Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83650117-ca82-3a70-a67a-e90f4918cce8.roa
File:                     83650117-ca82-3a70-a67a-e90f4918cce8.roa (raw, json)
Hash identifier:          WhXTL3LPRPS/oAUG0Uiw4E2+mp1L1no8TSVihyvl/cY=
Subject key identifier:   68:32:A4:55:DF:05:A1:6D:9E:90:26:D1:1B:B7:C5:2E:9C:7E:E0:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF51D3580CF03BA346A2200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83650117-ca82-3a70-a67a-e90f4918cce8.roa
Signing time:             Tue 12 Nov 2024 13:40:03 +0000
ROA not before:           Tue 12 Nov 2024 13:40:03 +0000
ROA not after:            Mon 10 Feb 2025 13:40:03 +0000
asID:                     36622
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:1d:35:80:cf:03:ba:34:6a:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:03 2024 GMT
            Not After : Feb 10 13:40:03 2025 GMT
        Subject: CN=5554f117-ef52-4fb0-aa64-e0c1a16a2bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:e2:47:02:09:03:94:a1:a9:1b:27:ce:87:
                    b3:dd:02:3e:57:7c:34:84:dd:29:31:36:ce:42:01:
                    3c:79:20:84:46:9c:b2:ca:c1:de:5a:48:7e:7a:6c:
                    8d:94:23:53:45:26:6a:de:a0:e9:24:fb:43:60:73:
                    96:d5:67:39:d6:ca:f0:8c:89:3a:7b:dc:0e:c9:8b:
                    e8:41:86:9f:98:fe:e8:26:10:e3:43:36:04:5c:ad:
                    79:93:9c:01:dc:84:4a:1d:b2:69:ed:3d:70:ac:3e:
                    c4:d0:cc:f9:1b:0a:6d:65:98:57:32:b3:eb:b5:eb:
                    c9:c7:35:d8:dc:e9:b0:35:90:cc:e9:23:5d:0b:6c:
                    06:73:47:be:36:29:d1:68:f5:d1:69:f1:79:31:de:
                    af:3b:f2:d7:ad:d7:19:c5:87:77:35:e5:83:60:4f:
                    fd:1f:33:4f:30:03:04:8e:2e:f0:ea:59:64:c0:21:
                    c6:73:ec:b8:3b:4c:16:1f:6c:08:aa:c3:f1:96:da:
                    06:a2:f5:cf:17:7b:17:fd:77:a2:88:d5:2b:29:83:
                    77:6a:82:90:07:6e:43:3e:ee:83:74:a8:ed:97:ec:
                    41:9b:f1:99:47:51:79:72:c9:05:d2:01:80:a7:92:
                    9e:d8:1f:0c:38:30:83:57:f9:59:51:b7:cc:58:ee:
                    89:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:32:A4:55:DF:05:A1:6D:9E:90:26:D1:1B:B7:C5:2E:9C:7E:E0:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83650117-ca82-3a70-a67a-e90f4918cce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c8:57:e8:f6:20:ee:f6:97:ea:aa:da:2a:e6:e4:fd:1a:5d:
         6f:23:cd:c6:5d:e6:9e:ce:80:d0:67:69:2a:ac:27:aa:ac:e9:
         9c:2c:db:9b:64:b3:d9:94:92:b5:af:fb:36:ca:06:69:b6:5b:
         65:75:53:8e:e6:9b:69:6c:3b:60:16:21:f8:70:3b:25:f6:9f:
         93:cc:cd:76:6d:b7:bc:f3:f3:c4:d4:b3:00:50:c0:c1:1b:45:
         47:55:6a:8d:ff:4b:55:d0:91:25:24:91:34:fc:c2:09:72:7a:
         67:99:6c:8c:f6:b8:9c:c0:02:32:23:d7:12:4e:19:63:27:6e:
         7c:4d:9d:1c:d5:40:0a:d9:2d:cf:05:52:64:81:bd:19:2b:cb:
         62:25:50:c5:f9:5a:f7:ba:7b:db:1d:c6:a0:de:e0:26:2b:52:
         c7:85:bc:76:d2:8c:e0:b1:da:2b:f2:d0:19:02:4a:02:d0:5e:
         94:5d:b4:0a:57:08:99:99:59:20:67:fb:6c:19:4c:5a:d5:49:
         be:92:ef:20:c9:1c:e1:be:f3:c8:07:e3:c0:de:1c:bb:c4:ea:
         ea:55:af:d4:d2:36:3e:6a:df:12:fa:45:54:68:b3:98:ad:35:
         69:b1:cd:3e:c2:31:e1:aa:62:df:63:21:75:0b:60:0c:63:ca:
         00:7a:da:93
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfa9R01gM8DujRqIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTExMjEzNDAwM1oXDTI1MDIxMDEzNDAwM1owLzEtMCsGA1UEAxMk
NTU1NGYxMTctZWY1Mi00ZmIwLWFhNjQtZTBjMWExNmEyYmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLTiRwIJA5ShqRsnzoez3QI+V3w0hN0pMTbO
QgE8eSCERpyyysHeWkh+emyNlCNTRSZq3qDpJPtDYHOW1Wc51srwjIk6e9wOyYvo
QYafmP7oJhDjQzYEXK15k5wB3IRKHbJp7T1wrD7E0Mz5GwptZZhXMrPrtevJxzXY
3OmwNZDM6SNdC2wGc0e+NinRaPXRafF5Md6vO/LXrdcZxYd3NeWDYE/9HzNPMAME
ji7w6llkwCHGc+y4O0wWH2wIqsPxltoGovXPF3sX/XeiiNUrKYN3aoKQB25DPu6D
dKjtl+xBm/GZR1F5cskF0gGAp5Ke2B8MODCDV/lZUbfMWO6JrwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGgypFXfBaFtnpAm0Ru3xS6cfuAOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODM2NTAxMTctY2E4Mi0z
YTcwLWE2N2EtZTkwZjQ5MThjY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB1yFfo9iDu9pfqqtoq5uT9Gl1vI83GXeaezoDQ
Z2kqrCeqrOmcLNubZLPZlJK1r/s2ygZptltldVOO5ptpbDtgFiH4cDsl9p+TzM12
bbe88/PE1LMAUMDBG0VHVWqN/0tV0JElJJE0/MIJcnpnmWyM9ricwAIyI9cSThlj
J258TZ0c1UAK2S3PBVJkgb0ZK8tiJVDF+Vr3unvbHcag3uAmK1LHhbx20ozgsdor
8tAZAkoC0F6UXbQKVwiZmVkgZ/tsGUxa1Um+ku8gyRzhvvPIB+PA3hy7xOrqVa/U
0jY+at8S+kVUaLOYrTVpsc0+wjHhqmLfYyF1C2AMY8oAetqT
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:07 2024 by rpki-client on console-ams.rpki-client.org