Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f722cbce-9dbb-34a1-9bea-54ca2b2e49de.roa
File:                     f722cbce-9dbb-34a1-9bea-54ca2b2e49de.roa (raw, json)
Hash identifier:          VA8/kMB8e9KRrihWHTN6Egw459UScrd6XTDs0CBaWfI=
Subject key identifier:   B7:E2:2F:16:77:12:DC:3E:0B:7A:82:64:91:CB:98:47:28:BE:97:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EF2E8E1403ECCD297C680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f722cbce-9dbb-34a1-9bea-54ca2b2e49de.roa
Signing time:             Thu 26 Sep 2024 12:35:32 +0000
ROA not before:           Thu 26 Sep 2024 12:35:32 +0000
ROA not after:            Wed 25 Dec 2024 13:35:32 +0000
asID:                     396577
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:f2:e8:e1:40:3e:cc:d2:97:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:32 2024 GMT
            Not After : Dec 25 13:35:32 2024 GMT
        Subject: CN=2de51471-ba97-49a5-b65a-6f5581599113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fd:df:3b:b5:4c:9d:77:fb:fe:fb:7b:8f:eb:
                    d1:5d:f6:3f:d1:53:0c:34:78:cb:c6:19:65:06:1d:
                    5d:7a:c7:b0:e3:86:29:8f:02:fa:84:b9:b4:22:ea:
                    b6:96:d5:b3:42:21:9c:73:57:6b:b7:62:b6:07:b4:
                    d9:31:f2:d6:dc:68:52:3d:c4:33:c5:77:b1:76:1a:
                    6c:31:61:7e:68:76:de:47:a9:34:dc:fa:68:ea:6f:
                    22:94:97:56:4c:07:65:60:9d:67:bc:e3:b5:44:11:
                    42:13:ba:cc:87:49:73:b7:cb:44:c0:27:16:b1:84:
                    b6:ea:59:a9:14:cb:02:5e:f9:ab:25:bc:7b:2a:87:
                    13:ad:57:98:9e:f0:26:cd:8e:2e:c9:25:b9:dd:7b:
                    92:b7:5d:04:10:83:30:b5:76:66:8a:78:f8:14:df:
                    ea:94:1f:30:d5:1e:b3:85:c2:ee:1c:ac:bc:d1:5d:
                    f3:84:0a:e4:27:57:d3:80:6a:73:12:0c:1c:84:f8:
                    e9:2c:62:57:b2:8b:a8:7d:39:13:8b:3e:90:40:67:
                    8c:6b:39:95:5f:e6:57:66:d6:c7:39:9e:c7:b7:7a:
                    6a:25:d8:39:a3:7b:8e:b7:61:b0:03:da:5c:17:7d:
                    eb:c1:0f:1c:21:82:e4:24:54:73:a3:7c:df:4b:b9:
                    22:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E2:2F:16:77:12:DC:3E:0B:7A:82:64:91:CB:98:47:28:BE:97:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f722cbce-9dbb-34a1-9bea-54ca2b2e49de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:8b:50:83:6d:c2:34:eb:eb:9a:d5:73:a6:33:a8:ea:b6:01:
         a3:2c:94:3d:d2:09:e5:ca:23:4e:a8:8b:52:c0:9d:2b:02:53:
         a3:16:aa:cb:f9:7f:d5:49:be:e1:dc:4e:85:9a:c8:d8:d6:20:
         96:34:22:01:c2:da:85:0e:f5:dc:57:63:80:7b:a4:81:2b:cf:
         71:3d:17:71:6c:7e:9f:9d:de:44:e0:bb:04:f7:be:39:57:45:
         13:32:25:11:78:d5:bf:d0:ae:fc:0b:e9:13:2a:16:7d:ed:e2:
         cf:a0:10:4f:96:d1:d0:f3:ef:c3:17:54:fb:a1:05:7c:66:4b:
         ba:a1:52:4e:1f:56:23:1e:2c:47:c9:75:60:95:02:42:b2:af:
         ac:aa:40:e6:3b:c4:38:f5:2e:d4:e5:1c:9c:f6:76:13:21:2f:
         38:7c:74:53:59:07:42:63:83:cb:1c:65:cb:6f:29:83:e8:bd:
         80:34:e9:a0:6f:d4:39:c1:99:64:b2:e8:d1:92:f6:fd:b9:71:
         36:4c:62:89:f2:42:21:0e:09:3b:c2:65:05:c6:64:a5:31:00:
         ea:7d:87:4a:dd:ea:d8:b5:1f:b5:63:69:2c:be:7e:17:f9:3e:
         87:3c:51:21:cb:58:ba:4b:61:56:aa:22:49:01:eb:3e:74:66:
         fe:66:30:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:53 2024 by rpki-client on console-fra.rpki-client.org