Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fafc9d16-3880-3984-947d-1f4f9dbf1cb8.roa
File:                     fafc9d16-3880-3984-947d-1f4f9dbf1cb8.roa (raw, json)
Hash identifier:          RvW1uXgYe7n3Sg5yLUu+jdch8YMmawonnmChUFCmh6c=
Subject key identifier:   7F:ED:F8:D7:A0:8B:62:92:10:33:0F:34:A3:71:DF:4B:36:0A:9E:C5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847791CF4B173DF469D87A9B9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fafc9d16-3880-3984-947d-1f4f9dbf1cb8.roa
Signing time:             Tue 08 Oct 2024 12:31:06 +0000
ROA not before:           Tue 08 Oct 2024 12:31:06 +0000
ROA not after:            Mon 06 Jan 2025 13:31:06 +0000
asID:                     396550
IP address blocks:        2001:500:120::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:1c:f4:b1:73:df:46:9d:87:a9:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  8 12:31:06 2024 GMT
            Not After : Jan  6 13:31:06 2025 GMT
        Subject: CN=d8a320cc-3f45-4414-b38d-5caa2226771b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a2:6e:93:4a:2a:46:8a:7d:22:e4:e8:4c:7a:
                    22:5d:52:a1:0c:7f:63:30:78:e6:05:79:60:56:e1:
                    a5:bb:c9:3d:ee:22:b2:f1:8f:70:b0:08:f5:d4:18:
                    89:9c:ff:5c:32:ef:be:3e:e3:55:bf:83:27:49:d7:
                    2a:88:82:ff:b4:cd:66:5e:1a:ef:5a:48:8e:a2:fe:
                    0f:04:26:f2:8e:3c:b8:b6:f5:1a:fa:a5:14:55:47:
                    67:4b:0a:be:08:80:98:bc:a5:d6:e1:4f:62:89:33:
                    43:49:a5:50:78:ec:b7:98:1c:9d:d9:61:37:9e:6a:
                    c6:71:80:43:f8:dc:9f:60:c1:d3:17:36:8b:48:1a:
                    bc:9d:65:11:ce:4c:47:de:05:f8:65:24:e3:8d:2b:
                    7a:06:b7:60:b7:e9:e7:40:7b:6d:f1:fd:a6:96:55:
                    d2:0d:12:e1:5d:df:20:8f:a1:e3:86:ea:43:ed:d1:
                    73:2f:f0:d2:a5:67:47:40:4b:d0:a8:e7:d0:96:be:
                    2f:1e:cd:de:e0:bf:96:2d:a1:f5:5e:24:7d:5a:1e:
                    bd:09:76:0d:f6:58:f3:73:42:7f:2c:db:98:d8:23:
                    d8:46:99:13:10:85:b0:e5:e0:44:a1:73:e3:6d:11:
                    40:05:37:2f:45:e6:d5:c6:5a:4d:f5:75:8c:50:28:
                    26:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:ED:F8:D7:A0:8B:62:92:10:33:0F:34:A3:71:DF:4B:36:0A:9E:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fafc9d16-3880-3984-947d-1f4f9dbf1cb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:70:9f:0b:f4:b1:ed:14:df:ba:e1:c9:18:8a:0c:fa:92:51:
         13:00:f9:cf:15:1e:93:2f:2c:36:65:bb:f8:9c:07:3a:96:a1:
         c2:b3:88:54:6e:d2:6c:87:c1:b8:6c:41:22:d2:dd:27:c1:1d:
         aa:dd:61:44:b5:f6:81:2f:ae:0f:ec:17:30:7c:49:ff:9a:3a:
         8d:48:46:70:3c:2f:36:57:4f:ff:8b:4d:da:22:9b:a2:b7:c7:
         48:ad:79:01:86:69:1a:33:b3:fa:99:64:00:76:df:0f:e4:1f:
         3e:af:ce:11:41:cc:2b:71:19:11:88:50:aa:07:94:c0:34:10:
         ee:d8:c7:0d:f3:52:01:fd:05:74:c9:fd:d4:7a:63:a1:12:5b:
         fd:21:97:1d:50:89:b2:c7:c5:a0:e2:a4:8f:6b:f1:90:52:99:
         08:4d:51:c6:89:63:e6:d4:aa:31:cf:ad:8c:e8:93:66:7c:07:
         7d:ce:98:2b:6e:1f:ab:de:91:7d:48:c9:87:14:92:6c:e9:9e:
         7c:73:e9:21:0d:98:73:67:7f:fe:3a:78:bc:5a:34:fc:24:02:
         8e:60:55:03:fc:91:14:87:b4:91:ff:de:e7:a6:e1:a0:48:e8:
         78:cd:b9:8c:a9:c9:87:5e:ae:d5:36:e8:69:be:e9:61:d3:21:
         75:53:61:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:20 2024 by rpki-client on console-ams.rpki-client.org