Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb02b090-a739-3970-8df1-845d0e185476.roa
File:                     fb02b090-a739-3970-8df1-845d0e185476.roa (raw, json)
Hash identifier:          0dNe9cEpmiU6aaheO0EH8LS2bDXvLKInklijLCsoE1w=
Subject key identifier:   30:C0:53:00:96:FA:40:DB:64:AF:DE:C4:35:56:0D:4E:74:1D:2D:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847579EF0FA7B104EC844B00B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb02b090-a739-3970-8df1-845d0e185476.roa
Signing time:             Thu 26 Sep 2024 12:35:31 +0000
ROA not before:           Thu 26 Sep 2024 12:35:31 +0000
ROA not after:            Wed 25 Dec 2024 13:35:31 +0000
asID:                     396540
IP address blocks:        2001:500:123::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:9e:f0:fa:7b:10:4e:c8:44:b0:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 12:35:31 2024 GMT
            Not After : Dec 25 13:35:31 2024 GMT
        Subject: CN=87f5a94f-8682-442c-87b7-f82f030fae81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:23:02:31:ff:01:12:4a:ad:61:df:3a:7f:44:
                    93:b4:f1:29:78:5b:1c:54:6b:04:53:3f:f6:f4:9d:
                    50:7f:d9:a5:fd:2a:07:35:25:75:72:72:9a:58:9a:
                    ab:68:d2:f0:17:37:2f:30:b1:63:a7:fd:06:2a:22:
                    be:45:b0:cd:53:92:bf:13:55:a4:44:21:76:ee:a5:
                    48:f2:be:41:31:41:93:18:d6:f6:ae:ef:4b:5c:5c:
                    8f:f7:26:c6:45:0d:83:30:e0:2c:47:87:47:4a:f3:
                    89:c8:1e:26:45:2a:49:32:1f:82:26:78:a1:39:68:
                    ec:6c:a2:ca:3c:8f:c5:9b:41:aa:ac:54:1e:a8:b8:
                    1a:d7:40:00:fa:a5:43:90:a9:17:c9:df:e5:f8:e4:
                    a8:a6:47:3f:99:3d:93:fe:a4:56:3e:8c:ae:a1:1c:
                    b2:cd:47:09:fe:47:e6:0a:a4:64:61:9e:26:6c:eb:
                    99:e0:10:c2:db:b6:8f:5a:f8:40:eb:11:13:96:ae:
                    93:40:ee:a1:ff:9e:cf:34:a7:b4:29:58:64:d0:41:
                    73:68:0a:6e:4e:b7:05:ec:93:73:e9:9d:8a:1a:e2:
                    f1:b6:76:b7:b1:00:84:e6:32:6d:a6:d7:d6:ae:f3:
                    39:3d:ab:12:c6:88:e7:b0:62:c6:b8:07:78:aa:16:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C0:53:00:96:FA:40:DB:64:AF:DE:C4:35:56:0D:4E:74:1D:2D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb02b090-a739-3970-8df1-845d0e185476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:35:12:dd:a5:49:fb:57:22:c0:17:17:2d:41:66:f4:3d:9a:
         a0:fc:02:cd:ae:b5:01:17:60:b6:13:16:54:93:c6:fc:d7:fe:
         1e:b0:17:a0:eb:a1:84:c0:9e:b6:b4:a4:66:68:97:b2:2a:23:
         9b:74:e4:7d:26:ea:97:1b:07:4a:98:a7:c0:64:d1:81:be:e1:
         1d:fb:a6:7a:d5:f4:e1:8c:3f:9e:28:68:dc:63:32:3e:8f:59:
         35:74:2d:33:36:9b:20:59:4d:fe:b6:08:35:1e:9b:55:0c:24:
         fc:7d:7b:20:29:38:fe:a9:86:23:da:d8:0b:65:6e:3e:5d:eb:
         5b:26:bb:db:e4:22:dc:b5:02:d6:1c:c7:06:a4:38:de:c6:c4:
         f8:e3:69:69:2d:a8:f7:f7:85:62:45:09:81:5f:69:90:46:8a:
         d4:86:fc:b3:f5:3a:eb:eb:e2:5c:30:9f:e1:7b:7b:8d:fd:3e:
         a4:b4:2d:c6:83:d7:eb:e7:2b:7b:b5:37:35:9a:42:51:cb:af:
         dc:c6:2e:a1:c3:40:dd:a4:af:e4:dc:a6:b6:f9:0d:cb:86:09:
         f1:84:07:94:5a:4a:15:1f:ac:80:54:82:c8:45:0b:22:8e:0d:
         5c:58:46:01:01:b4:fe:26:b9:bc:cc:bb:6d:55:98:9d:c3:38:
         93:87:0b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:53 2024 by rpki-client on console-fra.rpki-client.org