Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3abaaaed-9d59-3769-a115-7f9f64182337.roa
File:                     3abaaaed-9d59-3769-a115-7f9f64182337.roa (raw, json)
Hash identifier:          l0WlotFbHLfoGUih7BXiN2hxfiVgV5KifvG+5SmKwgY=
Subject key identifier:   CF:F7:2A:A2:0F:B2:96:86:76:C1:00:4F:95:2A:D3:F9:0F:25:69:E5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF51E392ADB787534800E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3abaaaed-9d59-3769-a115-7f9f64182337.roa
Signing time:             Tue 12 Nov 2024 13:40:03 +0000
ROA not before:           Tue 12 Nov 2024 13:40:03 +0000
ROA not after:            Mon 10 Feb 2025 13:40:03 +0000
asID:                     396582
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:1e:39:2a:db:78:75:34:80:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:03 2024 GMT
            Not After : Feb 10 13:40:03 2025 GMT
        Subject: CN=d648a93b-e391-4d97-8c09-90d352f10d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d1:7d:39:cf:c1:5b:23:98:aa:f1:eb:06:89:
                    10:79:a0:33:36:d4:ab:47:1f:04:90:f9:4c:5a:80:
                    50:85:b0:45:f3:f2:7a:63:47:77:13:1c:aa:6d:8d:
                    96:42:b0:ea:23:0a:7e:67:3b:1c:dc:71:48:48:4f:
                    55:16:7e:dd:e3:fc:ac:59:60:7c:2f:22:99:16:c1:
                    1c:5b:98:ae:2a:dc:ef:e0:9f:17:89:90:5b:c9:5a:
                    87:61:4b:e0:8a:2e:5f:d1:a8:37:73:0e:a6:3c:c6:
                    32:9d:16:73:79:8b:b9:e2:c6:da:75:d3:14:7e:e0:
                    8a:a8:5e:80:b0:ec:4d:ff:7e:9a:b1:d6:d1:e5:f0:
                    fe:16:a3:29:9c:29:73:16:9f:3f:ab:2c:bc:c5:67:
                    93:79:b3:85:3c:67:e3:08:87:8b:64:8f:63:1e:31:
                    f6:75:df:1c:bf:9b:5c:83:c2:a3:95:8c:81:6b:97:
                    db:8d:78:1f:d5:47:f6:15:41:f3:ca:5d:44:aa:ed:
                    e4:a3:3a:0a:45:b8:4d:d4:3a:77:3b:b3:d6:02:ad:
                    39:6d:40:c7:8a:15:81:70:41:90:89:90:90:b7:5a:
                    d0:ce:ae:d6:1a:b0:b0:a6:1c:b2:5c:a4:3e:30:1d:
                    4d:0f:43:47:3a:98:65:38:0a:c4:ad:32:57:d5:09:
                    4f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F7:2A:A2:0F:B2:96:86:76:C1:00:4F:95:2A:D3:F9:0F:25:69:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3abaaaed-9d59-3769-a115-7f9f64182337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:9e:cd:36:81:db:32:c0:e5:e3:c2:11:90:15:ae:8b:e1:50:
         44:a0:37:b5:19:6f:3c:06:36:bf:a2:75:ae:e4:cb:16:ba:45:
         94:54:26:61:fa:b1:31:d1:0d:54:98:7f:8d:b2:c6:0a:83:c9:
         2d:68:1e:b3:f9:63:e8:d0:9f:f6:7e:a9:f3:7b:08:23:b8:74:
         a7:84:35:b1:e4:8c:7d:67:61:ce:bc:44:ef:6b:77:f5:67:cb:
         a0:57:25:42:5b:ca:ba:a9:7d:05:31:bd:3a:c6:da:f4:4a:59:
         c9:cd:43:78:c2:f8:46:69:b5:11:be:52:98:b8:cd:27:52:31:
         c6:d7:9c:9b:e6:1c:5f:51:cc:5b:f9:b9:fb:ae:45:55:9d:a2:
         a6:6b:1a:26:67:60:93:67:93:af:88:22:11:b7:9a:06:43:64:
         a1:f7:31:c9:2c:3b:92:04:d4:d3:24:e4:f5:e1:0f:39:c1:80:
         23:d2:b1:ea:bc:3f:fd:57:0b:9e:58:8f:69:2b:8d:c0:9e:65:
         42:2a:54:b9:fe:e6:6b:4e:30:28:74:0c:d2:c5:e7:88:9b:86:
         03:9c:32:4b:10:65:c7:8b:3e:c4:2e:5c:79:d9:4d:42:89:84:
         46:b0:2e:fb:6d:4c:bf:f3:ba:7e:d2:31:5c:b9:2b:39:0d:6b:
         8b:68:fc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:27 2024 by rpki-client on console-fra.rpki-client.org