Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1162e1a9-09d6-3b44-a91e-84fa4bec5621.roa
File:                     1162e1a9-09d6-3b44-a91e-84fa4bec5621.roa (raw, json)
Hash identifier:          sQuoscW5U7do3SM4HK6Sr7a/cXbAwKXSYWhRae81vps=
Subject key identifier:   B6:87:50:05:14:46:6C:94:94:82:64:92:20:FE:C3:84:45:52:FE:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF51F3C49D803EDD31E0180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1162e1a9-09d6-3b44-a91e-84fa4bec5621.roa
Signing time:             Tue 12 Nov 2024 13:40:04 +0000
ROA not before:           Tue 12 Nov 2024 13:40:04 +0000
ROA not after:            Mon 10 Feb 2025 13:40:04 +0000
asID:                     396592
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:1f:3c:49:d8:03:ed:d3:1e:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:04 2024 GMT
            Not After : Feb 10 13:40:04 2025 GMT
        Subject: CN=ef7f5c1d-f701-4162-ae58-6ecd64daba5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:77:a0:13:de:c8:c4:bb:97:10:7a:4f:f9:e2:
                    d5:17:d4:0d:bf:f0:e9:b6:31:a8:64:97:f7:2f:90:
                    de:f6:65:b9:b4:8c:a1:e1:81:65:66:86:60:6d:03:
                    38:2a:29:d6:7b:49:e4:4e:b6:31:8c:8e:dd:20:89:
                    cb:0f:3b:43:4a:21:b0:60:9e:b3:5e:ef:42:c2:d7:
                    2a:74:e4:4d:9b:14:b5:04:47:e7:8b:4a:24:e5:ea:
                    1f:0f:78:09:44:62:e5:b4:ab:b8:c0:d5:5d:15:16:
                    1d:89:55:bb:e6:f9:d6:ef:27:f7:c7:fa:02:db:8b:
                    23:9f:70:cd:43:2d:34:6f:8c:23:ed:85:7a:d6:2e:
                    49:85:51:88:60:89:fc:51:45:63:af:fc:e8:f5:e4:
                    de:10:47:a1:01:73:5e:87:ee:18:e9:37:26:f8:d5:
                    35:bc:d3:c2:ae:38:95:0f:c1:a0:c8:6c:b8:6f:fb:
                    55:cd:e6:e3:d0:f2:c6:d2:05:3e:ab:34:ee:2c:38:
                    be:e0:e4:2f:e1:29:a2:49:8d:fd:68:59:1d:e2:16:
                    87:f2:e2:5b:df:7d:de:48:a4:33:91:39:a5:0b:13:
                    1c:c8:52:08:96:e0:9c:21:d4:5c:ba:14:37:77:55:
                    f9:5f:a3:6b:95:6c:05:65:57:f4:d9:7a:26:fa:0f:
                    e9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:87:50:05:14:46:6C:94:94:82:64:92:20:FE:C3:84:45:52:FE:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1162e1a9-09d6-3b44-a91e-84fa4bec5621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a0:ea:14:40:0f:94:c4:39:e1:41:2a:86:05:e1:af:05:ca:
         71:c5:19:ee:93:61:00:bd:92:b8:18:45:a4:64:4d:88:50:01:
         00:6b:81:04:d2:b0:8b:4a:57:ce:d4:8f:8e:94:bc:6b:a4:ec:
         79:49:26:80:dd:e5:7f:a1:01:35:7c:98:64:bc:53:25:2c:3c:
         c1:b3:9f:42:54:4e:79:4c:27:da:04:55:b9:25:c6:20:90:49:
         77:cd:e3:5a:77:66:13:81:98:7a:1b:12:44:39:c4:61:6e:c9:
         2d:07:6e:41:3d:2b:01:98:a3:15:b6:b4:11:ea:4a:c0:cc:de:
         5f:08:3b:fe:94:53:b7:d5:78:56:19:65:be:24:79:30:f4:d2:
         5d:c5:27:3b:6b:17:5a:4e:e4:79:9a:12:04:e8:53:5a:98:95:
         bf:39:b6:15:a5:73:7b:85:b1:b9:14:21:b5:1b:b1:6d:2f:2b:
         0f:0f:97:f4:26:7b:c4:5c:cb:aa:2e:58:d8:fc:f3:22:46:13:
         d2:e9:a9:30:2e:b6:fc:8d:c3:c9:c7:d5:00:76:eb:f4:33:7d:
         a5:3e:d2:68:2e:6c:26:20:0d:f3:e9:e7:31:fd:ed:c5:c7:6f:
         a5:e1:39:1f:ac:79:8a:b7:02:5c:d7:c0:dc:e4:8b:bb:a5:d2:
         3a:92:40:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:23 2024 by rpki-client on console-fra.rpki-client.org