Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6ae9cae-5a15-363e-98fd-37a8c1b6ff45.roa
File:                     c6ae9cae-5a15-363e-98fd-37a8c1b6ff45.roa (raw, json)
Hash identifier:          OLyyeCKjyfUEc5qQUMlBxNuFnNcPoKQQenqLGJ5CD4k=
Subject key identifier:   11:A4:CC:76:C7:16:11:25:52:00:92:D4:0D:0C:4C:F0:A3:70:7F:2B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847AE36AD363329711B4178F480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6ae9cae-5a15-363e-98fd-37a8c1b6ff45.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     36620
IP address blocks:        2001:500:7967::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:ad:36:33:29:71:1b:41:78:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=ea35f559-6c90-4ba7-b26f-3a733869d751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ee:3b:54:3e:21:54:c3:5a:d0:0c:93:ef:7b:
                    5f:ed:8f:5c:5d:8f:be:b8:32:f0:17:2b:6e:d8:a4:
                    3f:a0:81:bc:ae:7b:9d:aa:2f:4b:a3:06:5a:12:e2:
                    ea:fc:1c:94:95:54:28:17:ba:55:13:a0:a8:79:12:
                    a7:6e:4b:11:cf:3f:17:ae:0e:e9:e3:5e:d9:db:f5:
                    b9:87:a8:59:c2:2c:d5:97:a9:de:3f:a3:e9:e3:5b:
                    76:7a:62:e8:5d:fd:38:df:be:5d:d7:4b:43:05:95:
                    39:50:52:9e:03:b8:4d:d4:1d:de:9a:ab:d7:00:fe:
                    ca:3f:4a:68:e7:28:ba:64:2c:28:d3:75:f6:53:00:
                    64:c9:4c:6d:d4:4e:7b:e7:53:44:0b:dc:e6:8d:32:
                    93:69:43:61:96:dc:91:38:33:85:e0:25:a9:4d:71:
                    81:f6:c6:3b:b1:0d:09:e5:71:45:6c:d4:ca:95:df:
                    77:cd:4b:5b:7b:4c:ab:b8:2f:fa:36:5d:e8:af:51:
                    15:02:91:77:b0:d8:ad:9d:ff:d9:d5:e6:9a:70:53:
                    43:64:ac:3c:80:c0:38:5b:4f:09:c0:a9:9a:a0:9c:
                    01:86:1c:ac:02:9b:a2:41:b5:46:b2:b9:59:99:85:
                    a5:b9:62:ad:f2:85:74:a8:77:0b:f5:3d:bc:79:b5:
                    d6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A4:CC:76:C7:16:11:25:52:00:92:D4:0D:0C:4C:F0:A3:70:7F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6ae9cae-5a15-363e-98fd-37a8c1b6ff45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:94:c8:7e:ed:a2:a2:56:70:a7:19:4b:27:3a:8e:d3:7c:dd:
         53:a9:9d:91:57:59:76:cf:20:d4:63:8e:c6:0f:44:d2:a2:97:
         02:93:33:e6:62:77:f0:39:3c:fe:22:75:43:ee:20:b2:1f:fa:
         e2:bc:7a:5f:05:d9:0e:e7:57:d3:e0:cd:f3:4f:cb:6a:a7:f9:
         93:bc:6c:a1:3e:55:6a:97:58:2a:29:b3:e9:c4:cf:2e:00:a1:
         c4:7f:b8:db:62:d5:66:b6:4c:0b:c0:13:31:a3:eb:0b:df:3f:
         2c:28:5a:ff:e7:37:cb:a3:b6:1f:29:2a:32:b2:f6:9d:62:72:
         e3:3c:9f:83:15:91:39:21:02:78:10:85:19:0b:8e:ea:f0:50:
         2b:3a:da:ed:62:17:1a:b5:64:43:1c:13:12:d1:ff:c8:d4:8c:
         eb:ac:2b:1c:ca:f9:76:21:25:91:d3:4b:07:c3:62:c3:33:85:
         0c:78:37:35:b8:b8:2d:17:0b:d7:46:81:4a:c4:d6:88:28:47:
         8f:cc:77:57:f4:ce:5d:fc:96:03:51:ba:3c:7d:33:98:0c:18:
         54:77:a7:20:5c:08:c3:24:4d:ed:71:dc:81:cd:b5:c3:61:dc:
         c2:b5:55:44:46:54:30:0e:1b:dc:c5:f4:f3:36:6f:c5:7e:e1:
         99:27:83:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:15 2024 by rpki-client on console-ams.rpki-client.org