Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c44fc36d-9597-366f-840d-3016d33c17a0.roa
File:                     c44fc36d-9597-366f-840d-3016d33c17a0.roa (raw, json)
Hash identifier:          CK2bghZ/l88QcTyZUuwCbqwwXc5BPjQlrl/22nM/IXc=
Subject key identifier:   17:5A:F4:F8:BF:13:CD:7F:F3:50:F9:8B:2C:87:78:C4:7F:53:C0:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476B296D7561BDC7468C0FC480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c44fc36d-9597-366f-840d-3016d33c17a0.roa
Signing time:             Thu 03 Oct 2024 12:34:55 +0000
ROA not before:           Thu 03 Oct 2024 12:34:55 +0000
ROA not after:            Wed 01 Jan 2025 13:34:55 +0000
asID:                     397206
IP address blocks:        2001:500:121::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:29:6d:75:61:bd:c7:46:8c:0f:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 12:34:55 2024 GMT
            Not After : Jan  1 13:34:55 2025 GMT
        Subject: CN=ac56358a-36e1-4c30-b868-a60378f53cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:10:eb:46:6a:a1:ad:86:3c:f6:dc:c5:b0:c1:
                    7b:d0:0c:83:67:32:db:2f:06:56:c8:a0:d7:12:4b:
                    bd:d0:0a:4c:b8:42:2c:6b:74:75:94:a4:12:ed:7e:
                    10:ca:31:bb:27:44:ed:b1:21:19:92:bb:bc:a3:79:
                    f6:e5:a6:13:cc:75:da:ae:ac:71:71:7c:d5:b7:13:
                    b3:63:9d:fe:4e:02:93:af:ef:6b:d0:58:e8:f0:8f:
                    f6:d4:36:7f:4a:14:b6:df:08:c0:1f:8b:3b:3d:56:
                    5a:7a:15:c3:06:7f:8c:ba:96:90:87:64:fb:5a:08:
                    b7:5d:b3:7c:4c:23:05:f4:a7:86:80:8f:db:d0:67:
                    83:e4:48:37:06:f1:9c:ed:f6:56:a8:d5:09:ce:36:
                    8d:04:89:f6:c9:d4:f7:6d:82:f3:f2:39:f5:f6:32:
                    63:37:e4:6b:28:d9:2d:cd:81:ca:4a:07:2d:10:8a:
                    26:81:3d:f4:14:bb:f0:12:2b:81:d6:e5:f5:80:13:
                    0c:81:fe:91:d3:18:2a:df:3b:02:de:51:dc:db:69:
                    9f:74:b5:8e:54:58:a1:d5:d9:f7:9c:3e:1b:db:38:
                    27:0c:42:1f:e4:87:2a:6d:13:bf:a8:fc:09:05:9c:
                    82:c5:1a:3b:f0:dc:d3:98:f9:ff:94:c1:e8:4b:65:
                    dd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5A:F4:F8:BF:13:CD:7F:F3:50:F9:8B:2C:87:78:C4:7F:53:C0:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c44fc36d-9597-366f-840d-3016d33c17a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:16:1d:fe:d4:15:c9:2a:e8:cc:02:d3:54:7c:07:c5:92:02:
         d6:d0:79:a7:8d:0e:df:52:13:67:35:f3:5b:1c:35:e8:f3:e7:
         9c:ab:58:2b:ba:f1:02:28:23:14:1a:0d:29:83:02:6b:56:01:
         27:35:ff:06:83:8a:cb:9d:4e:84:6a:26:3e:06:3b:da:1a:80:
         08:66:55:a6:93:54:da:f4:93:6a:ef:4f:c3:0e:cc:22:dd:25:
         9b:07:4a:75:b8:c2:05:77:47:c7:80:2b:2a:2d:68:22:06:b9:
         a8:e2:34:04:42:6b:5a:05:62:7f:46:ee:63:42:0f:42:41:84:
         19:4a:e5:d5:1e:dc:78:2a:37:a9:32:85:78:1d:be:90:87:ee:
         b4:ba:ec:07:ae:19:34:95:64:d7:4e:37:6c:08:b2:34:b0:d5:
         1e:46:6f:5a:fa:ad:de:a5:1d:22:8c:c1:57:fe:2a:c0:25:dd:
         6b:cd:bf:67:4e:09:1f:fb:8f:06:68:54:45:92:e6:e7:69:70:
         a4:a3:b9:c0:bb:31:e0:f7:0a:21:18:a3:0c:94:b2:00:04:37:
         1a:b0:cb:b2:e7:be:c4:69:92:b9:7f:03:5d:5b:21:ef:55:f3:
         2a:7f:96:c2:6c:b2:bc:01:1b:44:72:aa:f8:3a:32:3e:9c:1f:
         cc:7c:1d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:15 2024 by rpki-client on console-ams.rpki-client.org