Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f9a85a1-0d67-39e2-af81-8ed0c5fc1339.roa
File:                     5f9a85a1-0d67-39e2-af81-8ed0c5fc1339.roa (raw, json)
Hash identifier:          xojYMJIozlaJm8QnKAeaHJJ+C6L1Cd2xbo9WYt/hL8I=
Subject key identifier:   C1:00:37:BF:6E:54:6F:A4:B6:9D:14:A5:24:EE:3C:9F:41:84:76:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0885C1C57A469C0BBCD0320
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f9a85a1-0d67-39e2-af81-8ed0c5fc1339.roa
Signing time:             Thu 14 Nov 2024 13:35:46 +0000
ROA not before:           Thu 14 Nov 2024 13:35:46 +0000
ROA not after:            Wed 12 Feb 2025 13:35:46 +0000
asID:                     397205
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:5c:1c:57:a4:69:c0:bb:cd:03:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:46 2024 GMT
            Not After : Feb 12 13:35:46 2025 GMT
        Subject: CN=53b3a9bc-f026-4856-bd24-4e9cd5b75539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a9:ff:01:e8:43:97:7d:91:a8:bf:38:bf:30:
                    9e:54:fc:0c:65:25:17:39:70:22:47:38:98:37:98:
                    16:5d:4c:05:39:1c:e9:32:c4:1d:76:7b:b3:0c:ee:
                    7c:71:83:52:92:ad:cd:6f:fa:3f:a1:51:db:6a:f8:
                    59:2a:b7:e6:77:99:f2:e1:6e:cc:0a:3a:13:54:46:
                    e8:42:ce:88:be:64:be:52:96:78:16:53:3e:e8:85:
                    86:16:63:bf:1e:49:1b:b8:d0:61:82:59:92:15:a4:
                    f2:db:8e:7f:60:31:ba:ad:e7:2e:da:09:59:96:fd:
                    49:49:ca:8e:65:55:db:24:36:d7:0a:6f:ac:3a:e0:
                    c3:03:4e:bf:bb:7f:25:f6:48:3e:41:c8:1f:f7:18:
                    98:3d:f5:c7:2e:6f:db:d8:dd:21:2a:f2:46:0a:93:
                    29:37:6d:0e:87:3c:92:bd:26:7d:ec:73:1d:3b:84:
                    6a:75:1b:f2:ce:4e:52:fb:1a:f9:34:b1:16:b4:e5:
                    8e:89:d7:7b:06:d1:a7:f9:98:c4:e7:bd:ff:cf:f6:
                    c3:af:af:2f:2d:92:2a:a5:ed:07:40:66:9a:3a:91:
                    42:75:92:81:98:63:8f:16:1e:3c:94:5a:11:00:ac:
                    71:57:00:35:52:ec:d9:eb:2c:63:b1:9e:a3:31:f7:
                    54:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:00:37:BF:6E:54:6F:A4:B6:9D:14:A5:24:EE:3C:9F:41:84:76:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f9a85a1-0d67-39e2-af81-8ed0c5fc1339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:50:07:fe:27:1a:af:d0:59:9b:59:e2:82:12:64:51:d3:77:
         5d:8b:28:81:87:ba:63:9e:82:b6:1e:1c:cb:e6:ad:06:f2:ba:
         18:80:0c:8e:52:f1:a8:1b:33:07:82:43:12:77:b4:c1:10:47:
         35:87:bf:e6:4c:62:8b:ce:6f:7d:8a:d0:a9:20:5e:fb:e5:63:
         23:5b:e0:fe:04:b4:38:40:47:36:6d:95:c4:05:dc:68:9d:99:
         b9:bf:1c:93:f5:47:ef:3e:c7:98:5c:3b:78:b8:b2:d3:63:23:
         f3:a1:0e:c4:a7:da:02:7b:9a:a9:b9:9a:9d:26:20:e7:20:90:
         42:5d:5a:63:d9:f2:f4:2e:0a:3a:e1:30:d6:bf:11:83:34:44:
         87:04:ba:09:83:89:17:72:74:71:40:f5:6a:48:d3:ca:b7:a3:
         5f:3c:4f:3e:3e:19:ac:72:f9:20:13:67:50:89:3d:30:22:1a:
         f6:87:55:a2:91:8c:de:7c:fa:67:a9:43:b8:f7:32:06:6d:c1:
         be:de:33:42:f0:9b:51:2a:89:30:49:67:be:aa:6b:56:5d:d0:
         86:8b:e4:6b:5f:c8:f4:fd:78:4c:41:c1:2b:a7:b2:d5:a9:8a:
         7a:a8:3a:e5:0e:db:1b:b8:26:41:a7:a4:5f:57:45:a3:e1:b6:
         a9:e3:39:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:31 2024 by rpki-client on console-fra.rpki-client.org