Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2815c36b-6f90-3e77-9550-7e1504da1f31.roa
File:                     2815c36b-6f90-3e77-9550-7e1504da1f31.roa (raw, json)
Hash identifier:          wOjiawBhmGmHYg9Ol5878Hm/0sojnj6ENoCLfcNJ2ng=
Subject key identifier:   FE:8C:98:BB:EC:44:ED:17:52:9E:D9:22:3F:9B:C4:6F:33:1B:DC:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CD00CE4347B3750CDF4D8C50
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2815c36b-6f90-3e77-9550-7e1504da1f31.roa
Signing time:             Thu 07 Nov 2024 13:42:17 +0000
ROA not before:           Thu 07 Nov 2024 13:42:17 +0000
ROA not after:            Wed 05 Feb 2025 13:42:17 +0000
asID:                     397203
IP address blocks:        2001:500:135::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:00:ce:43:47:b3:75:0c:df:4d:8c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  7 13:42:17 2024 GMT
            Not After : Feb  5 13:42:17 2025 GMT
        Subject: CN=9ed50e2d-e2f5-400b-b4d3-c7ad8a0abbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c1:25:30:84:fc:9c:29:94:c1:ea:e2:7c:5b:
                    b7:6a:f4:86:95:aa:56:4b:a8:7a:ac:cb:e6:ee:79:
                    dd:2c:7e:55:54:19:b4:cf:5c:de:df:4c:85:78:55:
                    37:37:d0:ba:68:20:a5:aa:ed:2e:02:9f:88:3f:24:
                    ac:87:1d:93:74:6d:6c:47:f6:f8:77:b7:a0:59:51:
                    84:ea:a6:83:9c:23:92:a7:64:fc:82:0f:3b:a1:30:
                    95:df:a1:98:21:4e:3e:6b:85:41:03:08:be:55:d1:
                    eb:bc:80:81:bf:91:5b:38:8d:4c:41:2b:a3:06:73:
                    f9:06:79:5e:cf:30:7b:f9:84:de:a5:d4:3e:5a:58:
                    27:cb:4f:8c:a3:f4:77:b6:5d:f7:28:d2:e8:cb:df:
                    0e:50:fc:74:7f:89:0d:cd:d9:75:bc:bf:db:7a:3a:
                    e9:51:c2:89:1c:56:52:67:92:1c:dd:24:ed:a7:5e:
                    1e:95:83:8b:cc:27:e3:41:8b:86:4e:0a:5a:c2:1c:
                    27:9c:75:90:45:a6:8a:15:18:99:a4:56:72:02:53:
                    b5:3f:48:47:35:93:ab:ea:76:83:2f:33:dd:65:2e:
                    dd:ce:81:28:97:b6:79:77:35:06:4c:ed:6b:30:59:
                    92:69:2a:28:eb:fe:c5:c1:db:85:1b:8f:50:48:0f:
                    c2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8C:98:BB:EC:44:ED:17:52:9E:D9:22:3F:9B:C4:6F:33:1B:DC:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2815c36b-6f90-3e77-9550-7e1504da1f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:66:34:10:d8:fa:14:28:f9:9a:60:13:05:9e:2d:07:37:0d:
         db:9f:d4:46:af:6b:54:18:22:f5:b1:26:d7:39:d1:c5:57:78:
         38:94:b8:70:ca:cb:2f:36:54:47:02:1d:52:63:e3:12:8b:9f:
         2e:2e:03:ef:25:ac:4f:29:c0:cb:88:07:15:bb:02:af:04:7f:
         c2:93:15:a3:20:12:0e:2a:04:43:52:75:22:f4:8e:93:06:5b:
         37:1c:19:d2:20:d6:cc:f6:63:4a:00:da:d9:2e:8f:9e:61:5f:
         1d:b8:cb:57:ec:61:17:40:0d:0b:bb:3b:35:f5:2a:8e:69:ad:
         a9:c6:44:5a:93:28:16:f1:90:1a:03:56:57:c2:5b:a0:d8:b3:
         d5:0f:0d:16:04:6f:22:60:4d:dd:6f:d2:59:bb:19:10:6d:2b:
         a7:a4:b5:1f:26:dc:c7:4a:35:7e:bd:35:25:e3:09:21:31:96:
         97:be:5d:ea:bc:b6:23:83:e1:cb:a5:58:16:b9:e0:5f:85:0b:
         72:91:4d:03:0f:74:f5:73:da:00:78:92:cb:31:63:8a:54:67:
         61:f2:30:b8:85:43:96:6f:a1:ec:cb:79:31:ae:56:0b:f1:03:
         ee:42:6f:cf:e6:4c:c5:ff:f2:a4:5e:52:37:6a:66:a7:7e:21:
         eb:b4:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:59 2024 by rpki-client on console-ams.rpki-client.org