Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fff8dccb-aed1-3cf1-9e44-a5047f453321.roa
File:                     fff8dccb-aed1-3cf1-9e44-a5047f453321.roa (raw, json)
Hash identifier:          ahOyL0EabI+Qtt1kyAChbKK10I8MCQlBO7O5xJC1Ax0=
Subject key identifier:   9F:56:9D:96:75:64:FC:C6:C9:DB:7A:16:2B:C5:19:C9:5D:28:C7:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858476593F7F624932BCA2E870380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fff8dccb-aed1-3cf1-9e44-a5047f453321.roa
Signing time:             Tue 01 Oct 2024 12:34:44 +0000
ROA not before:           Tue 01 Oct 2024 12:34:44 +0000
ROA not after:            Mon 30 Dec 2024 13:34:44 +0000
asID:                     396568
IP address blocks:        2001:500:122::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:93:f7:f6:24:93:2b:ca:2e:87:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  1 12:34:44 2024 GMT
            Not After : Dec 30 13:34:44 2024 GMT
        Subject: CN=3d06899f-9378-424b-9357-2d3c1c075ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ba:6f:26:27:54:9e:a6:72:36:62:85:89:fd:
                    2b:b7:de:d0:b1:b8:0b:96:b9:5e:57:c9:85:bf:73:
                    59:18:8b:f4:7d:b1:3a:96:27:51:b3:6d:24:86:18:
                    45:48:d7:4e:be:97:b4:e9:07:ec:69:a8:f0:85:89:
                    d2:2b:9f:7d:45:64:57:ad:0a:15:ad:ca:81:44:fd:
                    6f:b6:7e:27:65:0e:39:52:bb:e2:2c:26:3d:2f:ee:
                    31:e1:53:20:81:73:e5:ec:2d:30:d7:41:93:6f:d7:
                    2f:3c:b0:c2:62:0c:2d:bb:be:5e:97:0e:a6:b1:e6:
                    e4:b3:62:7c:73:36:09:a7:95:e4:01:bf:d5:fb:6b:
                    e6:a7:f7:b8:d3:0d:a6:48:68:95:11:57:d1:01:1e:
                    6a:ae:be:3c:48:75:0b:23:35:f3:d1:35:20:16:ab:
                    90:8b:5f:bf:1c:6a:94:51:65:90:65:0a:07:88:19:
                    97:b1:ed:3e:8f:cf:be:e5:7a:98:fc:7b:8c:ac:72:
                    6c:d0:29:de:9b:14:de:63:97:96:82:f7:25:b8:cc:
                    c6:07:16:7b:1b:30:37:b8:d0:36:26:87:aa:b6:27:
                    64:3a:95:29:17:25:9e:a6:13:79:9f:08:9c:ce:1e:
                    1b:7e:7c:b3:7f:20:b5:de:61:46:35:93:9f:ae:ad:
                    a6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:56:9D:96:75:64:FC:C6:C9:DB:7A:16:2B:C5:19:C9:5D:28:C7:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fff8dccb-aed1-3cf1-9e44-a5047f453321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:72:72:b6:ab:72:d3:1f:d4:4b:d5:ff:6c:a7:b9:d3:8c:c5:
         74:64:5d:81:22:ba:ab:a1:e9:e1:a8:b5:00:f4:27:3e:c2:df:
         1c:32:eb:d4:5d:0d:2a:6e:bc:ed:7a:c0:9f:33:48:25:b4:12:
         3f:84:b6:22:de:3e:75:c3:b8:c5:68:b9:a9:6c:28:74:34:e5:
         b8:8f:99:8c:1d:8b:07:69:1a:75:e5:fb:ef:29:83:c4:db:4c:
         7d:65:c4:67:42:51:54:31:62:6f:d6:47:25:ca:c5:c0:98:7c:
         b2:fa:80:7a:75:d9:c4:53:df:a1:99:47:31:c7:ec:3f:83:ca:
         8f:9d:66:05:f7:88:aa:8d:ef:c1:0c:02:8b:c9:46:80:f7:e8:
         32:54:b9:0a:69:34:79:73:0e:d3:e3:4b:bc:8e:6b:52:bb:4e:
         b8:e9:19:0d:48:9b:91:9a:78:80:4a:6f:e3:61:06:02:48:e6:
         61:0b:33:92:24:80:67:d5:b2:f9:fa:e9:32:b4:48:56:00:13:
         53:9d:60:5c:0f:29:c5:0b:5c:46:72:8f:84:b9:6c:24:f8:59:
         6c:50:fb:8b:b8:ab:ad:f2:bb:3d:31:1c:80:da:3d:93:a9:6e:
         0c:c3:8c:18:e9:09:b0:9d:11:b0:66:c6:58:35:d1:38:db:76:
         5b:a6:52:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:20 2024 by rpki-client on console-ams.rpki-client.org