Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf616b5a-bc54-3c7b-8d70-f3755938a894.roa
File:                     cf616b5a-bc54-3c7b-8d70-f3755938a894.roa (raw, json)
Hash identifier:          gqUIKEr+hZmfKuMpZ6o3Fm/p4WGq4i1ZS/EKufHpH8o=
Subject key identifier:   07:B9:77:3F:B5:17:44:13:76:82:42:C7:CC:83:BF:37:A4:38:15:1D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847AE36AB650E8CAB207C0AE620
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf616b5a-bc54-3c7b-8d70-f3755938a894.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     396613
IP address blocks:        2001:500:7967::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:ab:65:0e:8c:ab:20:7c:0a:e6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=8dde274e-1bf9-4bd6-9a3b-b3a4187a8d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:83:7f:b5:35:4b:87:49:c4:5b:ed:60:35:0f:
                    8e:1e:a0:d6:a2:73:91:b5:43:5e:5d:22:78:36:cc:
                    84:04:19:8c:54:f6:63:ec:9f:aa:d2:21:7b:63:06:
                    10:10:ce:c5:1b:ac:b6:90:33:6c:ad:70:be:6a:a1:
                    b3:8e:8d:04:66:69:39:e1:9f:1f:46:a8:6f:ad:bc:
                    be:58:ad:59:81:94:6a:3c:3d:59:c9:32:c7:ae:f5:
                    d7:0c:40:6f:24:f6:9a:a1:97:42:b4:88:e4:25:9b:
                    64:b2:86:fe:69:57:9f:e6:ca:46:ed:6c:0f:b2:61:
                    8d:bc:55:76:85:dc:e5:91:23:0b:2d:fc:0a:b8:05:
                    53:44:4b:7f:b0:9a:68:f6:19:b5:22:0c:03:c0:61:
                    40:f7:d8:dd:f6:ce:a9:d8:8e:e9:7b:f7:f0:77:74:
                    ae:27:28:7d:1f:14:4e:c8:57:08:76:94:c7:ad:29:
                    5f:e9:54:1a:c0:c6:ce:7e:d8:d1:43:52:f0:c8:15:
                    92:12:fa:01:cb:75:67:c1:0d:10:27:03:ab:2b:2b:
                    1f:5a:77:6d:ad:a5:22:06:f7:29:f6:58:e3:e5:6b:
                    9a:75:62:9c:25:a0:eb:ef:37:34:25:c2:a5:78:19:
                    e9:41:92:c0:fa:b0:f4:65:55:59:89:aa:c9:82:dd:
                    3c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B9:77:3F:B5:17:44:13:76:82:42:C7:CC:83:BF:37:A4:38:15:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf616b5a-bc54-3c7b-8d70-f3755938a894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:3e:e9:4c:ca:ed:7e:3c:3f:e1:2b:a4:f2:0c:98:ea:33:d2:
         0c:6d:df:6c:bb:ad:2c:5c:ec:b5:75:59:0a:4a:cc:c2:8e:31:
         a4:0b:54:45:7a:43:5a:2e:9a:b2:18:a2:61:d5:2d:61:6e:9c:
         c6:68:81:d1:29:d6:97:9c:e4:0c:65:7f:08:83:cf:af:cf:48:
         c2:37:75:75:4a:b6:20:7a:96:c5:57:74:1c:13:9a:14:1e:60:
         ea:be:66:d6:d0:68:16:b1:33:3c:31:96:26:ca:74:e4:59:4a:
         54:59:29:e2:4c:8f:25:fa:ae:35:4f:92:ea:2c:5c:cf:96:0a:
         cc:75:8a:7b:92:bd:bd:5d:87:27:95:d4:0b:cd:b9:c4:d2:47:
         64:bd:3b:41:4c:54:64:b9:c4:3f:f1:04:cd:4b:f1:d9:36:92:
         92:59:9f:f0:ae:89:5d:e7:6a:d7:44:ad:d6:97:30:8b:aa:cb:
         34:a5:1f:8b:32:77:e9:91:a5:28:52:49:35:e3:e4:b8:4a:07:
         72:24:79:79:53:b1:43:b0:6e:9a:89:10:06:75:eb:a9:be:45:
         db:16:41:29:57:e5:57:f9:71:2b:f0:4d:4d:e0:9e:f6:2b:1a:
         af:cb:31:2f:5d:1f:57:0e:3f:f1:e1:d7:3d:a9:a7:cf:ff:5d:
         40:ef:f7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:47 2024 by rpki-client on console-fra.rpki-client.org