Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8406f43-0956-3a10-83a7-1a88bee01778.roa
File:                     c8406f43-0956-3a10-83a7-1a88bee01778.roa (raw, json)
Hash identifier:          2sdPu2dmQ0NvBt4yT81DtX/L5iePbsqGkE+G0mMzsvQ=
Subject key identifier:   74:E0:BA:1D:8F:94:3D:7F:97:9E:0A:AD:2D:96:51:89:C9:C9:AD:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847BC2C15DFE04AB0C5D1343550
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8406f43-0956-3a10-83a7-1a88bee01778.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     396572
IP address blocks:        2001:500:30ff::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:15:df:e0:4a:b0:c5:d1:34:35:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=f16047d4-396f-4841-8669-e5bc55666a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:52:26:a1:35:51:f3:d4:6a:61:0d:c7:ea:3b:
                    23:8e:b5:ce:85:5f:f7:1a:02:0e:49:50:db:9a:e6:
                    bc:27:2b:44:24:e7:5f:eb:ea:9a:ee:20:d8:a2:38:
                    e2:62:49:21:14:5c:c4:ec:b2:1d:5e:51:82:67:75:
                    d5:4d:d8:10:7d:6e:58:fe:94:21:b8:90:81:d2:d8:
                    ce:86:f8:09:9c:71:d5:bc:8b:63:6e:99:bd:36:44:
                    56:47:45:ef:78:1e:c4:90:0a:c4:21:3e:6c:73:a5:
                    22:36:20:a4:d9:0c:37:26:04:1c:5c:3b:1c:0c:da:
                    63:68:56:e8:01:ef:f2:31:5e:7c:d8:fa:d0:7d:93:
                    3a:e0:ab:53:d2:e2:e1:21:97:3b:a6:71:44:9a:0c:
                    af:72:e7:ba:6c:97:83:50:aa:fa:4f:39:53:14:ae:
                    3c:c8:2e:0c:24:03:96:75:97:b2:50:73:a3:e1:fb:
                    79:8f:92:8d:12:88:7e:5a:79:ea:a5:85:3a:dd:55:
                    c1:b4:21:96:14:59:69:cf:29:62:1f:21:17:19:48:
                    63:99:f0:b0:3b:56:de:8a:4a:64:bd:e7:ec:51:ee:
                    89:ca:44:d4:03:74:99:27:d3:43:c5:2d:48:da:3d:
                    1a:e5:d2:de:43:ac:a9:93:a2:5e:98:b6:15:46:19:
                    a2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E0:BA:1D:8F:94:3D:7F:97:9E:0A:AD:2D:96:51:89:C9:C9:AD:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8406f43-0956-3a10-83a7-1a88bee01778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:73:45:e5:2d:79:90:53:ab:ed:b4:70:17:d7:27:03:05:d4:
         a6:0d:89:27:0b:de:ee:b8:89:11:8e:3f:fa:c1:70:19:5f:e5:
         f0:1e:91:7d:1e:68:f9:bc:ba:37:bb:33:94:b5:eb:98:9d:38:
         25:60:13:5e:dd:de:a1:12:3b:73:4f:f4:fc:71:eb:9c:18:f2:
         75:4e:07:f2:f4:21:06:6e:cc:8d:1e:e7:25:7d:1d:e4:87:aa:
         42:f5:2a:cc:b5:0c:58:b4:33:5c:9a:ee:82:d9:5c:d0:a4:83:
         c9:ab:ab:50:a8:8d:89:61:3d:78:2c:3c:3f:91:55:52:20:9f:
         f9:41:0a:2a:a3:ef:b2:b4:92:65:45:06:ba:2d:4b:3b:74:be:
         f6:61:90:94:98:ee:19:71:63:f9:06:0f:00:e2:2f:c2:7e:b5:
         87:c5:05:c0:2c:86:d5:9d:54:02:d6:c8:03:bb:04:6d:f4:16:
         ed:81:a8:ba:85:f1:b9:f4:70:ec:2d:3c:a4:82:c8:42:54:6f:
         ee:11:3f:09:0f:84:88:56:e3:31:fd:9f:a9:03:12:56:c6:c6:
         f2:b9:76:e0:fe:fc:69:03:81:74:12:d4:5f:ec:e8:0d:01:04:
         64:e5:8b:15:35:4c:71:6e:22:30:66:4b:06:37:8e:90:ee:e9:
         10:5e:7a:97
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEe8LBXf4EqwxdE0NVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEwMTEzMDA0MVoXDTI1MDEzMDE0MDA0MVowLzEtMCsGA1UEAxMk
ZjE2MDQ3ZDQtMzk2Zi00ODQxLTg2NjktZTViYzU1NjY2YTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1ImoTVR89RqYQ3H6jsjjrXOhV/3GgIOSVDb
mua8JytEJOdf6+qa7iDYojjiYkkhFFzE7LIdXlGCZ3XVTdgQfW5Y/pQhuJCB0tjO
hvgJnHHVvItjbpm9NkRWR0XveB7EkArEIT5sc6UiNiCk2Qw3JgQcXDscDNpjaFbo
Ae/yMV582PrQfZM64KtT0uLhIZc7pnFEmgyvcue6bJeDUKr6TzlTFK48yC4MJAOW
dZeyUHOj4ft5j5KNEoh+WnnqpYU63VXBtCGWFFlpzyliHyEXGUhjmfCwO1beikpk
vefsUe6JykTUA3SZJ9NDxS1I2j0a5dLeQ6ypk6JemLYVRhmiQQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHTguh2PlD1/l54KrS2WUYnJya1dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzg0MDZmNDMtMDk1Ni0z
YTEwLTgzYTctMWE4OGJlZTAxNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA6c0XlLXmQU6vttHAX1ycDBdSmDYknC97uuIkR
jj/6wXAZX+XwHpF9Hmj5vLo3uzOUteuYnTglYBNe3d6hEjtzT/T8ceucGPJ1Tgfy
9CEGbsyNHuclfR3kh6pC9SrMtQxYtDNcmu6C2VzQpIPJq6tQqI2JYT14LDw/kVVS
IJ/5QQoqo++ytJJlRQa6LUs7dL72YZCUmO4ZcWP5Bg8A4i/CfrWHxQXALIbVnVQC
1sgDuwRt9Bbtgai6hfG59HDsLTykgshCVG/uET8JD4SIVuMx/Z+pAxJWxsbyuXbg
/vxpA4F0EtRf7OgNAQRk5YsVNUxxbiIwZksGN46Q7ukQXnqX
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:15 2024 by rpki-client on console-ams.rpki-client.org