Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/858a23f1-1810-3550-b01a-2f69946c8402.roa
File:                     858a23f1-1810-3550-b01a-2f69946c8402.roa (raw, json)
Hash identifier:          inReYzhV2vF0H+AU1pT2R+Q/K9+PDPViDVQ5Z/7XQPY=
Subject key identifier:   79:79:5A:8B:06:E3:AE:A1:53:61:5C:05:98:BF:86:2E:BC:A5:42:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CD00D0B5F467B3EDFEECBE60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/858a23f1-1810-3550-b01a-2f69946c8402.roa
Signing time:             Thu 07 Nov 2024 13:42:18 +0000
ROA not before:           Thu 07 Nov 2024 13:42:18 +0000
ROA not after:            Wed 05 Feb 2025 13:42:18 +0000
asID:                     36622
IP address blocks:        2001:500:135::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:00:d0:b5:f4:67:b3:ed:fe:ec:be:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  7 13:42:18 2024 GMT
            Not After : Feb  5 13:42:18 2025 GMT
        Subject: CN=ecbbc952-c7c6-4a6b-998b-5808a748f63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4b:00:0d:94:ba:8c:71:f2:9e:18:d7:3a:1b:
                    de:6e:93:cc:25:86:fd:24:56:13:d8:9e:01:35:93:
                    5f:02:93:f6:9c:38:da:a1:3c:30:af:1b:c1:4f:04:
                    d6:eb:50:0f:ea:1d:3b:79:5e:38:12:dc:0b:44:8b:
                    e9:98:4d:62:c5:67:47:10:a1:89:16:bb:0e:9e:22:
                    08:58:b4:1c:04:76:60:02:e3:c3:71:61:0d:75:a1:
                    95:da:20:d2:11:78:16:c9:49:df:35:f6:fd:82:b1:
                    a4:17:dd:4f:ed:f4:2c:1f:da:3c:df:50:ac:1b:de:
                    e2:dd:3c:ab:ba:f1:ef:c2:f5:69:32:10:ed:1f:bb:
                    01:36:fd:19:ef:8f:90:06:3d:f0:22:b7:4a:13:7d:
                    a8:96:b0:a3:c3:b7:42:c8:69:64:3a:69:8e:7d:4f:
                    2f:5f:46:68:ea:e7:c5:a1:dd:8e:28:78:8f:c3:e8:
                    f8:63:5e:1e:33:88:a3:84:33:cb:58:df:f6:0c:63:
                    44:04:8b:12:41:83:a2:5b:00:5a:69:f1:1d:73:98:
                    51:a7:d5:f2:1b:ed:07:30:84:4d:62:c3:3e:3e:9c:
                    ab:c1:d0:ea:4d:60:ee:89:2f:3b:7f:68:85:59:31:
                    2d:32:b5:f8:18:ff:fe:19:4c:08:c0:0b:38:15:b6:
                    03:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:79:5A:8B:06:E3:AE:A1:53:61:5C:05:98:BF:86:2E:BC:A5:42:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/858a23f1-1810-3550-b01a-2f69946c8402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:62:db:36:c0:58:f8:52:9b:3d:59:44:be:d5:13:0b:0e:eb:
         6d:b2:cc:6a:87:ed:ba:2d:46:cd:31:26:47:42:4e:52:af:20:
         5b:33:2b:7e:29:3b:90:c4:1b:24:38:bd:ea:0e:b6:85:6d:d5:
         71:28:f7:b4:27:84:bf:5f:26:ed:ac:44:09:28:9b:e0:21:62:
         81:53:38:70:c6:99:d8:f5:79:77:26:5c:c8:a4:37:51:ed:c6:
         50:9a:51:96:a8:ad:dd:0f:a3:a4:dd:ed:f0:8c:45:91:7d:ac:
         29:ca:3b:c4:7c:d8:b9:fc:88:fa:84:a2:04:58:a5:90:5c:3d:
         5a:17:41:97:c5:4d:06:b2:ee:38:15:56:93:54:87:93:aa:46:
         dc:dc:74:94:c0:ea:d4:4b:16:c1:0d:9c:88:cb:fc:1e:4f:3f:
         bb:98:87:ec:ad:38:c7:fb:55:7b:ce:75:d6:d8:5e:10:f3:e7:
         65:bb:1b:8c:a0:86:e0:e8:88:75:f6:a4:1e:56:ff:f5:0c:1f:
         29:08:eb:5e:be:38:41:55:76:3b:0b:ae:c9:c6:cd:ea:aa:64:
         c4:90:05:6c:ff:27:b9:d1:80:93:26:e7:25:30:2b:f0:fc:9c:
         af:69:cb:88:a5:c4:48:f9:8b:0f:2b:62:c6:e3:00:46:44:f6:
         17:ea:6c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:35 2024 by rpki-client on console-fra.rpki-client.org