Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce1af884-2672-38e8-a1de-7fa3559cc4cb.roa
File:                     ce1af884-2672-38e8-a1de-7fa3559cc4cb.roa (raw, json)
Hash identifier:          Bmm7KYPIrvDMsCKmd8jPVLbaojjfMV5pQYnq3uVnNTs=
Subject key identifier:   EA:AE:28:9C:BF:F0:BE:2B:18:01:7A:70:39:81:E7:1F:C2:92:69:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476B2967EF0A46CA681D701B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce1af884-2672-38e8-a1de-7fa3559cc4cb.roa
Signing time:             Thu 03 Oct 2024 12:34:52 +0000
ROA not before:           Thu 03 Oct 2024 12:34:52 +0000
ROA not after:            Wed 01 Jan 2025 13:34:52 +0000
asID:                     396615
IP address blocks:        2001:500:121::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:29:67:ef:0a:46:ca:68:1d:70:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 12:34:52 2024 GMT
            Not After : Jan  1 13:34:52 2025 GMT
        Subject: CN=76c5ce80-ce03-4e5f-9d23-1aca705c8e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:82:bb:28:a6:8d:64:82:20:cd:56:7e:16:69:
                    fd:61:0c:1b:cc:6a:8a:09:11:0a:17:9c:20:28:0d:
                    e6:55:3f:cd:c5:db:4d:d8:96:71:fd:c2:2a:8c:e4:
                    72:60:21:c5:fe:ac:db:46:3c:f5:1a:ba:f1:87:a7:
                    1e:42:09:97:61:82:53:29:77:eb:60:20:69:a2:aa:
                    e1:8c:2b:d3:39:73:d9:ca:f0:b9:84:62:cd:a0:14:
                    13:d0:04:f6:48:2c:be:b6:fd:0f:50:0e:d4:2d:55:
                    7f:aa:89:9e:7f:91:51:00:83:ae:88:68:0a:26:f7:
                    9c:97:45:eb:80:04:d4:4a:bb:15:5b:73:5d:61:44:
                    e9:0f:08:6d:7d:c4:ae:48:be:61:50:68:39:ec:c0:
                    15:1f:fd:18:c9:41:ae:ed:08:0e:87:55:86:c6:2e:
                    04:52:e5:8e:ae:dc:d4:75:34:74:b5:8e:b6:87:2c:
                    2a:f9:cf:e9:14:53:eb:38:0c:47:f0:cd:34:80:49:
                    7e:99:81:89:ac:97:c5:e2:2e:e7:05:92:f2:de:7b:
                    ea:a6:7f:60:2f:c4:2f:c7:3a:27:10:31:3a:62:b1:
                    1c:a7:5e:6b:32:d7:42:d9:ed:56:4e:a5:2f:10:1c:
                    7c:12:99:e1:c4:3d:e3:29:f0:57:68:2c:23:95:b8:
                    35:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AE:28:9C:BF:F0:BE:2B:18:01:7A:70:39:81:E7:1F:C2:92:69:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce1af884-2672-38e8-a1de-7fa3559cc4cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:f2:42:b2:de:29:52:d9:9e:1d:c2:90:1c:ce:d6:05:a9:7a:
         c1:f1:8d:2e:64:3f:15:75:47:1f:03:f0:1b:9f:20:47:d8:60:
         62:41:9b:d2:a0:9e:b8:7d:2d:0c:41:8f:b4:e1:6b:f6:87:22:
         89:fc:69:44:f9:23:f7:23:c8:15:bd:92:78:cb:ca:47:00:17:
         9a:98:cb:6a:37:9d:30:99:52:2c:9e:0b:f6:5e:fb:68:2b:21:
         a2:f4:9c:6c:d2:11:78:1e:3e:11:a7:ee:29:d8:7a:46:ef:1b:
         ca:60:67:89:b3:9b:9e:b7:d8:ce:44:d4:40:ad:b8:d4:af:78:
         cf:d3:86:53:01:fe:82:b6:d5:f5:50:48:e6:9a:21:0b:4f:07:
         84:22:78:bf:96:5f:6e:1f:3c:67:48:d9:dc:02:6c:5a:42:e8:
         b9:60:e6:73:2e:4e:88:04:7e:23:39:5e:cd:77:40:3b:b1:d8:
         7f:31:4d:eb:02:25:62:59:1f:9c:64:77:2b:1f:a7:3c:8a:9a:
         02:04:23:05:f0:3e:aa:db:aa:e7:8d:f1:0c:11:58:e2:b3:61:
         04:52:b6:b5:5a:4e:24:41:5e:75:56:3f:4b:c4:3f:a3:43:50:
         b6:50:cc:ed:81:94:8e:16:a5:fc:cd:03:19:8e:ba:1c:1d:fa:
         50:65:93:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:46 2024 by rpki-client on console-fra.rpki-client.org