Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3a076cb-8e99-38ad-906a-cf20ea3f39ad.roa
File:                     e3a076cb-8e99-38ad-906a-cf20ea3f39ad.roa (raw, json)
Hash identifier:          ghk9bEIcS5byw+shJkmuQG/Qkp/e//elhF9UJGFdDD0=
Subject key identifier:   93:14:86:AA:9C:2B:F3:33:5E:84:73:E5:DE:9C:1E:24:DD:C0:9E:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847791CFB11B512936F59E2E2F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3a076cb-8e99-38ad-906a-cf20ea3f39ad.roa
Signing time:             Tue 08 Oct 2024 12:31:09 +0000
ROA not before:           Tue 08 Oct 2024 12:31:09 +0000
ROA not after:            Mon 06 Jan 2025 13:31:09 +0000
asID:                     396581
IP address blocks:        2001:500:120::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:1c:fb:11:b5:12:93:6f:59:e2:e2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  8 12:31:09 2024 GMT
            Not After : Jan  6 13:31:09 2025 GMT
        Subject: CN=8a50259d-7c34-43f4-bc8c-072197316f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:92:e7:b9:79:43:ba:5f:fa:72:58:85:63:69:
                    1c:5b:33:72:8e:59:a5:ac:af:3f:5f:26:44:a8:3d:
                    2b:11:63:c4:4a:ef:93:5c:72:87:35:26:f7:2e:c8:
                    ff:25:59:ad:4d:37:55:ef:44:36:1d:89:cc:67:34:
                    f0:c5:b7:a0:49:f6:fd:a9:43:cf:35:ef:94:f2:a0:
                    5a:54:07:5f:79:e8:6b:9a:18:02:61:86:21:16:a8:
                    7d:57:0a:a0:72:d2:b5:37:64:48:48:f3:bd:97:80:
                    e7:3f:36:84:1b:c4:19:2b:2a:75:3f:6d:73:78:0a:
                    d8:0a:a7:82:9c:ab:42:4b:60:fb:3b:ba:2a:b6:26:
                    01:67:0e:25:33:4f:36:f9:cd:1b:33:25:91:c4:00:
                    ad:e5:a0:33:c2:26:26:49:f7:13:c0:7a:1a:96:5e:
                    ed:2b:7c:2c:2c:81:0b:07:3e:ce:3c:32:9d:7c:9f:
                    ac:ab:b3:bc:9c:88:9a:fc:14:a4:d9:ad:1a:dd:bb:
                    78:b0:bd:4b:1e:ab:d6:b3:10:04:8f:6d:d6:b0:21:
                    b8:35:ba:8c:0c:33:f4:85:be:f3:10:98:24:f8:21:
                    d5:a0:51:38:01:df:71:05:1f:dc:fe:6c:5b:2b:35:
                    03:32:46:fb:78:7f:d6:97:5e:c5:e8:2d:67:a9:7b:
                    2e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:14:86:AA:9C:2B:F3:33:5E:84:73:E5:DE:9C:1E:24:DD:C0:9E:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3a076cb-8e99-38ad-906a-cf20ea3f39ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:92:49:aa:7b:4a:74:c6:ea:6d:ef:90:46:f7:a2:69:d1:db:
         69:65:22:5d:15:e1:f7:3a:ed:6e:91:b5:da:f3:74:d9:b1:14:
         10:0c:4d:a0:ce:7b:f5:a7:55:80:3b:9c:23:a4:95:58:2a:4e:
         26:5f:01:93:16:2e:c9:fe:ba:84:a1:05:8d:8f:a8:3f:fb:35:
         6b:fd:5a:4b:e7:c6:60:0b:8e:4f:e9:30:50:7f:4e:36:cd:62:
         b6:f2:36:5e:3f:47:1c:69:ac:26:3c:94:65:77:c0:1c:7b:c0:
         b8:3f:1f:1d:ec:14:5d:be:35:c0:74:6a:75:d3:ba:61:8e:81:
         58:80:35:ee:51:9d:9e:a5:4f:92:1b:ad:4c:12:9d:bd:82:09:
         57:ef:06:1c:24:6c:2c:29:fc:a4:40:6a:9a:e5:9e:e5:f3:41:
         05:90:85:8b:fb:b0:99:48:4c:d8:69:1d:7f:74:bb:23:d7:fc:
         6f:b1:dd:87:7e:b2:47:0e:c4:86:8b:46:c9:5b:77:f1:9d:fd:
         61:0d:65:5e:76:64:c1:37:a2:ff:f9:fa:a5:e8:f0:dd:9c:9b:
         db:b7:01:2f:9e:eb:51:37:ad:b2:0a:6c:64:af:32:ce:61:08:
         df:be:fb:04:22:cb:ec:8c:6f:f4:16:14:c9:8c:e5:67:f3:54:
         26:a9:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:49 2024 by rpki-client on console-fra.rpki-client.org