Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2fbca06-9169-3cfa-86d9-0e28de38a943.roa
File:                     f2fbca06-9169-3cfa-86d9-0e28de38a943.roa (raw, json)
Hash identifier:          CvX5vxvvpCb6A+d2wVyCCZaAAr9QmT4d20TguX8lU2w=
Subject key identifier:   D0:02:EF:65:83:05:62:96:F2:C6:69:6A:0C:E9:73:98:B8:FD:56:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EF1A5390AE5CCB93D00A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2fbca06-9169-3cfa-86d9-0e28de38a943.roa
Signing time:             Thu 26 Sep 2024 12:35:32 +0000
ROA not before:           Thu 26 Sep 2024 12:35:32 +0000
ROA not after:            Wed 25 Dec 2024 13:35:32 +0000
asID:                     396545
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:f1:a5:39:0a:e5:cc:b9:3d:00:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:32 2024 GMT
            Not After : Dec 25 13:35:32 2024 GMT
        Subject: CN=3941fe6a-4b88-4bf4-b55d-b489b2d95e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:c1:8b:44:d0:13:d1:9c:bc:f6:56:32:49:
                    cd:9c:c0:4b:cc:ff:e8:1d:73:04:0c:27:68:be:a4:
                    bd:d7:ef:55:e0:bc:9e:eb:4e:09:14:47:0d:9e:c3:
                    c6:20:b6:dc:d1:a5:7a:1f:04:50:2b:51:e6:e9:49:
                    3a:5d:9c:55:20:c9:ad:c4:54:70:b3:21:6e:8c:e3:
                    73:94:df:a9:66:33:8b:e3:d1:31:d9:de:6c:9b:4f:
                    e8:4d:89:6d:57:4e:15:d0:93:8e:50:59:f4:dd:fe:
                    ad:ea:1e:7c:75:42:62:10:00:a3:10:d9:a1:89:14:
                    5c:ce:bd:44:ee:10:c9:eb:88:4b:05:3d:c9:ff:cd:
                    cc:23:24:8e:fa:43:3d:c7:4b:9c:61:2a:05:7f:e9:
                    d3:85:89:d0:bc:6e:2c:a5:fd:60:d1:b4:c7:19:a6:
                    da:1f:78:9b:cc:fe:67:8f:90:6a:cc:8a:62:93:92:
                    04:d0:ed:7c:3a:18:8d:be:8b:31:ba:b0:59:3f:fc:
                    d4:88:0d:27:d9:a1:7d:dc:d4:bc:bd:61:32:ae:11:
                    45:25:ea:50:e9:b6:25:db:e8:22:08:b1:20:b1:9d:
                    dc:5d:40:79:f1:aa:87:a8:28:82:37:de:de:ef:fd:
                    04:f8:69:09:5d:b7:7d:3c:c3:0c:34:aa:f2:a7:de:
                    7b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:02:EF:65:83:05:62:96:F2:C6:69:6A:0C:E9:73:98:B8:FD:56:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2fbca06-9169-3cfa-86d9-0e28de38a943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d0:b6:eb:a2:b2:3d:c9:98:f2:96:81:65:be:44:9b:42:0e:
         dc:24:b2:eb:37:a3:cb:00:d4:54:7a:55:9c:2e:4f:80:0e:da:
         62:0f:ba:da:f1:56:d6:95:cf:4b:c0:41:16:b7:04:ad:43:25:
         f7:3d:68:34:45:92:a7:3a:3b:c4:97:4e:f4:d4:c4:89:66:f1:
         a6:4d:75:f3:73:cc:6f:10:5f:9d:5d:b7:a0:6f:80:b7:8a:63:
         3b:c4:76:79:40:00:56:ff:2b:5e:b7:5d:88:ed:39:96:ba:27:
         c6:8e:78:f1:4e:62:3f:db:53:49:85:d2:ff:52:81:6c:96:f3:
         6f:52:1c:c4:c6:dc:ab:6b:01:98:9f:49:b0:71:3d:00:a7:66:
         45:fb:37:d5:10:b4:9c:3c:b6:c9:54:ec:0e:8c:48:e3:44:7f:
         2b:81:94:a7:ef:eb:27:ea:c7:27:1d:ad:df:59:b6:59:50:a7:
         f4:82:24:d0:d1:87:d2:7f:6f:c0:30:44:d7:4c:50:c4:d3:12:
         43:22:f7:c3:ef:47:5a:83:75:42:a0:b3:aa:b1:c8:af:86:6e:
         0f:6b:5d:58:50:d8:39:64:a3:f6:3d:c3:3e:ac:a0:cd:6d:63:
         3d:fe:ae:6b:e2:d6:35:d3:3a:0b:51:f5:7d:2b:34:2f:4e:00:
         6f:49:0e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:52 2024 by rpki-client on console-fra.rpki-client.org