Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/709716b0-03ed-3a5d-95a0-e4383df273d9.roa
File:                     709716b0-03ed-3a5d-95a0-e4383df273d9.roa (raw, json)
Hash identifier:          tX9v3uosBP66NPMOrz9D+CDdJ8nu3zADNSZgCbfoQRg=
Subject key identifier:   7C:F9:0D:0E:BD:F2:83:84:33:8F:FE:66:BC:56:22:E8:36:2A:3C:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0885A7AEC361604866D4230
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/709716b0-03ed-3a5d-95a0-e4383df273d9.roa
Signing time:             Thu 14 Nov 2024 13:35:45 +0000
ROA not before:           Thu 14 Nov 2024 13:35:45 +0000
ROA not after:            Wed 12 Feb 2025 13:35:45 +0000
asID:                     396591
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:5a:7a:ec:36:16:04:86:6d:42:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:45 2024 GMT
            Not After : Feb 12 13:35:45 2025 GMT
        Subject: CN=d42cd2f1-8ba5-4192-9403-db8d7405c876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:94:b9:cb:4c:f3:72:c0:a4:bc:a3:3c:54:
                    1e:e7:4e:fd:a7:27:45:97:d9:8c:55:cd:52:46:13:
                    5f:f9:ad:f7:98:8e:5e:2a:f6:f2:e3:f9:46:69:c8:
                    7d:e4:7e:fb:37:a3:be:4f:46:f2:ce:07:61:7a:93:
                    b1:44:0b:9d:03:b0:3c:8b:65:4e:00:4e:7b:bc:7a:
                    3c:cb:c2:1d:6a:85:af:ef:4f:7b:2a:87:31:81:b6:
                    52:1b:d6:8e:66:f8:47:57:04:15:7d:e7:41:94:4e:
                    30:63:30:ab:a0:3d:1b:23:bb:d2:08:4e:b0:14:42:
                    85:db:43:dd:e0:ad:d6:d6:98:3f:9c:d1:90:f1:9c:
                    b1:53:f6:cf:85:e1:ce:d1:05:47:6a:1f:51:3d:18:
                    43:90:eb:92:68:f4:c2:87:35:5e:e2:23:85:4a:3b:
                    7e:08:ba:17:2c:1a:80:9a:91:48:06:4b:5c:f3:c5:
                    5a:04:1e:91:39:f6:ba:96:f3:9a:de:40:1a:4f:dc:
                    b4:cf:fb:b0:28:a0:77:86:68:69:c8:12:05:20:e7:
                    2b:3f:bd:54:a3:c5:3f:f6:21:c2:3d:fd:c3:f6:d0:
                    b3:49:a0:ab:3d:49:cf:20:45:25:24:35:09:fe:77:
                    0f:57:97:b0:3a:2f:02:12:ae:57:b5:a2:0a:d3:cf:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F9:0D:0E:BD:F2:83:84:33:8F:FE:66:BC:56:22:E8:36:2A:3C:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/709716b0-03ed-3a5d-95a0-e4383df273d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:88:30:66:b2:50:36:63:0b:ca:95:aa:a1:4b:9a:d2:ee:00:
         a9:9d:a6:5b:0a:9e:45:e8:de:6b:ae:da:9d:db:22:6b:5d:6b:
         9e:27:f9:22:c8:63:34:41:bc:89:9c:ff:3a:31:4e:e2:7c:3d:
         f2:59:0c:bd:bb:21:66:7a:1a:cc:de:cc:c1:63:8c:08:a5:68:
         d3:26:df:d2:f5:e7:80:89:cd:ec:25:20:41:c2:0a:28:48:98:
         8f:81:af:9f:59:fe:f1:4b:08:f6:66:05:d5:2b:25:67:d5:b3:
         f6:50:38:44:73:6f:26:c1:c9:b3:dc:7a:6a:f6:87:eb:99:e1:
         cc:30:f7:2c:70:be:af:63:89:10:a6:1a:7e:f0:a1:61:89:9e:
         28:ae:7c:7a:8e:a1:c9:36:9f:72:bf:01:9c:90:59:0b:18:1f:
         57:c8:ce:86:6e:57:95:da:a9:2e:27:ea:61:fc:09:d9:d0:57:
         79:18:7f:fd:2b:28:19:a0:52:dd:6c:d6:7a:8f:93:e2:9d:9d:
         84:59:e0:e0:16:b3:93:fd:0e:10:6e:84:1f:00:9e:01:8a:e3:
         69:c3:ec:7f:dd:bf:fc:04:7f:4b:f1:bf:7e:2e:e2:f3:75:72:
         58:51:16:26:32:17:c0:ef:ab:f9:2a:40:54:9a:50:d1:2c:95:
         c2:54:5a:dd
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfgiFp67DYWBIZtQjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTExNDEzMzU0NVoXDTI1MDIxMjEzMzU0NVowLzEtMCsGA1UEAxMk
ZDQyY2QyZjEtOGJhNS00MTkyLTk0MDMtZGI4ZDc0MDVjODc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRCUuctM83LApLyjPFQe5079pydFl9mMVc1S
RhNf+a33mI5eKvby4/lGach95H77N6O+T0byzgdhepOxRAudA7A8i2VOAE57vHo8
y8IdaoWv7097KocxgbZSG9aOZvhHVwQVfedBlE4wYzCroD0bI7vSCE6wFEKF20Pd
4K3W1pg/nNGQ8ZyxU/bPheHO0QVHah9RPRhDkOuSaPTChzVe4iOFSjt+CLoXLBqA
mpFIBktc88VaBB6ROfa6lvOa3kAaT9y0z/uwKKB3hmhpyBIFIOcrP71Uo8U/9iHC
Pf3D9tCzSaCrPUnPIEUlJDUJ/ncPV5ewOi8CEq5XtaIK089N7wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHz5DQ698oOEM4/+ZrxWIug2Kjw+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzA5NzE2YjAtMDNlZC0z
YTVkLTk1YTAtZTQzODNkZjI3M2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCBiDBmslA2YwvKlaqhS5rS7gCpnaZbCp5F6N5r
rtqd2yJrXWueJ/kiyGM0QbyJnP86MU7ifD3yWQy9uyFmehrM3szBY4wIpWjTJt/S
9eeAic3sJSBBwgooSJiPga+fWf7xSwj2ZgXVKyVn1bP2UDhEc28mwcmz3Hpq9ofr
meHMMPcscL6vY4kQphp+8KFhiZ4ornx6jqHJNp9yvwGckFkLGB9XyM6GbleV2qku
J+ph/AnZ0Fd5GH/9KygZoFLdbNZ6j5PinZ2EWeDgFrOT/Q4QboQfAJ4BiuNpw+x/
3b/8BH9L8b9+LuLzdXJYURYmMhfA76v5KkBUmlDRLJXCVFrd
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:33 2024 by rpki-client on console-fra.rpki-client.org