Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b0d71e7-239b-3d49-9f2b-425cd8410b02.roa
File:                     2b0d71e7-239b-3d49-9f2b-425cd8410b02.roa (raw, json)
Hash identifier:          PVhu4z58E9Tb8dcpzKFaVZ9OpG37fN0mGxKxPccquL0=
Subject key identifier:   53:8C:8E:1E:07:F8:FE:B5:E7:C8:1A:67:C6:1B:F1:8E:AA:D1:8A:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF519C631E9FDEB97F5C560
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b0d71e7-239b-3d49-9f2b-425cd8410b02.roa
Signing time:             Tue 12 Nov 2024 13:40:01 +0000
ROA not before:           Tue 12 Nov 2024 13:40:01 +0000
ROA not after:            Mon 10 Feb 2025 13:40:01 +0000
asID:                     36624
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:19:c6:31:e9:fd:eb:97:f5:c5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:01 2024 GMT
            Not After : Feb 10 13:40:01 2025 GMT
        Subject: CN=7517d632-2f28-4b32-8891-3d9da852419b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:e6:da:c4:f1:8c:7b:3f:9a:4b:76:06:ce:
                    2f:37:a6:c5:ee:9d:e6:99:04:9a:3b:66:1b:72:be:
                    14:86:e2:3d:7f:e8:ad:d8:64:9e:8b:9c:91:8a:2b:
                    e8:31:22:2b:a4:0d:c9:ff:e7:20:c3:ee:18:bc:0e:
                    23:a8:96:b8:91:1e:09:01:34:8e:84:65:26:97:1e:
                    d3:8d:28:c0:50:04:99:8d:4b:3d:64:81:6e:ed:af:
                    4a:4f:64:03:98:32:a7:cc:01:a4:ad:18:ae:1d:12:
                    50:ca:f5:a6:81:a7:18:da:38:65:60:69:da:ba:4a:
                    53:95:69:a0:61:ed:1a:91:ed:15:cd:48:71:54:1d:
                    53:1a:2d:4f:05:ac:a6:65:ca:c5:6a:66:27:2b:4b:
                    b4:cf:ca:b4:37:a1:5c:4c:1f:c0:60:cb:32:55:82:
                    f2:ef:43:37:3c:b6:b8:bb:19:ac:ed:28:bc:c1:89:
                    48:4d:40:ea:01:c6:31:06:32:85:7d:35:61:be:3b:
                    9a:9a:cf:49:64:ad:2f:6f:0a:19:ff:f9:ba:4b:d6:
                    03:4b:d0:70:1b:85:f1:17:bc:3e:49:23:e0:6a:df:
                    72:18:99:b7:40:da:4a:ea:3f:e9:37:18:df:9f:c8:
                    a3:6c:a3:85:45:8a:1d:71:54:18:c0:7c:c6:b5:98:
                    2a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8C:8E:1E:07:F8:FE:B5:E7:C8:1A:67:C6:1B:F1:8E:AA:D1:8A:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b0d71e7-239b-3d49-9f2b-425cd8410b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d9:37:4d:8e:b2:d0:33:2a:b7:3f:80:db:80:c0:a5:b1:ee:
         ca:2c:b4:14:00:76:f8:64:d4:51:5c:6a:ea:58:8c:ef:8f:d0:
         0f:5e:52:0f:ca:60:fb:98:81:44:a6:4b:81:71:a7:8c:82:7f:
         cc:3f:7a:db:11:1d:35:96:53:b1:93:ce:74:a5:e1:a9:8b:e5:
         27:93:cf:2d:7e:2e:6a:36:28:27:c4:3d:9f:2a:b1:46:b6:bf:
         39:e7:00:d4:32:87:1f:55:29:84:cf:09:40:ac:9d:8a:dc:a0:
         6c:e7:61:4a:15:32:33:b5:81:c4:b8:54:47:52:a4:62:c2:44:
         96:d3:9c:ba:7d:09:a6:10:75:79:bf:a8:c5:e1:81:88:04:1f:
         03:24:9d:fc:9b:71:8e:97:09:94:99:7f:29:cd:54:8f:92:86:
         ec:8e:60:cb:ea:ed:4c:6e:b7:63:8a:25:6b:57:96:fd:e9:66:
         f1:dc:8f:08:13:7e:c4:33:6d:7c:1a:f8:6c:01:46:c8:07:94:
         88:1f:24:12:23:31:22:ca:b5:40:32:b6:d8:05:33:cf:61:ce:
         65:ff:14:f9:5c:d8:9c:c9:68:f0:fa:6c:7d:15:22:7f:61:2f:
         73:c9:7b:db:52:96:69:ec:b2:fa:6f:54:ce:5e:c8:37:0b:75:
         0a:09:83:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:59 2024 by rpki-client on console-ams.rpki-client.org