Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c39a3ee9-7046-3bbb-8f53-da9645a93286.roa
File:                     c39a3ee9-7046-3bbb-8f53-da9645a93286.roa (raw, json)
Hash identifier:          hxJFnbWuEYZkLrHI9dpELS3t1rQ2gAOvytRx4DL96Gw=
Subject key identifier:   11:BC:57:3C:A4:7C:C1:98:52:2C:40:42:02:4D:02:B9:2E:9A:FB:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847AE36B021BC63512CF9904540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c39a3ee9-7046-3bbb-8f53-da9645a93286.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     396615
IP address blocks:        2001:500:7967::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:b0:21:bc:63:51:2c:f9:90:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=106f7438-e293-44bd-be48-49350ff48c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c8:cd:cc:54:b7:40:85:86:c6:fa:88:75:36:
                    72:20:92:8e:34:91:9c:a0:33:8f:f3:9f:a4:20:1d:
                    03:2c:e7:00:b1:39:74:36:33:65:b2:22:74:38:62:
                    57:73:74:f3:ba:b1:81:af:0a:75:96:c3:bd:ea:94:
                    08:5a:a6:ec:83:75:e0:77:67:32:c5:d4:6c:7a:50:
                    53:70:af:65:1f:18:45:01:1f:be:14:77:e9:54:79:
                    d8:55:28:31:4a:b1:79:ea:57:c3:53:a7:09:39:06:
                    12:5c:57:03:08:17:c0:bf:33:a8:f9:40:39:6b:c0:
                    97:b7:7a:92:de:4a:1b:38:48:bf:ae:41:d6:0f:80:
                    14:10:ec:9d:5a:82:80:1d:cc:bb:82:a4:41:45:d1:
                    e2:c1:27:1a:d6:38:e2:bc:22:b8:43:5a:48:ef:77:
                    1d:53:73:92:39:d4:4f:13:b1:9f:2a:c5:7e:f6:67:
                    b2:56:d9:e1:d4:cf:58:69:e2:65:d2:69:3b:69:50:
                    6c:d5:ad:7b:23:7b:ce:b9:8f:a7:b7:c5:5a:64:f9:
                    c7:3d:62:57:1f:14:fa:c5:15:5e:f6:c2:d5:af:58:
                    69:c7:37:f0:c1:c7:09:bd:ee:8d:b1:c9:64:57:52:
                    b8:3c:af:0c:0c:01:05:c3:58:66:2e:04:d4:84:2e:
                    f7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BC:57:3C:A4:7C:C1:98:52:2C:40:42:02:4D:02:B9:2E:9A:FB:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c39a3ee9-7046-3bbb-8f53-da9645a93286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d5:77:e4:29:95:62:84:4a:97:72:11:fe:83:ea:65:d3:41:
         d7:ba:a2:29:74:60:b3:55:44:85:92:ce:06:1b:eb:c0:0f:87:
         8d:71:e9:0e:41:c5:8f:c8:2f:f7:3b:a9:c1:97:75:84:1c:c6:
         aa:12:0c:d1:2b:74:c1:27:50:ac:8c:50:57:45:9e:1b:80:02:
         a5:8c:8e:d4:85:7a:f8:0f:f2:9a:93:7a:db:3d:dd:81:ce:cf:
         5f:77:d7:4e:f8:cc:c5:ff:8a:c8:9b:49:e0:e1:40:32:39:63:
         8e:96:89:72:66:e0:80:8f:81:b4:aa:4a:14:22:f0:96:be:91:
         39:7f:05:53:bd:ef:00:d7:92:83:a5:28:2f:34:d3:db:cb:60:
         a2:70:80:41:a9:37:83:9e:87:82:24:a7:68:0e:9e:6c:a2:f4:
         e6:52:c8:53:ec:2a:68:47:01:f3:30:c7:6f:6a:18:a3:97:36:
         65:d9:e9:28:7d:f9:10:9d:43:7e:86:cc:3a:c1:31:a4:f6:31:
         2c:d0:2e:dd:43:00:05:34:6d:7b:dc:15:38:88:3a:74:8d:8a:
         98:a6:92:09:a1:97:68:4e:65:3c:3c:93:87:fb:8a:1b:84:10:
         f1:ba:96:3f:51:4c:0b:34:37:d8:bb:fe:ac:83:c1:e8:ca:74:
         95:f6:91:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:45 2024 by rpki-client on console-fra.rpki-client.org