Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/676cdc2d-4da1-3332-8f67-64a65c5b14da.roa
File:                     676cdc2d-4da1-3332-8f67-64a65c5b14da.roa (raw, json)
Hash identifier:          jppi/WYtybR9t6IwDb7KUyBWbwmRRti8yxyvSkIE50s=
Subject key identifier:   6D:52:C3:66:C5:B6:41:43:98:37:87:67:3E:D2:44:12:5D:23:12:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0885C06ACB1186888760400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/676cdc2d-4da1-3332-8f67-64a65c5b14da.roa
Signing time:             Thu 14 Nov 2024 13:35:46 +0000
ROA not before:           Thu 14 Nov 2024 13:35:46 +0000
ROA not after:            Wed 12 Feb 2025 13:35:46 +0000
asID:                     396557
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:5c:06:ac:b1:18:68:88:76:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:46 2024 GMT
            Not After : Feb 12 13:35:46 2025 GMT
        Subject: CN=8f8427c1-8301-4bbb-8c19-0bb79833aebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:55:74:b4:dd:a1:d7:2e:30:4c:b1:51:70:52:
                    eb:ff:db:72:35:50:55:29:0c:de:0f:24:3b:3c:0d:
                    18:40:c6:64:c6:09:81:dd:a9:6d:39:93:d1:6f:10:
                    d0:08:ec:d8:cb:e9:c7:b6:ff:06:76:b6:1c:4a:f6:
                    ac:1d:52:46:dc:f0:20:7d:25:7f:51:c9:67:ff:6c:
                    a0:d6:5c:36:7b:57:48:03:74:00:26:06:7d:85:3e:
                    cc:46:66:9a:11:a3:f6:97:8e:84:02:f8:3c:9f:4a:
                    b2:12:97:b8:c0:b3:e0:ba:04:20:4e:e0:2e:d7:30:
                    4c:d7:a8:5f:1e:7c:9e:8e:17:23:8e:19:67:e6:23:
                    85:bb:b1:8a:c3:c3:4a:12:82:87:ff:ae:6e:34:45:
                    8f:19:3f:3a:d5:b5:f1:e1:aa:d2:ce:4d:3d:4d:e8:
                    32:1b:57:a5:e8:36:15:b7:fd:f3:de:a7:f0:bb:42:
                    31:8a:d9:3d:96:35:6f:e7:35:9b:3d:26:c3:79:ac:
                    cd:12:fc:fa:59:c6:d5:f6:1d:71:9c:4f:5e:78:e7:
                    a8:1a:a7:3e:43:29:fd:8e:99:68:4f:e7:d5:e6:f1:
                    66:99:8c:e2:87:8f:dc:0e:65:b9:56:f5:71:92:39:
                    db:e9:48:3a:f7:e9:b4:53:d8:cf:00:7a:63:e6:e7:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:52:C3:66:C5:B6:41:43:98:37:87:67:3E:D2:44:12:5D:23:12:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/676cdc2d-4da1-3332-8f67-64a65c5b14da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:3c:b4:de:19:b8:29:13:17:9b:a6:c9:8e:bd:f2:29:27:46:
         5e:cc:aa:d9:97:1d:8f:e4:2d:0e:4c:79:00:20:1a:20:7b:b8:
         46:4c:02:c8:f4:3f:b3:e6:0d:a9:e8:3a:55:c2:d0:21:f9:8c:
         a2:05:cb:ba:7b:8a:1c:26:60:9e:a2:7c:50:a3:62:da:9c:b2:
         09:c9:58:0e:8b:d4:ba:56:c6:d8:a5:fc:57:73:6c:ee:54:5e:
         7e:5b:dd:ae:0f:fa:e9:d4:92:fc:01:7a:7c:70:14:64:ae:cb:
         8d:18:78:40:77:c5:a1:78:d6:f2:42:4e:b7:c1:8a:2a:31:6e:
         59:79:e2:5c:de:24:db:9e:9f:b4:9f:22:b9:ea:84:42:70:b0:
         25:5c:d3:dc:b3:79:e8:fd:1c:02:33:93:d2:72:38:d3:2c:c8:
         63:28:53:22:fa:d2:8c:ac:1b:b2:d4:1c:8d:52:6c:4d:3e:cf:
         2f:49:2f:b4:8b:c2:11:1e:ce:9f:39:d7:78:4e:9c:01:bd:77:
         e7:93:86:45:a7:88:e7:58:b2:c8:88:94:29:ca:30:01:00:53:
         0d:9e:00:f6:e7:2e:f7:bc:55:92:3f:b0:88:44:b7:fe:85:e5:
         36:2f:2c:b0:c4:c4:c3:19:a9:41:94:87:bf:71:33:2e:9b:67:
         94:e9:4b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:32 2024 by rpki-client on console-fra.rpki-client.org