Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e589ea3-93a2-3b92-bfc2-6cb23adfb025.roa
File:                     1e589ea3-93a2-3b92-bfc2-6cb23adfb025.roa (raw, json)
Hash identifier:          ZrbjIKGTqO19qSREW5C1vfAQgeNrJoweYIdtyQY460Q=
Subject key identifier:   CE:AE:60:5A:B1:CA:13:B7:AD:95:14:EB:36:24:E1:BA:61:19:A0:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0885C76EA237FE449D35A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e589ea3-93a2-3b92-bfc2-6cb23adfb025.roa
Signing time:             Thu 14 Nov 2024 13:35:46 +0000
ROA not before:           Thu 14 Nov 2024 13:35:46 +0000
ROA not after:            Wed 12 Feb 2025 13:35:46 +0000
asID:                     396561
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:5c:76:ea:23:7f:e4:49:d3:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:46 2024 GMT
            Not After : Feb 12 13:35:46 2025 GMT
        Subject: CN=375d4e2e-f903-43cb-b174-df667f2408ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:03:dc:73:da:55:0c:d3:dc:ba:e6:72:5b:
                    ba:37:39:60:bf:40:35:4b:25:1a:76:b9:66:86:48:
                    2c:f2:0b:27:04:f1:2e:65:0e:4d:52:02:06:e9:b2:
                    18:13:10:34:46:3a:2b:0c:cd:3e:60:48:9b:bb:e7:
                    b3:c5:d8:f6:c0:15:04:c4:9f:5e:31:89:0e:aa:5b:
                    a1:66:4a:4c:f4:b7:33:67:d3:b9:f4:bc:04:51:ba:
                    b7:81:31:75:87:74:1c:3a:de:66:4c:fe:bf:5a:fd:
                    b1:8c:47:56:f6:3e:67:51:11:4f:6d:b4:f0:aa:20:
                    8c:14:c9:61:e0:70:d3:79:4e:c6:e7:9d:25:13:8f:
                    6f:d3:9a:b3:c8:ce:93:dc:de:b7:88:0a:88:07:b0:
                    7b:c7:47:c4:0e:1e:41:ed:62:21:0c:f4:01:57:d9:
                    45:18:14:80:d5:4e:8c:da:72:74:c8:86:bc:03:54:
                    a9:58:e4:a3:f7:57:78:b0:09:b8:0f:59:84:b2:2d:
                    96:f5:9f:bd:a4:50:12:d4:9d:c4:04:58:e1:d0:c2:
                    f9:c7:df:59:13:42:7a:17:30:0e:82:67:e6:e8:8d:
                    05:e7:62:ca:38:17:3b:67:97:45:36:76:d6:65:86:
                    de:27:3e:ba:ec:e1:3f:9f:da:69:1b:f6:ca:ef:b1:
                    94:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AE:60:5A:B1:CA:13:B7:AD:95:14:EB:36:24:E1:BA:61:19:A0:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e589ea3-93a2-3b92-bfc2-6cb23adfb025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:fa:2e:e9:e6:d9:a9:16:c6:69:d9:bb:72:b8:ad:77:d5:d5:
         4c:7e:b8:10:15:40:e6:0d:91:17:5f:b6:3d:f5:ee:31:de:ab:
         fd:da:7d:05:9e:d1:17:69:8a:72:a5:87:44:a7:69:63:ca:51:
         0b:23:bb:41:cf:66:f7:66:95:b4:f6:3d:e1:22:89:80:c2:9e:
         f5:b5:d3:44:2b:9a:6e:ef:2f:2d:1e:7e:56:9c:99:09:f7:f3:
         36:71:26:1f:bb:5f:bc:a8:41:0d:05:f1:3a:c2:9a:87:05:82:
         06:2d:20:6e:db:da:83:79:1a:a1:87:c4:7b:af:fc:26:67:f0:
         49:84:01:c2:90:c3:52:ea:30:5c:63:77:ee:62:03:95:84:5d:
         92:d1:5b:57:10:01:8f:4d:3f:fb:1d:2a:2a:cf:51:bb:d6:a4:
         8f:d3:e1:e5:71:0c:d0:2d:39:b1:b7:41:dc:c3:64:c1:76:e4:
         e4:30:1a:ab:dc:0c:0c:2f:0c:af:b3:83:8d:5d:cf:54:aa:fb:
         b9:fb:69:9d:dc:a7:28:ee:f5:3c:e2:79:f5:a5:5a:dd:01:1b:
         56:71:f8:b3:fb:c9:30:12:98:16:2f:dc:ac:cf:4a:eb:20:53:
         40:e7:36:d7:5e:fc:cb:04:6b:e1:b4:cc:18:94:22:aa:fb:03:
         a9:0e:b9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:24 2024 by rpki-client on console-fra.rpki-client.org