Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/662ff329-1786-3bb4-a7ab-fe627b7e3b8e.roa
File:                     662ff329-1786-3bb4-a7ab-fe627b7e3b8e.roa (raw, json)
Hash identifier:          riMTQjTPPsCMcjTnCWk2Kad8pvvuoMfZdjsH7m4cBwc=
Subject key identifier:   BE:65:0B:04:85:12:9B:8F:97:08:A2:24:42:E5:A8:C3:1D:0D:37:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CD00D06B2A2D7D8A84A37180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/662ff329-1786-3bb4-a7ab-fe627b7e3b8e.roa
Signing time:             Thu 07 Nov 2024 13:42:18 +0000
ROA not before:           Thu 07 Nov 2024 13:42:18 +0000
ROA not after:            Wed 05 Feb 2025 13:42:18 +0000
asID:                     397195
IP address blocks:        2001:500:135::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:00:d0:6b:2a:2d:7d:8a:84:a3:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  7 13:42:18 2024 GMT
            Not After : Feb  5 13:42:18 2025 GMT
        Subject: CN=37403068-5fc9-4fa5-b46f-2c5fa4992f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d2:cc:f4:3d:ea:2f:ff:aa:5e:a3:da:f0:c7:
                    9d:cb:f2:e8:f1:15:6b:e5:4e:5f:95:56:ac:03:9d:
                    2c:93:da:ce:94:a1:5f:ec:08:67:9a:a2:f3:69:ae:
                    9b:0e:ac:ec:74:b3:cc:a6:27:d5:d2:bc:5d:38:e7:
                    92:51:fa:54:7b:3d:a7:cf:aa:f1:40:67:ba:49:c9:
                    43:3e:b7:04:f3:98:a3:3a:b0:ed:d7:53:7d:1d:c4:
                    98:0c:bd:3c:05:fa:dd:32:de:3d:a8:6a:1a:47:40:
                    55:33:2d:5b:3e:3d:57:cb:16:8d:53:68:5c:d8:46:
                    93:4c:3e:c7:8e:f4:6d:ea:d4:a8:b7:1e:49:e3:a4:
                    4c:ec:63:45:ba:11:ef:88:fc:d8:47:e5:f0:e5:ae:
                    95:ec:12:f6:f5:54:9c:12:ee:cc:15:0b:3d:de:c5:
                    88:93:9f:e1:48:ad:ea:0b:71:76:15:63:9b:f8:77:
                    bf:a1:d7:af:a2:a9:e7:e3:83:53:b3:ec:79:ce:6f:
                    95:07:42:3d:15:e5:9b:17:59:d9:b2:a1:44:42:23:
                    3f:77:a0:be:21:76:2b:09:3f:e3:54:cf:04:46:e2:
                    6f:05:52:f8:f4:22:92:43:46:9c:12:a2:82:b8:47:
                    42:6d:b4:c1:28:80:b6:43:17:e8:f7:4e:4f:cd:7e:
                    8f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:65:0B:04:85:12:9B:8F:97:08:A2:24:42:E5:A8:C3:1D:0D:37:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/662ff329-1786-3bb4-a7ab-fe627b7e3b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:bd:ce:b4:e7:f2:66:5e:92:10:13:46:01:31:c0:8c:27:e7:
         50:f8:54:7a:f9:f4:7c:ab:0d:58:8c:99:f8:34:3a:d6:75:25:
         99:a6:40:fb:87:6c:90:40:bc:01:f2:e5:4e:40:e4:3c:ca:ad:
         1b:69:1e:48:fc:38:f5:93:b8:ac:f9:d9:98:4b:ef:2a:49:a9:
         d1:e5:b9:1b:0c:6d:1a:ab:e4:39:21:1b:f8:a1:1b:06:59:98:
         ad:78:15:4d:c2:91:c8:94:d3:8c:4c:d6:58:b4:da:38:e2:94:
         92:08:e2:c6:13:8f:a1:1d:5f:92:83:1a:ae:a5:b1:27:a7:0c:
         19:36:bf:07:cf:b0:27:cd:b5:a1:d5:8b:30:cb:c7:74:f3:e2:
         a6:78:a0:07:30:70:db:5e:80:bf:97:b4:f0:74:b2:3c:f7:76:
         16:0d:fc:20:0f:87:10:9f:28:d5:ee:57:b9:03:82:1e:46:32:
         f1:a3:7c:58:26:86:f8:3a:ca:f4:ca:2f:91:2e:60:1d:1f:ba:
         87:42:3f:b0:c5:38:c7:48:57:d9:ca:0b:1e:44:9a:d5:f7:10:
         a0:71:c1:9b:c3:fc:41:8a:da:d3:c7:fe:8d:01:67:7a:eb:46:
         9e:32:de:82:54:08:03:a1:85:08:59:f0:0d:87:b3:aa:95:39:
         d6:1a:74:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:05 2024 by rpki-client on console-ams.rpki-client.org