Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e909739-8dde-3b87-91a3-15e4978a6ece.roa
File:                     1e909739-8dde-3b87-91a3-15e4978a6ece.roa (raw, json)
Hash identifier:          A+KmN2w4lQHlrE/eHpB19JNcmLSj9YiPj7UvzxPULKY=
Subject key identifier:   A8:39:9F:73:3E:D5:AF:0D:D2:71:AF:2C:7A:86:F7:AF:19:89:3F:18
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF51F294F890CD45E6C3800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e909739-8dde-3b87-91a3-15e4978a6ece.roa
Signing time:             Tue 12 Nov 2024 13:40:04 +0000
ROA not before:           Tue 12 Nov 2024 13:40:04 +0000
ROA not after:            Mon 10 Feb 2025 13:40:04 +0000
asID:                     396587
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:1f:29:4f:89:0c:d4:5e:6c:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:04 2024 GMT
            Not After : Feb 10 13:40:04 2025 GMT
        Subject: CN=84d2a118-752c-4cf1-bbe0-ff0f4e3f39c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:de:1e:b8:cf:4c:35:d6:47:6d:ae:58:56:ae:
                    59:8c:59:6d:4d:d3:c5:b6:15:f4:b7:34:77:5b:24:
                    59:4e:eb:ac:54:ed:a0:2b:b5:0c:11:25:05:b3:fb:
                    0a:ba:c7:23:07:8a:da:ed:b3:7b:04:79:7f:64:9f:
                    52:fa:7c:0f:c0:cc:c3:04:0d:0e:22:89:74:1b:2a:
                    da:88:67:ea:c8:7d:b7:f7:e2:9b:68:67:3c:2c:be:
                    bf:4b:e8:69:f4:f4:b2:d4:e0:4e:da:b8:81:c3:5d:
                    be:99:08:a1:01:e8:2e:b4:48:41:51:be:2e:ff:ef:
                    ce:a6:b8:10:d9:94:fc:c1:08:62:2a:c8:87:50:c6:
                    c4:74:6c:db:b6:a0:f1:5c:42:05:ed:1f:d4:dc:54:
                    47:41:c1:65:ba:32:13:a6:0f:5a:9c:3c:89:4d:3e:
                    38:3f:8c:08:f2:28:a3:25:e8:af:24:b9:c2:f9:ec:
                    2f:06:6e:a7:34:cd:ea:14:d0:0c:b2:61:83:7c:d6:
                    21:ee:e9:15:bd:cf:6a:a6:99:d4:73:49:6d:3c:15:
                    ff:3f:6f:94:42:83:5f:30:66:fe:02:88:6a:05:db:
                    f5:58:20:d5:1f:fe:0c:3a:3e:75:c2:f8:ee:8e:47:
                    cf:47:5c:0e:7d:4f:43:4b:d6:13:78:58:9e:3e:a2:
                    73:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:39:9F:73:3E:D5:AF:0D:D2:71:AF:2C:7A:86:F7:AF:19:89:3F:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e909739-8dde-3b87-91a3-15e4978a6ece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d5:03:42:2d:2f:67:17:c4:b3:67:60:a8:1e:76:02:6f:73:
         38:ee:bf:36:99:60:07:2e:57:60:74:f2:94:4a:22:89:19:da:
         fd:96:f6:4a:2c:58:e8:50:dd:c9:bd:a1:f2:86:a9:83:40:0c:
         19:9b:7e:a1:5c:15:76:65:40:1e:f5:81:db:a8:35:51:99:ba:
         b9:39:54:01:c8:c5:b4:fc:91:c9:a9:63:d9:96:e6:83:63:52:
         79:fb:2a:b1:06:cc:3c:f0:e3:e3:61:4d:7a:d2:4c:b2:a4:3b:
         66:4b:d6:84:80:f5:4b:d2:98:0e:a2:8d:6e:c7:eb:30:0a:05:
         77:33:6b:b4:09:45:85:8f:1d:f2:f4:d5:f0:fc:de:7f:7c:4a:
         8b:a6:b0:ca:d3:b6:78:d3:0e:87:18:35:40:96:b8:b7:1d:29:
         74:cd:0a:c5:43:0a:4f:ca:b2:3f:11:11:5e:c1:f4:d6:71:ac:
         87:2d:f7:47:77:63:34:39:79:ee:c2:09:22:94:e4:5d:1a:d6:
         b9:5d:4d:5b:a2:49:00:c4:fe:90:b2:89:c3:3d:8a:84:e8:da:
         f5:34:f3:70:bd:81:85:33:25:36:37:e6:aa:cb:bc:1b:c3:ff:
         48:4c:e8:4c:bd:e6:d7:fc:25:7e:0a:ca:c3:87:20:d9:2d:36:
         08:a0:76:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:58 2024 by rpki-client on console-ams.rpki-client.org