Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2744456-10f6-3054-92ed-2d24b30723f3.roa
File:                     c2744456-10f6-3054-92ed-2d24b30723f3.roa (raw, json)
Hash identifier:          eZQ7x/dcg67JNMvGVTXzVuXz2yWcJfIpa8paEcs5WfA=
Subject key identifier:   A2:FD:81:BC:2D:0A:A6:C6:E0:39:9D:27:39:D4:EE:66:38:14:9C:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476593F9DC6AE15F558E0CF680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2744456-10f6-3054-92ed-2d24b30723f3.roa
Signing time:             Tue 01 Oct 2024 12:34:45 +0000
ROA not before:           Tue 01 Oct 2024 12:34:45 +0000
ROA not after:            Mon 30 Dec 2024 13:34:45 +0000
asID:                     396826
IP address blocks:        2001:500:122::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:93:f9:dc:6a:e1:5f:55:8e:0c:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  1 12:34:45 2024 GMT
            Not After : Dec 30 13:34:45 2024 GMT
        Subject: CN=0cd28ced-59e7-48f8-acc5-63127579e520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:87:6f:35:89:b8:45:ed:a1:12:25:59:8e:27:
                    0c:9a:ac:45:4a:a7:bf:43:b4:65:be:0f:b4:b1:cf:
                    eb:f2:39:3c:24:82:bf:27:be:69:68:62:f1:22:f6:
                    1d:33:2d:4b:43:ac:57:e7:f3:4d:f8:a6:67:14:dd:
                    77:a3:f4:27:62:4d:2d:0f:53:64:62:ff:29:85:86:
                    cf:85:53:31:dc:85:f6:4c:36:f2:99:ba:5a:71:cf:
                    dc:32:91:dd:c0:8d:fc:0c:74:85:74:e6:8c:f3:15:
                    58:6b:9e:6a:0d:4c:c5:cb:47:0d:fe:6b:f0:a5:6f:
                    dd:af:68:54:92:0c:12:a9:dc:98:80:1e:f5:e4:9f:
                    d3:0a:54:9b:9e:40:c7:23:90:2b:04:f0:74:a1:83:
                    a9:50:4b:15:e4:b7:71:7e:89:ae:23:d6:e2:26:bb:
                    54:7f:d4:2a:17:57:71:66:01:6a:62:16:2d:64:ab:
                    8a:26:67:ca:11:be:26:dc:7b:7e:ec:0f:82:78:fb:
                    20:d5:e4:8f:0d:ed:61:26:8a:4e:04:84:42:d2:4d:
                    d6:99:e1:81:80:02:02:fa:a1:1f:26:12:e2:2e:92:
                    5b:7c:4c:4e:35:2a:30:20:6f:05:f1:f6:db:a1:33:
                    4e:5f:39:8f:17:98:80:15:be:ec:a2:d8:c4:d5:a8:
                    8e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FD:81:BC:2D:0A:A6:C6:E0:39:9D:27:39:D4:EE:66:38:14:9C:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2744456-10f6-3054-92ed-2d24b30723f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b9:53:e5:5c:6b:71:f0:0f:ad:2f:21:06:ed:72:da:8b:5c:
         1f:be:93:87:f9:92:5b:09:d4:b9:a5:87:a4:f5:7a:6a:cd:80:
         0c:fd:dc:4d:59:a3:6b:cb:ff:7d:66:16:26:9d:af:0c:e5:a9:
         cd:d5:fb:d0:50:57:39:15:3c:77:18:8e:9e:6f:fb:af:99:4a:
         95:06:bb:77:5f:9a:cf:b6:cf:6a:3a:90:ef:9c:9c:67:eb:17:
         83:f7:71:c0:26:25:d7:82:a4:42:9c:7e:74:86:54:82:cc:64:
         91:68:4d:be:d8:b0:d2:2c:bd:46:fd:fd:ea:c9:f2:5c:be:0a:
         0c:c1:ff:ba:50:91:f0:49:a0:f0:15:be:8f:96:c6:74:a1:73:
         b7:4c:43:43:dc:05:f4:ff:df:74:2c:53:c1:28:1f:a8:10:ea:
         1a:01:2f:21:88:08:d2:c6:b9:7b:12:4b:d0:43:4d:67:65:c2:
         54:d4:ff:12:77:67:0a:51:e0:7b:0e:b7:11:0f:22:9a:fe:3a:
         33:10:1c:3c:6e:f4:ab:51:5c:db:55:86:33:c0:b5:8b:62:e0:
         87:0b:78:bf:53:5c:e1:c5:3a:7c:5f:8e:45:b3:d7:ef:4a:73:
         fa:a2:76:61:70:f0:56:c3:16:44:f0:af:ad:14:8a:77:59:ee:
         df:7c:7f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:14 2024 by rpki-client on console-ams.rpki-client.org