Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eefd4dd1-17f8-3a79-b9b2-844d79f88d52.roa
File:                     eefd4dd1-17f8-3a79-b9b2-844d79f88d52.roa (raw, json)
Hash identifier:          2lm3J9Lxzr7g1DTWcAjSKlA8KpcuPrgWu6jLUB9f+NM=
Subject key identifier:   A8:06:E9:EB:E5:96:F5:CA:6F:C3:C1:E2:78:D1:F7:93:59:17:86:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847818BB4D2601CB2B932EFC980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eefd4dd1-17f8-3a79-b9b2-844d79f88d52.roa
Signing time:             Fri 11 Oct 2024 13:00:41 +0000
ROA not before:           Fri 11 Oct 2024 13:00:41 +0000
ROA not after:            Thu 09 Jan 2025 14:00:41 +0000
asID:                     396561
IP address blocks:        2001:501:8a29::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:81:8b:b4:d2:60:1c:b2:b9:32:ef:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 11 13:00:41 2024 GMT
            Not After : Jan  9 14:00:41 2025 GMT
        Subject: CN=785aed8d-cc4b-4f7a-9158-2870940d699c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:4a:0d:b6:68:fb:db:6a:13:a8:1f:13:ef:
                    30:af:57:ef:13:e2:68:89:da:4b:9e:44:92:de:9c:
                    71:05:06:03:c6:12:b5:5a:f8:fd:2d:bf:64:97:0d:
                    a3:34:c6:68:f8:f1:b7:c3:c7:e1:36:be:40:84:76:
                    97:af:96:b9:bd:4a:bc:61:bd:f0:c0:c8:b0:e5:f3:
                    8a:62:ce:d0:68:a3:1d:de:d6:94:a6:d4:45:b1:18:
                    cd:5d:ca:53:4b:33:ed:b8:50:8f:97:bd:65:98:f8:
                    06:14:d0:96:64:2c:c3:09:08:bf:2b:20:a3:8f:fa:
                    0d:8c:dc:93:76:cb:a6:cc:ee:37:b8:7b:9e:44:2e:
                    26:5d:2a:cf:c9:32:7f:03:b1:d4:8a:c4:93:fd:ef:
                    ef:11:60:16:5a:dd:9e:a2:8c:91:bb:0a:60:7c:6f:
                    5c:17:91:e7:3f:bf:b9:0a:4b:ff:91:4f:48:94:30:
                    44:bf:1b:7b:b2:00:1e:4d:46:5e:12:5a:14:f8:21:
                    14:68:e0:03:ab:40:65:a7:3a:48:c7:07:a0:b7:78:
                    f0:47:c5:cf:99:d6:71:61:5d:8e:30:35:5d:d3:26:
                    57:fc:10:27:37:15:24:08:47:29:da:d2:10:3b:8c:
                    6c:9a:d4:4a:75:79:5b:73:49:d0:c5:bf:53:0a:3b:
                    b7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:06:E9:EB:E5:96:F5:CA:6F:C3:C1:E2:78:D1:F7:93:59:17:86:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eefd4dd1-17f8-3a79-b9b2-844d79f88d52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:40:3c:58:7d:62:63:76:4a:af:1a:26:69:f4:24:55:81:66:
         8a:8e:b5:93:67:06:d0:e2:db:90:18:73:90:7e:5d:71:3b:11:
         aa:44:62:af:1a:71:1c:af:de:01:c0:22:3b:8c:b7:4d:87:e3:
         57:22:e3:61:3c:f3:7e:2c:9a:55:74:ca:ea:88:54:1b:9e:28:
         b3:05:c0:b0:12:4c:c2:48:4f:b2:2b:f4:84:c9:ca:6b:ea:62:
         b4:93:57:93:11:e9:16:86:3a:91:25:a4:d5:b1:7b:9b:67:09:
         ac:53:14:af:58:0b:54:0c:ef:92:d3:85:38:0d:2f:56:79:ff:
         5a:9b:ab:f8:e8:1b:2e:a9:e8:15:98:7c:f0:61:b7:70:84:d4:
         e4:ee:56:90:b5:20:35:98:0d:d8:1d:6d:86:92:6b:f5:b9:7e:
         2f:79:17:32:a5:39:16:20:cc:72:3c:18:28:d2:99:55:6e:53:
         26:50:5d:c2:db:c3:5d:1e:36:b0:94:25:f3:3f:79:42:16:9a:
         2b:39:dc:5f:99:58:77:16:af:d4:76:b1:4e:3d:ea:0e:85:90:
         4f:55:0a:02:1a:a4:4f:59:79:72:9f:36:9b:3d:17:28:36:40:
         82:3a:76:8e:65:88:f4:9f:62:61:7e:ed:d2:3b:2f:50:b4:a9:
         ef:eb:52:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:51 2024 by rpki-client on console-fra.rpki-client.org