Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef5f25ed-8dc5-3208-98a0-226390383ad3.roa
File:                     ef5f25ed-8dc5-3208-98a0-226390383ad3.roa (raw, json)
Hash identifier:          43bYbpxA5SOHI4LTQRxFd61N5vsVQOpYIrvQsey2G4U=
Subject key identifier:   1E:DA:43:A4:DB:76:4A:C5:FB:F6:F6:AF:4A:AE:71:FE:06:3E:77:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476593FAEDA10530D7E4062300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef5f25ed-8dc5-3208-98a0-226390383ad3.roa
Signing time:             Tue 01 Oct 2024 12:34:45 +0000
ROA not before:           Tue 01 Oct 2024 12:34:45 +0000
ROA not after:            Mon 30 Dec 2024 13:34:45 +0000
asID:                     396616
IP address blocks:        2001:500:122::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:93:fa:ed:a1:05:30:d7:e4:06:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  1 12:34:45 2024 GMT
            Not After : Dec 30 13:34:45 2024 GMT
        Subject: CN=7b842b30-85d7-4e4b-9b29-04adc6a4f3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:ce:db:da:f6:6a:1c:18:9a:5b:52:06:8a:
                    1c:fb:3e:02:2d:ff:51:a0:aa:4b:52:d2:a5:90:2d:
                    d6:50:89:86:5a:42:42:3b:02:6d:89:39:9b:15:df:
                    5f:6a:93:30:b1:4a:47:7b:9c:cf:f8:65:eb:89:45:
                    e4:ed:ea:d1:ae:a4:34:03:9d:c0:5a:e3:be:b8:d1:
                    63:64:cb:d9:d0:eb:e7:90:8e:52:f7:39:fd:59:a1:
                    83:03:6a:27:5f:14:e8:86:99:17:50:c1:5c:9d:b0:
                    87:25:8e:e3:13:4c:20:d7:b9:74:81:77:fe:a1:a6:
                    2d:71:bf:29:e9:50:b4:ba:24:e8:9e:b4:28:7b:0a:
                    34:9b:aa:11:22:79:14:29:d8:59:76:3b:4a:b0:53:
                    de:c2:9f:27:bf:f4:f1:27:f4:aa:cd:64:c4:76:01:
                    5b:eb:2d:20:03:1a:39:37:a8:3b:e7:3c:e0:38:96:
                    19:a3:b4:26:e5:2a:ca:26:d1:58:34:22:7d:94:f7:
                    73:6e:ea:f6:f2:79:3c:2f:d2:ab:a7:f7:fc:89:61:
                    6b:58:a1:12:77:17:44:21:50:df:cd:10:a0:8c:27:
                    87:2a:1b:52:34:eb:a0:26:cc:08:71:c5:59:08:55:
                    8e:6e:a6:ce:cc:ba:73:1d:6f:e1:b5:c4:2e:c7:11:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DA:43:A4:DB:76:4A:C5:FB:F6:F6:AF:4A:AE:71:FE:06:3E:77:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef5f25ed-8dc5-3208-98a0-226390383ad3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:13:b7:6a:5c:19:b4:e1:fe:41:b4:19:38:61:1b:f8:05:3b:
         15:6e:6d:f6:9d:72:ad:5c:da:d4:48:ba:65:88:12:03:e6:0a:
         86:fe:cd:2c:10:5a:1a:be:e7:6c:51:cf:86:d1:31:9c:2b:28:
         0a:b7:33:b2:29:85:df:15:1a:ab:60:27:02:2d:ec:7c:7c:c3:
         64:a3:84:e1:70:8b:7d:d8:35:32:9d:8e:a6:38:08:ba:ff:a8:
         a3:f2:49:97:9f:fd:c6:ca:37:1b:0e:c1:9f:e8:93:5d:14:c8:
         6f:7d:39:f1:9c:f7:4d:0c:d7:e7:ae:c6:8a:cd:d6:9b:cd:a1:
         b4:15:fa:ff:9d:1d:fb:d3:7e:7a:a8:7c:2e:62:7d:ce:a7:7c:
         22:7d:84:63:4c:08:46:e3:3f:97:e3:75:25:7f:5e:17:e1:49:
         a2:f5:ac:67:9d:c0:97:2b:8f:c2:70:2a:53:ba:cf:34:a6:9b:
         6f:54:a7:85:35:e4:f6:ec:e8:01:1d:3c:95:2c:43:91:00:1e:
         94:47:dc:ff:47:05:4d:8c:df:fe:3d:e4:2d:1a:c0:6c:5f:4d:
         22:a7:55:d5:f2:33:a2:b9:1b:51:69:50:d4:99:ad:38:a7:90:
         cc:47:cb:cb:56:3e:e5:f9:2b:bd:4f:ee:fd:02:ad:9e:2b:b1:
         e7:87:b6:a5
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdlk/rtoQUw1+QGIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAwMTEyMzQ0NVoXDTI0MTIzMDEzMzQ0NVowLzEtMCsGA1UEAxMk
N2I4NDJiMzAtODVkNy00ZTRiLTliMjktMDRhZGM2YTRmM2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5XO29r2ahwYmltSBooc+z4CLf9RoKpLUtKl
kC3WUImGWkJCOwJtiTmbFd9fapMwsUpHe5zP+GXriUXk7erRrqQ0A53AWuO+uNFj
ZMvZ0OvnkI5S9zn9WaGDA2onXxTohpkXUMFcnbCHJY7jE0wg17l0gXf+oaYtcb8p
6VC0uiTonrQoewo0m6oRInkUKdhZdjtKsFPewp8nv/TxJ/SqzWTEdgFb6y0gAxo5
N6g75zzgOJYZo7Qm5SrKJtFYNCJ9lPdzbur28nk8L9Krp/f8iWFrWKESdxdEIVDf
zRCgjCeHKhtSNOugJswIccVZCFWObqbOzLpzHW/htcQuxxGKOwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFB7aQ6TbdkrF+/b2r0qucf4GPnd8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWY1ZjI1ZWQtOGRjNS0z
MjA4LTk4YTAtMjI2MzkwMzgzYWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCHE7dqXBm04f5BtBk4YRv4BTsVbm32nXKtXNrU
SLpliBID5gqG/s0sEFoavudsUc+G0TGcKygKtzOyKYXfFRqrYCcCLex8fMNko4Th
cIt92DUynY6mOAi6/6ij8kmXn/3GyjcbDsGf6JNdFMhvfTnxnPdNDNfnrsaKzdab
zaG0Ffr/nR370356qHwuYn3Op3wifYRjTAhG4z+X43Ulf14X4Umi9axnncCXK4/C
cCpTus80pptvVKeFNeT27OgBHTyVLEORAB6UR9z/RwVNjN/+PeQtGsBsX00ip1XV
8jOiuRtRaVDUma04p5DMR8vLVj7l+Su9T+79Aq2eK7Hnh7al
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:18 2024 by rpki-client on console-ams.rpki-client.org