf:c8:95:ec:
                    00:c1:90:e4:87:77:34:89:0b:a7:5e:0d:05:5e:68:
                    05:92:6c:6f:df:c6:af:a2:a2:a6:8f:0c:f0:06:e2:
                    54:dd:96:68:e6:ce:4c:0a:d6:c5:d9:72:67:91:e2:
                    9e:f9:28:6a:f5:ad:e3:df:72:5a:c8:76:69:42:e1:
                    90:db:ad:ec:66:a8:74:f8:1a:b0:63:4a:2e:16:a7:
                    d1:5a:a7:0e:43:c8:84:87:0d:12:7a:21:2c:45:eb:
                    86:37:d3:62:3a:9b:8f:76:8b:5a:72:53:c7:27:cd:
                    18:62:45:7e:70:66:71:8c:be:fa:2f:e8:ce:2d:e4:
                    b8:02:89:30:2f:a9:fd:a7:a0:98:0e:26:53:c2:77:
                    70:27:bb:cc:fe:a2:9a:67:ec:21:82:61:68:09:72:
                    2a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:18:6A:F3:70:3A:F8:89:39:93:0B:CE:3E:C3:57:C0:76:AB:C7:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba42adb8-63d3-345f-95b4-402a3aed8323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:63:2d:8d:34:c4:08:81:9a:97:14:97:ec:d7:82:6c:3e:eb:
         97:dc:06:d2:04:32:40:e9:98:eb:bb:5a:33:c6:fd:86:9b:26:
         0d:d5:79:c8:2d:48:2a:bf:dc:5f:88:20:f2:89:7e:78:6f:e1:
         c3:f0:b5:ae:e9:55:4d:cf:42:58:7e:18:64:9e:20:2f:ee:17:
         29:71:5b:79:4b:44:dc:52:5d:d1:e4:42:48:34:ea:5e:92:57:
         e6:e5:e7:cc:3f:7c:c0:74:01:5f:b2:3f:23:63:ae:5f:a3:7c:
         ae:2f:d5:08:6d:97:cf:b7:12:2b:86:d4:c7:0f:fd:d1:7c:d3:
         9f:23:81:d1:d3:ef:89:d3:0c:f3:5a:6a:2e:fe:d4:89:f8:a0:
         ca:7c:be:9d:8f:0a:cc:b9:2c:4d:97:57:b0:d9:3e:f5:26:31:
         4c:ce:89:79:a6:59:9d:44:c6:6d:56:5e:91:5c:e8:9a:db:bb:
         27:c7:2f:03:3e:59:73:00:07:f0:01:f9:d4:de:bd:b2:d4:c7:
         69:b2:73:00:6e:c2:1c:50:0a:d3:9f:55:20:06:f3:de:5b:63:
         e4:21:b5:31:e1:d3:22:e8:74:af:74:cf:64:7a:4a:b4:aa:8b:
         af:f5:b0:a7:6f:12:e4:bf:e1:da:1d:3b:3e:d6:f6:27:cd:f2:
         e6:e4:1c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:13 2024 by rpki-client on console-ams.rpki-client.org