Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55ad2ceb-d383-33fb-8613-167cb379d9db.roa
File:                     55ad2ceb-d383-33fb-8613-167cb379d9db.roa (raw, json)
Hash identifier:          HiEi6DTrjQmur6Fr7DSymmWZa3VK5b0kZ8csFdSN3/I=
Subject key identifier:   39:9A:14:1E:CD:43:DA:4B:37:88:17:D9:6F:1A:7F:17:A4:C0:06:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF51BA115FD87D31D9174C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55ad2ceb-d383-33fb-8613-167cb379d9db.roa
Signing time:             Tue 12 Nov 2024 13:40:02 +0000
ROA not before:           Tue 12 Nov 2024 13:40:02 +0000
ROA not after:            Mon 10 Feb 2025 13:40:02 +0000
asID:                     396608
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:1b:a1:15:fd:87:d3:1d:91:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:02 2024 GMT
            Not After : Feb 10 13:40:02 2025 GMT
        Subject: CN=66ccee7f-7be0-430b-b345-350de35e30d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5e:76:ae:13:89:42:a3:a7:1c:5e:fa:e3:45:
                    6a:0f:e3:4b:5e:07:be:2f:2e:4d:6f:e3:f6:19:d8:
                    2f:ef:e8:10:a7:f9:4d:2b:b8:76:b0:8d:77:00:2a:
                    fe:11:06:1a:27:97:f2:6a:0a:cd:3c:c9:97:05:50:
                    ba:77:cc:76:eb:0e:1f:f8:95:dd:5e:1c:7c:a9:14:
                    ae:f6:0c:d8:ae:f8:45:f1:d1:47:15:8b:a1:4a:d9:
                    51:2d:ef:f9:67:1d:b6:af:35:df:f2:d4:d7:b5:6f:
                    df:13:eb:ad:e2:c1:5b:fd:27:34:97:6e:0a:15:6f:
                    30:5b:26:20:d5:65:48:d7:de:dc:ac:20:97:a3:98:
                    a1:2e:e3:67:b7:ef:96:3b:ad:00:74:75:ff:ce:70:
                    8a:33:55:54:05:b8:04:0a:3a:4b:89:a9:a2:9c:52:
                    50:af:a5:89:67:ac:c9:bd:0d:ab:3a:7d:72:6a:4b:
                    52:3d:e5:e7:fc:e4:0d:74:8d:5c:49:c9:59:cc:ec:
                    24:11:15:6b:d7:ab:63:d4:49:a6:ce:f9:f9:b6:ed:
                    f0:0f:f2:36:a6:82:52:af:3b:f5:4c:dd:16:ee:f9:
                    5f:32:79:3a:c6:d1:f7:90:82:c8:fe:07:ea:e4:aa:
                    eb:76:a6:3b:98:6a:bb:70:de:5e:db:7f:0c:dc:fa:
                    b6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9A:14:1E:CD:43:DA:4B:37:88:17:D9:6F:1A:7F:17:A4:C0:06:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55ad2ceb-d383-33fb-8613-167cb379d9db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c8:80:8e:fa:43:f7:ef:82:31:2f:f1:54:a8:80:cb:59:5f:
         31:d0:ff:21:a6:7c:f6:87:58:c9:0c:1b:d2:fb:ce:b2:1a:f0:
         38:95:ca:e8:dd:70:eb:29:c9:d1:31:49:dc:1a:95:87:eb:7b:
         b6:35:2d:97:92:03:3b:d1:69:cf:6e:3c:1b:b5:86:7c:52:71:
         26:6f:04:b5:f8:76:b3:25:28:42:e4:e7:15:03:5a:f6:9a:79:
         50:95:97:f2:95:74:dc:3f:d9:f1:8a:b1:74:42:42:64:db:62:
         66:54:69:3e:10:9f:28:09:8f:1f:75:79:c7:bf:13:07:5d:f8:
         8a:6b:11:cc:e8:a9:e4:ea:85:20:5a:77:a1:e6:cd:c3:86:7f:
         c0:b3:03:11:52:b3:81:d5:71:aa:90:10:a7:b3:67:80:04:ee:
         55:6a:92:61:1f:16:6f:49:35:03:9a:82:f1:e5:62:50:10:ff:
         85:e6:45:1c:1c:ad:9c:cb:21:96:f5:11:32:5a:56:ee:50:c2:
         ad:3e:9e:8c:6e:e7:ae:54:a2:65:aa:18:d1:d0:97:16:30:f9:
         85:87:68:08:39:36:0b:26:19:d1:c5:43:a0:76:9e:c6:ba:66:
         8f:87:b9:82:39:43:91:bb:da:68:f0:46:88:e2:3f:05:06:07:
         a5:21:b4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:30 2024 by rpki-client on console-fra.rpki-client.org