Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70828bd8-7c78-35c8-b23f-00c66886ba42.roa
File:                     70828bd8-7c78-35c8-b23f-00c66886ba42.roa (raw, json)
Hash identifier:          ZoUk8UT3rJxGx2NjUJ+i+RSuGlAPCfnY9Rp41oABZFw=
Subject key identifier:   66:9D:23:6C:70:E0:9B:AB:15:DF:46:3E:13:B7:E3:F3:E2:FD:AF:6E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF51F8828ADE6554821C5C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70828bd8-7c78-35c8-b23f-00c66886ba42.roa
Signing time:             Tue 12 Nov 2024 13:40:04 +0000
ROA not before:           Tue 12 Nov 2024 13:40:04 +0000
ROA not after:            Mon 10 Feb 2025 13:40:04 +0000
asID:                     396572
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:1f:88:28:ad:e6:55:48:21:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:04 2024 GMT
            Not After : Feb 10 13:40:04 2025 GMT
        Subject: CN=567c6400-3219-4611-9507-a6320db44e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e9:07:d1:7c:5e:36:00:18:37:7d:8e:2e:2d:
                    2f:be:41:73:8b:f4:f8:98:ca:0a:2c:a7:e5:e9:f4:
                    59:d6:f9:6f:fc:ec:74:f8:2c:5a:d5:76:2b:2c:11:
                    6c:4a:ec:60:2a:d9:82:40:1c:cc:23:07:05:98:ea:
                    3b:94:9c:b3:9c:77:f5:30:1d:5e:e3:71:94:3a:7a:
                    45:c0:ec:f8:14:36:0d:57:d7:5d:87:a0:0b:67:14:
                    1a:67:34:18:14:ec:88:bf:9b:3e:5b:50:60:22:46:
                    db:b4:c1:18:c3:fe:1f:07:a2:a5:8f:cc:db:88:0e:
                    c2:b0:92:5f:f7:90:50:d1:8c:cd:36:49:e8:55:83:
                    af:2a:65:cb:a2:37:26:dd:5b:19:9f:05:35:69:3f:
                    34:05:bd:a7:aa:93:76:dc:69:5b:93:c8:7b:30:67:
                    3c:19:20:49:9c:ce:a9:f4:19:aa:a8:2c:a7:24:13:
                    f5:0b:1d:f0:82:43:ae:71:d9:fb:7e:6a:82:da:a1:
                    9f:8e:03:28:58:0c:6b:be:a7:e1:36:57:1e:4f:64:
                    a3:8f:49:82:c1:a5:53:15:0c:09:5f:44:88:3d:09:
                    45:d3:2d:cf:f4:df:86:cd:cd:ed:48:94:4a:9f:ee:
                    11:2c:7c:7e:77:3b:94:d6:ca:2e:ce:26:8a:f2:8f:
                    1d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9D:23:6C:70:E0:9B:AB:15:DF:46:3E:13:B7:E3:F3:E2:FD:AF:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70828bd8-7c78-35c8-b23f-00c66886ba42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:e8:10:b3:cf:e2:ed:ff:5c:5f:93:b4:9b:fa:be:1f:a8:6c:
         44:7c:b6:7b:4c:fc:0d:53:18:1b:cd:12:d0:4e:27:c6:b2:72:
         1e:04:f1:5a:58:73:02:75:43:0e:d5:99:6a:07:d7:b1:ed:93:
         32:df:cc:21:f3:d5:77:80:57:a0:75:5b:b2:31:d3:3f:32:1c:
         22:4c:eb:b2:1c:fe:83:f0:1f:68:2f:5d:f7:b8:99:72:70:ec:
         7c:cc:bf:88:30:65:84:d4:27:f8:4c:14:3d:fa:84:5b:84:b1:
         65:f0:11:bf:38:a5:ce:3b:31:09:e9:56:46:49:38:73:29:3a:
         7e:db:f7:e4:d1:d2:a3:d8:b8:b3:da:3d:d0:52:cd:46:4f:85:
         63:b4:7d:ed:9d:21:2b:1a:59:8a:ff:fd:ef:eb:1a:78:13:66:
         ad:c7:61:e9:d3:49:04:d1:73:78:84:fa:c2:a9:d4:92:37:14:
         b9:3b:b8:01:47:d5:44:79:5d:c7:c4:2e:23:b2:e5:6a:c1:2a:
         45:25:ea:2e:4c:27:a3:37:a1:02:e4:6e:4f:ef:c3:c3:4b:ed:
         a7:88:9a:8d:a9:ec:c9:c6:d0:78:cd:f1:11:d3:3f:1d:a2:22:
         27:87:99:d4:23:b4:61:aa:44:74:d4:21:ef:2c:04:1e:73:14:
         3c:7f:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:06 2024 by rpki-client on console-ams.rpki-client.org