Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/810e4e86-3aad-3f08-9c6d-3090088a9fc4.roa
File:                     810e4e86-3aad-3f08-9c6d-3090088a9fc4.roa (raw, json)
Hash identifier:          dxrspjkfzS2+wE32Kv3TqxGjDj5S/LdrvEYeLYMbHe8=
Subject key identifier:   D1:2C:FD:90:EC:9D:96:64:6D:7C:31:06:14:DD:14:F9:91:4A:F4:4F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CD00CCC402CEA2005E859370
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/810e4e86-3aad-3f08-9c6d-3090088a9fc4.roa
Signing time:             Thu 07 Nov 2024 13:42:16 +0000
ROA not before:           Thu 07 Nov 2024 13:42:16 +0000
ROA not after:            Wed 05 Feb 2025 13:42:16 +0000
asID:                     396553
IP address blocks:        2001:500:135::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:00:cc:c4:02:ce:a2:00:5e:85:93:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  7 13:42:16 2024 GMT
            Not After : Feb  5 13:42:16 2025 GMT
        Subject: CN=19f958c5-2c3a-4101-b29c-faad1b38a138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:74:60:cd:4d:60:15:47:db:6b:33:a6:5f:5f:
                    c0:9e:49:2d:6e:ff:22:30:1b:ac:b6:f9:b9:07:2e:
                    94:62:68:24:a6:7d:e6:c3:b3:4e:c8:cd:40:41:99:
                    1c:96:99:23:7b:53:a1:32:bb:a9:55:9c:27:77:02:
                    07:b8:7a:56:d9:13:fd:e8:0c:ae:8b:2c:39:0b:e5:
                    13:f7:a9:fb:f5:bb:5a:b9:61:38:81:32:0a:b3:56:
                    53:6d:be:94:b3:93:7e:14:49:7e:aa:01:f4:de:80:
                    08:59:d7:58:a4:a0:44:10:30:97:8d:38:e5:ff:8e:
                    7a:c1:d3:e9:98:4a:b4:c3:a6:3f:c6:e7:d6:20:08:
                    6c:17:f4:2b:b9:c7:bc:42:a0:4b:03:52:c1:d2:35:
                    b5:cf:04:8a:0a:77:da:db:de:9b:af:95:0f:ef:74:
                    02:49:b9:41:eb:57:5f:3b:6a:bb:f4:ec:5e:ea:0d:
                    0b:7e:6d:a4:bc:4e:92:51:3e:df:93:4f:a3:ef:be:
                    17:bd:94:77:ad:c0:ee:85:59:14:8a:a0:c6:c1:41:
                    1a:50:aa:db:97:29:f3:15:06:e4:3e:a4:2b:3a:86:
                    8d:1c:1f:32:17:30:eb:3a:8b:36:a4:de:34:94:75:
                    07:05:8f:b3:f7:ba:9e:20:84:f0:55:bc:34:cf:41:
                    db:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2C:FD:90:EC:9D:96:64:6D:7C:31:06:14:DD:14:F9:91:4A:F4:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/810e4e86-3aad-3f08-9c6d-3090088a9fc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:a3:85:a3:e2:d3:d3:a5:c6:65:2f:a4:1f:60:10:30:aa:f3:
         69:2f:86:6e:f6:d8:2a:c0:d7:e4:ac:48:29:1c:d2:56:e5:7d:
         66:75:5b:15:5f:fe:54:11:30:61:ac:0b:76:bb:f3:1d:cc:47:
         b5:86:4b:74:cb:86:b6:39:73:34:3a:64:12:95:06:98:75:15:
         8f:8a:02:52:80:83:b0:0f:a4:df:2c:20:6f:06:75:d7:c2:56:
         61:9b:64:6e:0a:f9:fb:34:1b:7e:68:07:e8:29:7b:36:24:48:
         f8:b2:a7:68:96:aa:93:3f:0a:4e:d2:b5:fc:a4:30:80:c0:7b:
         32:45:f5:7e:6c:11:7e:2f:a7:b6:39:38:36:57:58:24:f9:75:
         e5:ed:44:51:5b:57:46:8b:64:38:5f:73:5a:ae:2c:e8:13:dd:
         50:ba:62:c6:c2:03:b0:94:47:36:0b:14:8f:54:0d:21:75:a3:
         7b:a1:6b:34:80:87:47:e8:42:06:bb:94:3f:d6:d8:c4:48:0c:
         c3:05:5e:5c:0e:ac:6c:81:26:95:7b:e9:d8:44:de:50:5c:cc:
         0b:d7:a2:5e:19:04:2c:53:82:7c:4f:dd:98:e7:26:48:6f:31:
         d5:7d:e0:e7:9f:c4:1c:b6:f4:42:bc:1a:bc:95:ce:bb:af:b6:
         3a:a8:98:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:34 2024 by rpki-client on console-fra.rpki-client.org