Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a09fa58-e00d-341e-80d8-12112a3b1603.roa
File:                     5a09fa58-e00d-341e-80d8-12112a3b1603.roa (raw, json)
Hash identifier:          7npKUThjFzOYFR3FfJmPlJpX+xE8nllGs1Rea2ygPxA=
Subject key identifier:   4A:91:61:2A:36:CA:92:F7:00:E4:5A:AB:A9:52:BD:ED:94:02:0F:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF519B2B2AFA50F95286000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a09fa58-e00d-341e-80d8-12112a3b1603.roa
Signing time:             Tue 12 Nov 2024 13:40:01 +0000
ROA not before:           Tue 12 Nov 2024 13:40:01 +0000
ROA not after:            Mon 10 Feb 2025 13:40:01 +0000
asID:                     396553
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:19:b2:b2:af:a5:0f:95:28:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:01 2024 GMT
            Not After : Feb 10 13:40:01 2025 GMT
        Subject: CN=381926dc-9da4-4204-8c08-dd99ab9086b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:ed:23:42:01:fe:a6:ef:26:46:63:c7:4b:
                    14:db:46:b6:2b:e1:0a:b9:2e:1f:5f:97:57:a5:16:
                    de:7a:44:02:57:3d:68:72:75:ee:08:e0:d9:e8:6d:
                    db:f8:58:2e:5d:d4:87:66:b5:59:18:e3:78:e3:74:
                    2d:6b:35:f0:32:fd:0f:77:1c:26:c1:a1:53:e3:9d:
                    8c:4e:0e:df:7f:5f:6c:30:cd:63:cc:6a:10:fd:eb:
                    67:f9:9f:85:eb:13:a3:0d:a6:a4:76:53:d6:ed:16:
                    38:19:d8:3e:9f:29:ef:91:7c:f7:8d:9f:ee:45:cc:
                    39:0f:76:2d:3d:93:51:b5:77:7b:67:2d:4c:11:e4:
                    4f:26:bd:52:57:d6:ac:c6:6e:9b:5c:f8:98:86:f9:
                    8f:31:9a:42:4d:d6:10:e5:4e:8d:7b:97:9f:44:28:
                    54:58:78:f5:00:0e:41:5c:04:ce:43:1b:a7:26:36:
                    5d:ba:7d:e7:a3:43:bc:7c:51:b0:d1:ce:6c:b8:01:
                    99:aa:43:72:f1:5f:86:3f:c4:6c:87:00:3c:69:86:
                    25:be:9a:26:2d:3c:f6:9b:a6:0a:50:2a:47:51:38:
                    d6:71:4b:87:da:d2:36:29:09:67:c6:35:23:41:f8:
                    94:4a:68:a0:88:37:00:99:fe:cd:42:50:32:e4:dc:
                    36:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:91:61:2A:36:CA:92:F7:00:E4:5A:AB:A9:52:BD:ED:94:02:0F:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a09fa58-e00d-341e-80d8-12112a3b1603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:96:36:d4:c3:4b:af:2a:17:b6:b3:d4:8d:3f:29:79:c3:3a:
         fe:50:7c:04:00:26:2b:b4:7a:98:61:91:d8:d9:2c:e3:58:b6:
         53:f6:15:59:24:5c:ca:6b:5c:0a:24:da:af:0c:d0:97:74:b1:
         d2:d4:3b:d9:99:a2:fe:ef:7e:15:b7:69:2b:c4:91:1f:a9:8b:
         f1:6f:ea:ae:2c:f1:ca:a4:6d:77:ed:82:a3:a6:ee:78:5d:66:
         b4:9f:27:0e:d0:f8:b8:19:fd:40:dd:40:9a:7a:68:46:aa:2c:
         cd:6a:2e:fd:11:49:61:7e:fa:4a:71:a4:5b:7d:2e:96:13:17:
         6d:e1:2f:e0:98:bc:e2:0b:19:af:6f:98:e5:bc:5c:5f:36:f5:
         5f:a6:97:91:fe:a1:28:40:89:14:13:3c:57:64:55:65:c8:63:
         27:08:15:e6:ed:fb:92:ea:39:46:b2:ea:57:64:66:02:a6:62:
         ee:0e:2a:89:ca:83:39:45:c6:b3:dc:58:68:b8:4e:da:2d:a0:
         6f:1c:06:35:b7:6b:19:3a:2b:76:ee:2e:cf:ba:f1:06:c7:06:
         55:e6:7d:51:ad:69:61:d7:82:fe:c6:9a:e3:00:9d:f4:d3:9b:
         8d:9b:b9:c8:93:0a:5e:5f:d1:a3:da:7e:4f:e0:e7:96:a1:50:
         28:d3:07:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:04 2024 by rpki-client on console-ams.rpki-client.org