Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c082ea6c-1810-3d61-80c7-a96b5bfd85c1.roa
File:                     c082ea6c-1810-3d61-80c7-a96b5bfd85c1.roa (raw, json)
Hash identifier:          BmltxQGhFmlDe3AIJJeaeubnAbxTAqEOiIqdWy0rv14=
Subject key identifier:   A4:31:E7:29:D3:1C:20:77:1F:B0:0E:4B:C3:21:51:FD:32:80:A1:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EECEBC95DBFA4882C36D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c082ea6c-1810-3d61-80c7-a96b5bfd85c1.roa
Signing time:             Thu 26 Sep 2024 12:35:29 +0000
ROA not before:           Thu 26 Sep 2024 12:35:29 +0000
ROA not after:            Wed 25 Dec 2024 13:35:29 +0000
asID:                     397202
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:ec:eb:c9:5d:bf:a4:88:2c:36:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:29 2024 GMT
            Not After : Dec 25 13:35:29 2024 GMT
        Subject: CN=cbeb8f64-0455-4aa4-9d38-6a18bce90d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b1:9e:f0:0e:c5:f7:0f:e7:28:83:9e:85:f6:
                    c4:7e:2f:da:ce:e2:a5:f9:22:26:cf:64:17:ef:86:
                    3b:9c:30:84:7c:e6:e7:c9:9d:b7:91:7b:c3:de:5b:
                    92:f1:82:16:43:48:57:82:25:1c:eb:49:b2:55:0f:
                    11:df:78:2b:35:8b:c0:b6:fc:04:28:6d:c8:e3:3a:
                    ef:48:66:1c:4b:d7:d4:8b:c9:12:77:34:95:21:f7:
                    5e:45:62:7a:4a:19:60:ec:09:40:f6:80:47:d4:c3:
                    dd:8c:0d:9f:d8:e9:18:87:3e:05:67:a0:4b:50:3e:
                    a9:52:85:5e:0f:2b:23:4a:c1:30:7e:ba:ed:c1:55:
                    9c:33:49:54:8c:3f:95:e6:3c:e1:26:be:71:38:63:
                    90:3f:d6:cc:c1:ef:58:36:5b:30:7a:b6:78:c6:9e:
                    2e:72:a6:74:df:26:68:22:78:c0:e5:3b:87:75:9c:
                    08:ca:2d:59:eb:ab:44:e1:cb:c7:93:e9:42:15:bf:
                    9d:ca:ed:2e:6e:71:bd:09:2e:f5:c8:ea:a2:f2:e4:
                    df:c0:86:09:3f:f6:2c:1c:c2:90:a8:8c:d5:ea:07:
                    33:d2:44:14:cd:be:95:da:c0:87:6d:e7:c0:43:ff:
                    0c:07:76:c3:fe:a4:80:aa:16:fa:5a:9d:98:c9:a3:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:31:E7:29:D3:1C:20:77:1F:B0:0E:4B:C3:21:51:FD:32:80:A1:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c082ea6c-1810-3d61-80c7-a96b5bfd85c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5f:3e:cd:01:74:b6:f8:a2:89:0c:e3:cc:de:c4:3e:2a:ff:
         cc:ca:9f:84:e0:73:c3:c3:49:7c:9f:34:ba:95:75:d4:47:bf:
         f9:ff:3b:72:93:bf:31:f8:6f:77:33:3f:70:b9:29:b2:86:1a:
         d3:ee:ec:c7:75:72:95:3b:a4:4d:a6:4e:ad:2b:1a:55:2b:0b:
         23:b2:be:a4:9a:d8:8b:15:99:bf:2b:70:bc:92:9a:a7:d3:85:
         07:78:ab:22:e1:b1:f5:2c:23:d2:72:aa:59:9c:9c:6a:14:a2:
         da:f4:8d:e1:59:e4:0d:03:84:c9:cb:1d:57:e4:cd:2f:e2:3a:
         c1:3e:f0:87:a2:c3:e9:72:c6:62:9e:06:6f:d2:db:f7:b8:ce:
         6c:f8:a0:04:de:db:08:a3:27:bd:67:f8:c4:b9:ba:d5:89:08:
         b4:58:64:ce:d0:16:a8:6c:2d:ef:fd:4c:d4:cc:e0:fc:62:3d:
         fa:b4:17:0e:fc:4e:2d:51:3b:e9:d1:1e:c2:4e:c3:7e:ff:68:
         a2:79:29:78:4d:ff:b3:b9:56:94:0e:0b:d3:41:1a:11:15:63:
         32:ca:e0:cb:79:84:53:c5:d2:7a:6a:1b:a7:7e:07:f3:54:f4:
         d3:8b:75:69:de:c5:b5:e0:84:8b:77:61:d8:8e:bd:06:4a:e0:
         17:25:04:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:44 2024 by rpki-client on console-fra.rpki-client.org