Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16b6b7ca-3e50-34b6-acf1-dd30d60cae13.roa
File:                     16b6b7ca-3e50-34b6-acf1-dd30d60cae13.roa (raw, json)
Hash identifier:          Pfs6Z3OUnL266214skaT1BjkgWHd4dwRbYkW6YThWDQ=
Subject key identifier:   9E:0C:07:4B:73:90:35:B5:AB:63:AD:95:9F:57:B8:7F:CC:2D:D0:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CD00CA74936422DC34385741
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16b6b7ca-3e50-34b6-acf1-dd30d60cae13.roa
Signing time:             Thu 07 Nov 2024 13:42:15 +0000
ROA not before:           Thu 07 Nov 2024 13:42:15 +0000
ROA not after:            Wed 05 Feb 2025 13:42:15 +0000
asID:                     396555
IP address blocks:        2001:500:135::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:00:ca:74:93:64:22:dc:34:38:57:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  7 13:42:15 2024 GMT
            Not After : Feb  5 13:42:15 2025 GMT
        Subject: CN=dbd86043-7c75-47c8-853a-967744aaefcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:24:ee:83:97:28:f7:7a:b9:c7:dd:5b:63:
                    9a:f4:de:31:b9:9f:de:0d:15:73:70:4f:82:9d:18:
                    05:68:dd:e4:6f:66:c2:d1:79:81:b1:a1:67:75:68:
                    20:9a:46:99:6d:e3:a8:cb:66:6d:e9:e7:85:bc:5b:
                    d6:44:38:9d:4d:d7:69:e7:a8:19:07:54:ea:85:b9:
                    66:71:05:7c:5b:9e:25:ef:fa:0c:fa:b2:ee:bb:ef:
                    a7:9d:2a:8d:24:30:43:00:48:6a:65:9c:7d:80:42:
                    b2:66:ac:40:d0:7c:20:18:6b:b1:87:40:c0:ca:91:
                    a3:f7:a5:60:4f:a4:ac:81:e8:d3:88:21:12:89:99:
                    13:30:c4:c8:38:51:07:ec:20:2a:ee:c1:47:90:1c:
                    60:16:4e:81:a5:39:33:02:62:6b:9f:86:aa:b5:35:
                    fb:8b:7b:8f:91:76:97:70:15:23:08:46:ce:5a:16:
                    54:d9:03:d0:ab:cc:23:a0:4f:f5:05:43:75:e9:40:
                    84:05:49:28:fd:7c:bd:f1:84:96:64:1c:cb:49:35:
                    85:d9:e9:28:f0:fb:a2:85:c4:cd:86:71:bc:4a:65:
                    49:12:be:97:b6:74:0c:01:75:0e:be:46:4a:90:9d:
                    ef:8f:22:4a:2e:43:26:41:50:55:94:76:82:b0:f0:
                    13:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0C:07:4B:73:90:35:B5:AB:63:AD:95:9F:57:B8:7F:CC:2D:D0:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16b6b7ca-3e50-34b6-acf1-dd30d60cae13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:9c:5a:0a:24:11:17:6c:47:bd:67:ba:e8:95:d0:3d:b6:3d:
         f7:dc:c9:2d:74:aa:7e:ca:38:01:53:0f:ff:50:a6:8d:6c:59:
         26:f0:94:a0:a2:7c:49:e8:8d:e8:df:dd:ef:49:98:87:0d:b1:
         85:07:b2:0d:9c:7c:f4:08:37:0b:44:f9:7a:a7:94:ac:04:e2:
         5a:4b:0d:ce:88:20:83:3a:d6:98:23:e0:43:42:ff:11:29:1b:
         1d:85:24:13:12:49:e1:1b:fd:32:ed:d0:db:ee:74:7a:e6:32:
         75:1c:f6:ec:44:8e:b4:88:17:24:99:f3:21:06:cc:27:12:ee:
         f3:fa:e2:53:d6:ad:91:d5:31:6a:3f:4a:2d:c7:e2:a2:2f:1c:
         c8:0a:bd:4d:ba:ba:09:56:ff:57:6a:e7:32:2b:ae:f8:2c:ef:
         93:8e:c4:6d:0a:19:8a:e3:85:40:45:c8:8d:35:a9:dd:34:77:
         2d:05:60:69:d0:a7:7e:09:86:91:98:33:d7:c9:5b:bc:9e:f0:
         5d:36:67:dc:3c:ae:05:cb:ee:6e:4a:31:4d:c0:90:9a:12:39:
         92:42:8d:49:45:e1:b1:2b:42:39:c7:a1:c9:f0:2c:33:d5:5b:
         72:1c:e8:9a:04:76:a6:59:ca:cd:9f:b2:88:28:15:01:55:ec:
         9e:4c:26:05
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfNAMp0k2Qi3DQ4V0EwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEwNzEzNDIxNVoXDTI1MDIwNTEzNDIxNVowLzEtMCsGA1UEAxMk
ZGJkODYwNDMtN2M3NS00N2M4LTg1M2EtOTY3NzQ0YWFlZmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMUk7oOXKPd6ucfdW2Oa9N4xuZ/eDRVzcE+C
nRgFaN3kb2bC0XmBsaFndWggmkaZbeOoy2Zt6eeFvFvWRDidTddp56gZB1Tqhblm
cQV8W54l7/oM+rLuu++nnSqNJDBDAEhqZZx9gEKyZqxA0HwgGGuxh0DAypGj96Vg
T6SsgejTiCESiZkTMMTIOFEH7CAq7sFHkBxgFk6BpTkzAmJrn4aqtTX7i3uPkXaX
cBUjCEbOWhZU2QPQq8wjoE/1BUN16UCEBUko/Xy98YSWZBzLSTWF2eko8PuihcTN
hnG8SmVJEr6XtnQMAXUOvkZKkJ3vjyJKLkMmQVBVlHaCsPATuwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJ4MB0tzkDW1q2OtlZ9XuH/MLdClMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTZiNmI3Y2EtM2U1MC0z
NGI2LWFjZjEtZGQzMGQ2MGNhZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB3nFoKJBEXbEe9Z7roldA9tj333MktdKp+yjgB
Uw//UKaNbFkm8JSgonxJ6I3o393vSZiHDbGFB7INnHz0CDcLRPl6p5SsBOJaSw3O
iCCDOtaYI+BDQv8RKRsdhSQTEknhG/0y7dDb7nR65jJ1HPbsRI60iBckmfMhBswn
Eu7z+uJT1q2R1TFqP0otx+KiLxzICr1NuroJVv9XaucyK674LO+TjsRtChmK44VA
RciNNandNHctBWBp0Kd+CYaRmDPXyVu8nvBdNmfcPK4Fy+5uSjFNwJCaEjmSQo1J
ReGxK0I5x6HJ8Cwz1VtyHOiaBHamWcrNn7KIKBUBVeyeTCYF
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:58 2024 by rpki-client on console-ams.rpki-client.org