Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60b903c3-8881-3071-9141-8912f2ab76a0.roa
File:                     60b903c3-8881-3071-9141-8912f2ab76a0.roa (raw, json)
Hash identifier:          WWBmpWXs/HLBhcwg4i/m2gAfkjU/a7bqcwan/BPPIsE=
Subject key identifier:   35:A6:DE:60:AE:FB:29:F9:96:45:90:2F:E8:3E:57:4E:A7:74:22:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF51EC5080FA5BBCDAFEF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60b903c3-8881-3071-9141-8912f2ab76a0.roa
Signing time:             Tue 12 Nov 2024 13:40:03 +0000
ROA not before:           Tue 12 Nov 2024 13:40:03 +0000
ROA not after:            Mon 10 Feb 2025 13:40:03 +0000
asID:                     396549
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:1e:c5:08:0f:a5:bb:cd:af:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:03 2024 GMT
            Not After : Feb 10 13:40:03 2025 GMT
        Subject: CN=6da72b75-2b77-494e-909a-d087be127049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:5e:f5:f1:33:9b:ed:65:89:36:d0:dc:51:
                    24:92:68:df:c8:55:d3:99:98:82:d5:54:95:3f:59:
                    14:2d:b2:a1:c6:ce:10:32:dd:80:be:64:e9:31:ec:
                    bd:1b:a2:68:d9:5f:c3:76:05:f2:c8:55:81:6f:73:
                    32:00:ad:1c:f6:67:96:14:8a:d3:2a:7e:0d:08:ec:
                    58:d8:fd:ba:e6:5f:ba:76:21:8b:81:ae:65:b3:98:
                    77:51:3a:cb:ec:2e:82:fb:4b:43:71:31:b6:4c:0e:
                    34:92:f7:f9:89:b2:8a:02:79:b4:c0:5a:39:58:ea:
                    98:c7:a0:f0:c1:22:ed:11:3c:db:ae:05:14:70:aa:
                    be:0c:b9:1e:03:6f:94:b6:38:e2:4b:43:b0:c5:b0:
                    6d:eb:42:f3:2e:d5:0b:bd:4a:85:12:22:6a:0a:18:
                    38:86:31:55:fb:13:20:6e:29:01:b0:b9:8e:df:c3:
                    c0:58:3d:c1:fe:92:de:7b:fa:f0:c7:7e:31:16:42:
                    12:75:15:63:d2:f9:a0:1c:c8:05:57:1f:d3:67:1b:
                    8d:28:8e:7a:3b:20:06:aa:5b:a4:b0:d0:b1:40:64:
                    8c:5b:f8:0f:10:be:be:57:3f:9b:7f:ec:3d:06:85:
                    4f:18:70:83:30:1f:1d:16:3c:4b:d9:a8:31:c0:f5:
                    50:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A6:DE:60:AE:FB:29:F9:96:45:90:2F:E8:3E:57:4E:A7:74:22:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60b903c3-8881-3071-9141-8912f2ab76a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:be:34:54:40:ae:a9:6d:59:03:e8:e8:de:bd:2d:b7:8d:8c:
         11:b4:9e:48:6b:b7:e3:a5:2c:0d:54:f2:11:74:41:24:8c:0d:
         51:cd:b8:fa:d8:ec:3a:eb:34:b4:9a:df:c0:40:52:eb:d7:e9:
         f2:f2:f6:39:e8:ba:29:de:bf:76:ce:e4:ec:7a:db:cd:b0:1a:
         f0:03:7d:a2:be:e3:01:6c:f8:4c:84:c0:e1:05:bd:76:8e:63:
         ee:10:eb:50:41:3a:91:5e:d7:55:ec:8b:91:e8:6a:e7:c1:6e:
         e0:f8:03:da:ca:db:ad:55:f8:0a:9b:1e:b6:cf:b7:7b:7a:8e:
         5a:ef:77:10:5c:f0:a4:af:27:a6:2d:f8:ff:48:b5:07:5e:e4:
         96:9f:9a:c0:41:fd:2e:66:77:5a:b9:f3:d2:bb:0b:92:08:77:
         68:da:ab:b2:7e:09:9e:57:b6:42:ab:a5:e8:7f:4b:2f:6d:1a:
         af:55:58:41:fd:26:4d:37:f6:38:09:22:63:1c:bc:35:1e:b3:
         5b:f1:b3:1b:05:30:5a:f5:8d:42:48:b1:35:12:ad:b5:41:c7:
         09:7d:a9:c8:d1:71:7a:37:6d:69:c2:da:fa:83:cf:4e:2d:88:
         7a:33:da:45:f7:2a:22:b3:b2:31:46:d0:1a:57:5c:08:7b:10:
         6d:97:8c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:04 2024 by rpki-client on console-ams.rpki-client.org