Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee1c5c96-b60d-3e24-bde5-dfb7727f78df.roa
File:                     ee1c5c96-b60d-3e24-bde5-dfb7727f78df.roa (raw, json)
Hash identifier:          jzB7rrcDMss3pKm0ofhQE53pFWZ9o4j1r8RltToLQpk=
Subject key identifier:   AF:A0:A8:3A:CF:1B:86:BF:0C:39:94:D6:26:08:E5:86:CA:52:AA:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847AE36AFBCE748A6BBC4637D10
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee1c5c96-b60d-3e24-bde5-dfb7727f78df.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     397194
IP address blocks:        2001:500:7967::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:af:bc:e7:48:a6:bb:c4:63:7d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=7436f863-b23e-4126-9c29-2a26b019a191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:f6:0a:a8:0b:80:a6:5c:9c:8b:96:85:80:
                    c6:c6:ee:ae:90:5c:d0:ca:fb:85:7e:2a:a1:00:58:
                    e0:fb:8d:aa:ec:23:ad:a7:50:c3:04:31:ff:ff:6c:
                    e9:37:1a:a0:f0:97:71:85:ad:bc:e6:eb:7e:ab:fa:
                    85:65:5c:bd:14:24:c6:ec:46:bc:fe:aa:9e:ab:e1:
                    f1:19:a1:ed:f5:a0:f7:cd:1d:66:e1:c7:a1:0a:57:
                    05:c8:48:27:48:7d:6f:47:63:a3:7a:0e:b4:03:c9:
                    6d:73:76:08:2f:b5:e0:54:fb:50:ff:60:cd:c2:c3:
                    e9:13:df:ea:79:ab:b1:43:0a:d2:e7:5e:df:7e:e0:
                    b2:7b:70:42:4a:1c:ce:70:0f:03:b2:66:58:90:26:
                    fb:4e:8b:d9:c0:7c:34:d2:aa:9e:8b:33:f7:90:ad:
                    2a:36:aa:7a:38:5a:30:5d:40:fc:f8:98:1f:e0:29:
                    9e:15:8e:fa:9f:87:fb:51:81:1c:30:f8:e0:ff:c2:
                    33:ea:9b:5e:de:6d:bf:1a:83:55:61:ab:9e:d3:1d:
                    d9:c8:60:9f:7a:0c:f8:a9:ad:69:4b:47:64:4b:53:
                    f4:8c:c9:0e:14:8f:e8:b4:74:aa:35:15:35:aa:c6:
                    b6:62:46:8b:85:b1:0a:15:59:ae:d4:5b:5a:0b:8a:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A0:A8:3A:CF:1B:86:BF:0C:39:94:D6:26:08:E5:86:CA:52:AA:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee1c5c96-b60d-3e24-bde5-dfb7727f78df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:21:03:45:20:0c:b7:0b:07:7b:50:07:13:98:24:31:04:91:
         6b:0b:28:47:c6:7e:0c:b3:9c:6d:e3:75:e2:9e:74:4c:0c:8f:
         de:56:10:0f:fb:f3:43:0a:3d:01:99:3e:c2:31:ac:12:ff:03:
         cd:50:88:15:ad:5d:79:c9:c3:8c:a7:16:09:52:45:e4:fb:95:
         45:bc:12:31:af:c6:6a:55:7c:ce:84:c6:f0:28:b5:86:fb:b2:
         98:94:d8:89:49:e6:e0:7a:59:2c:b7:f3:66:f8:6b:1f:ae:9c:
         d8:6c:e7:58:b2:f9:9b:a3:d6:9f:07:22:14:45:76:2e:57:c9:
         95:16:3a:dd:79:53:36:a9:32:ff:8c:df:2d:82:56:99:3d:54:
         7f:6f:03:be:4d:6d:ca:96:a0:84:98:82:ed:0d:3d:98:92:ea:
         45:7a:26:41:a6:8d:89:14:c0:60:d0:b5:49:70:5d:51:6a:22:
         5c:b0:6f:40:4b:31:27:39:41:5c:42:0a:86:c8:9a:a6:65:45:
         4e:54:ce:d3:f8:d1:b1:2e:e6:57:88:03:7b:e9:0f:e1:df:98:
         39:e8:be:64:f2:da:7b:75:5e:7b:f8:6c:d3:ac:6d:2d:da:2d:
         96:0f:75:2d:46:bf:4e:f6:eb:e8:51:7b:76:ae:bb:e0:81:2f:
         f7:c3:d2:89
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEeuNq+850imu8RjfRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
NzQzNmY4NjMtYjIzZS00MTI2LTljMjktMmEyNmIwMTlhMTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI32CqgLgKZcnIuWhYDGxu6ukFzQyvuFfiqh
AFjg+42q7COtp1DDBDH//2zpNxqg8Jdxha285ut+q/qFZVy9FCTG7Ea8/qqeq+Hx
GaHt9aD3zR1m4cehClcFyEgnSH1vR2Ojeg60A8ltc3YIL7XgVPtQ/2DNwsPpE9/q
eauxQwrS517ffuCye3BCShzOcA8DsmZYkCb7TovZwHw00qqeizP3kK0qNqp6OFow
XUD8+Jgf4CmeFY76n4f7UYEcMPjg/8Iz6pte3m2/GoNVYaue0x3ZyGCfegz4qa1p
S0dkS1P0jMkOFI/otHSqNRU1qsa2YkaLhbEKFVmu1FtaC4ox2wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFK+gqDrPG4a/DDmU1iYI5YbKUqpZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWUxYzVjOTYtYjYwZC0z
ZTI0LWJkZTUtZGZiNzcyN2Y3OGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBOIQNFIAy3Cwd7UAcTmCQxBJFrCyhHxn4Ms5xt
43XinnRMDI/eVhAP+/NDCj0BmT7CMawS/wPNUIgVrV15ycOMpxYJUkXk+5VFvBIx
r8ZqVXzOhMbwKLWG+7KYlNiJSebgelkst/Nm+GsfrpzYbOdYsvmbo9afByIURXYu
V8mVFjrdeVM2qTL/jN8tglaZPVR/bwO+TW3KlqCEmILtDT2YkupFeiZBpo2JFMBg
0LVJcF1RaiJcsG9ASzEnOUFcQgqGyJqmZUVOVM7T+NGxLuZXiAN76Q/h35g56L5k
8tp7dV57+GzTrG0t2i2WD3UtRr9O9uvoUXt2rrvggS/3w9KJ
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:51 2024 by rpki-client on console-fra.rpki-client.org