Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59cf52cc-b9a6-36df-b00c-4e7ac9ff70a6.roa
File:                     59cf52cc-b9a6-36df-b00c-4e7ac9ff70a6.roa (raw, json)
Hash identifier:          K6r8FlpcSIlDOOcwjI4IKPTF04fpm5KeZAHysy918NA=
Subject key identifier:   D7:6B:FA:CB:BA:25:58:44:8B:1C:1E:F0:07:E5:3D:4E:62:2C:16:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CD00C945943A2A4E0FFEC280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59cf52cc-b9a6-36df-b00c-4e7ac9ff70a6.roa
Signing time:             Thu 07 Nov 2024 13:42:15 +0000
ROA not before:           Thu 07 Nov 2024 13:42:15 +0000
ROA not after:            Wed 05 Feb 2025 13:42:15 +0000
asID:                     396572
IP address blocks:        2001:500:135::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:00:c9:45:94:3a:2a:4e:0f:fe:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  7 13:42:15 2024 GMT
            Not After : Feb  5 13:42:15 2025 GMT
        Subject: CN=b8f00506-c791-44cd-b83b-a6377ade3d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:49:a8:5e:0d:06:f6:e8:f8:9c:3c:75:52:
                    0b:14:99:9b:b8:04:d8:97:92:f6:71:c1:4d:1d:2a:
                    14:5d:b5:23:f6:33:6b:77:7a:eb:0f:24:37:0f:93:
                    79:26:bd:cf:b2:fe:51:ca:f4:2a:78:3e:a4:63:f8:
                    bc:e6:03:c5:e9:39:cc:b8:9b:16:43:cc:58:7e:24:
                    0e:32:d2:4d:94:98:70:fb:2c:3a:b0:3c:39:fb:47:
                    ca:c1:19:36:9d:5a:d3:78:4e:0c:23:d0:29:9c:ec:
                    0c:88:2a:e0:18:c6:42:ed:c4:04:4a:a6:a6:ff:53:
                    14:9f:28:6e:f0:54:8f:86:c5:a0:f8:03:a6:24:b1:
                    8b:d5:62:42:3c:95:26:5c:bc:06:23:84:60:1b:17:
                    49:83:a6:2e:ec:d5:8e:72:3e:44:98:9c:f4:50:55:
                    88:26:73:6f:d5:ff:b4:f9:0e:88:20:86:fa:a3:ce:
                    02:7a:e2:55:a0:3e:0c:ae:05:9a:5b:20:13:8e:0e:
                    1e:84:8e:b6:70:18:26:dc:8e:d6:b8:5d:aa:ac:83:
                    e0:a6:e1:4a:bf:41:67:7e:51:75:72:28:64:18:0a:
                    74:a9:2f:20:67:ba:e1:52:e7:82:2b:d9:d4:ad:85:
                    32:9f:36:fe:d8:8a:52:f9:fd:69:45:ff:5b:e7:be:
                    79:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6B:FA:CB:BA:25:58:44:8B:1C:1E:F0:07:E5:3D:4E:62:2C:16:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59cf52cc-b9a6-36df-b00c-4e7ac9ff70a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:59:9b:8c:1d:93:04:bc:91:b4:70:0e:17:a1:9f:8c:ee:b2:
         6e:02:b5:76:47:3e:55:f4:ab:b3:2e:a6:cb:af:38:bb:7e:e0:
         d1:06:a5:a5:f9:7c:06:28:f1:9c:d4:4f:72:60:33:48:79:6c:
         52:8e:26:1a:8d:f2:c2:9f:9e:73:e4:f7:9e:b2:b7:22:4d:65:
         0c:31:a5:3c:dd:c1:de:70:40:fe:a4:39:83:26:71:6d:e3:c0:
         f4:d8:c5:17:59:ff:1e:73:05:98:07:c0:3e:11:a3:76:48:5a:
         67:0d:f7:92:f0:61:66:94:42:64:43:56:d5:af:c5:13:d6:28:
         af:8b:aa:d7:0b:1d:42:4f:44:d9:02:d2:5c:05:ce:0b:5d:ea:
         a5:78:c0:0c:81:c0:a9:25:4e:1a:e3:14:51:79:10:b3:a6:35:
         bf:7d:37:b0:81:19:5a:b0:5f:64:35:06:45:d1:40:7b:0e:e6:
         5b:15:84:18:4b:cc:e8:d4:8a:46:c7:4b:d7:11:fe:7c:7f:e8:
         9c:c5:e4:c5:c5:dc:ef:77:aa:ae:6e:c1:6c:e1:89:21:27:c4:
         a1:70:11:08:34:9d:61:a9:fd:a6:20:59:8e:39:40:4f:b5:0b:
         81:20:e5:59:8f:7e:9d:08:95:5c:94:28:e5:6c:a8:5a:59:39:
         60:5a:f9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:30 2024 by rpki-client on console-fra.rpki-client.org