Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d773478e-bd4e-3432-8300-3f4843428f7c.roa
File:                     d773478e-bd4e-3432-8300-3f4843428f7c.roa (raw, json)
Hash identifier:          tqL2ek+5pQ5sotEuk43EPSwb32jMufG6cstsxf6KTb0=
Subject key identifier:   8D:43:76:A3:B7:3C:FE:56:53:81:6F:66:5A:26:17:74:29:7B:6C:F6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847818BBD019AC7342FE5386000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d773478e-bd4e-3432-8300-3f4843428f7c.roa
Signing time:             Fri 11 Oct 2024 13:00:41 +0000
ROA not before:           Fri 11 Oct 2024 13:00:41 +0000
ROA not after:            Thu 09 Jan 2025 14:00:41 +0000
asID:                     396615
IP address blocks:        2001:501:8a29::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:81:8b:bd:01:9a:c7:34:2f:e5:38:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 11 13:00:41 2024 GMT
            Not After : Jan  9 14:00:41 2025 GMT
        Subject: CN=e77e9809-5999-4fc8-9569-a97f145799e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7f:9b:dd:fe:61:80:a8:8f:8e:ba:6f:d6:40:
                    50:95:4e:90:08:50:b1:a2:75:6a:7c:da:61:b0:79:
                    cf:e5:10:e7:68:70:08:89:5e:15:40:ae:8a:55:8c:
                    80:fd:37:be:2a:d5:04:aa:42:62:9d:20:50:da:46:
                    37:10:46:0f:52:9b:d2:4c:fb:9f:89:b7:c4:0e:8a:
                    10:27:01:72:42:5b:34:2c:31:2e:ad:15:9e:2a:01:
                    74:dd:43:5f:1f:19:46:2e:5d:c6:c7:9f:9a:45:4b:
                    a9:56:2a:58:d0:ac:c4:b7:fc:9d:da:1f:2e:8e:72:
                    ac:1f:17:d0:05:94:fb:91:33:23:27:e2:51:2a:3e:
                    83:24:74:b6:66:14:d6:ee:0f:15:70:1f:82:bb:9d:
                    dc:f1:37:e0:cd:ce:2d:87:1b:6f:1c:37:a6:b6:3f:
                    70:72:11:83:63:b0:9e:db:d1:2a:82:c1:39:47:f3:
                    5a:2b:fd:22:56:de:49:fa:10:4d:e7:cd:d6:3f:0b:
                    db:ba:a2:64:63:7d:6b:16:6f:50:14:02:ce:1a:33:
                    4c:3a:76:ef:e4:ff:a7:f6:98:3b:e0:55:f4:c6:f1:
                    9c:d8:39:86:b3:5f:66:8f:04:55:55:31:72:3f:5d:
                    55:0f:05:9f:2b:39:0b:75:8a:46:c9:d2:ea:4c:e2:
                    f3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:43:76:A3:B7:3C:FE:56:53:81:6F:66:5A:26:17:74:29:7B:6C:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d773478e-bd4e-3432-8300-3f4843428f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b1:4a:71:05:67:3e:e7:f4:9e:74:30:52:a2:06:fd:4b:a1:
         a5:2f:0b:31:f7:07:1d:66:9b:37:10:a6:36:56:a1:6b:17:28:
         9b:59:53:19:f2:5c:3b:76:3f:27:36:f7:1c:16:cb:77:d2:6a:
         0f:06:0c:f8:62:11:5b:bf:3c:38:da:27:45:40:7f:63:52:83:
         d7:54:80:c2:e0:f8:e5:e1:d0:98:5b:80:d3:0e:9e:e1:0a:fe:
         d4:df:3e:9d:14:e5:27:d0:c2:90:e7:4e:6b:3c:36:7d:52:08:
         0b:76:d3:cc:34:32:bb:19:3b:25:ea:af:43:ad:1c:48:f6:ca:
         6a:b4:3b:e1:06:5d:fb:aa:7f:57:6c:a5:07:da:4c:f0:b2:e8:
         d5:fb:15:54:e5:73:2a:38:02:79:1c:94:7f:e1:80:6e:c6:fb:
         cd:1f:da:25:48:6b:51:1e:7f:cd:46:bf:c8:14:4f:66:de:f3:
         63:f7:4e:ed:97:3d:77:a0:27:d6:d2:5f:c5:de:17:28:0d:0d:
         91:90:d5:19:20:a8:eb:79:41:9b:b1:1e:f4:61:02:bc:28:0b:
         1a:ff:66:a6:ca:9d:06:fe:eb:fe:19:32:fe:28:8b:bb:0b:e4:
         71:5b:dc:01:19:20:aa:0a:0d:a3:32:80:f9:8d:be:e8:0d:6d:
         4b:43:78:ff
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEeBi70Bmsc0L+U4YAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAxMTEzMDA0MVoXDTI1MDEwOTE0MDA0MVowLzEtMCsGA1UEAxMk
ZTc3ZTk4MDktNTk5OS00ZmM4LTk1NjktYTk3ZjE0NTc5OWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX+b3f5hgKiPjrpv1kBQlU6QCFCxonVqfNph
sHnP5RDnaHAIiV4VQK6KVYyA/Te+KtUEqkJinSBQ2kY3EEYPUpvSTPufibfEDooQ
JwFyQls0LDEurRWeKgF03UNfHxlGLl3Gx5+aRUupVipY0KzEt/yd2h8ujnKsHxfQ
BZT7kTMjJ+JRKj6DJHS2ZhTW7g8VcB+Cu53c8Tfgzc4thxtvHDemtj9wchGDY7Ce
29EqgsE5R/NaK/0iVt5J+hBN583WPwvbuqJkY31rFm9QFALOGjNMOnbv5P+n9pg7
4FX0xvGc2DmGs19mjwRVVTFyP11VDwWfKzkLdYpGydLqTOLzFQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFI1DdqO3PP5WU4FvZlomF3Qpe2z2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDc3MzQ3OGUtYmQ0ZS0z
NDMyLTgzMDAtM2Y0ODQzNDI4ZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBQsUpxBWc+5/SedDBSogb9S6GlLwsx9wcdZps3
EKY2VqFrFyibWVMZ8lw7dj8nNvccFst30moPBgz4YhFbvzw42idFQH9jUoPXVIDC
4Pjl4dCYW4DTDp7hCv7U3z6dFOUn0MKQ505rPDZ9UggLdtPMNDK7GTsl6q9DrRxI
9spqtDvhBl37qn9XbKUH2kzwsujV+xVU5XMqOAJ5HJR/4YBuxvvNH9olSGtRHn/N
Rr/IFE9m3vNj907tlz13oCfW0l/F3hcoDQ2RkNUZIKjreUGbsR70YQK8KAsa/2am
yp0G/uv+GTL+KIu7C+RxW9wBGSCqCg2jMoD5jb7oDW1LQ3j/
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:16 2024 by rpki-client on console-ams.rpki-client.org