Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a58b6b5-73ca-3972-9a14-f111e29e11f8.roa
File:                     8a58b6b5-73ca-3972-9a14-f111e29e11f8.roa (raw, json)
Hash identifier:          CiFdeLsSQAPyuq0dEFx+cdOWdmiermYTeWJxGWDaTJ0=
Subject key identifier:   94:25:6A:A2:01:FC:D4:64:A2:1D:33:C6:07:FC:B0:DA:40:EF:A8:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CD00CEB8F5EE96B92E5C8280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a58b6b5-73ca-3972-9a14-f111e29e11f8.roa
Signing time:             Thu 07 Nov 2024 13:42:17 +0000
ROA not before:           Thu 07 Nov 2024 13:42:17 +0000
ROA not after:            Wed 05 Feb 2025 13:42:17 +0000
asID:                     396595
IP address blocks:        2001:500:135::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:00:ce:b8:f5:ee:96:b9:2e:5c:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  7 13:42:17 2024 GMT
            Not After : Feb  5 13:42:17 2025 GMT
        Subject: CN=bcd6094f-2d4c-4373-8a9b-c0930389b084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f4:ed:15:06:27:21:08:a7:0e:8a:ee:e4:6f:
                    cf:04:3d:04:4b:c6:25:48:41:41:11:45:2f:8a:2c:
                    7c:c3:b4:4b:f9:e8:95:f5:07:5f:67:82:6b:8c:f6:
                    ff:e7:22:d9:e4:0d:d9:c5:3e:2d:c1:ad:50:b8:d3:
                    27:51:31:97:c8:27:87:f7:7b:50:e3:ac:05:df:65:
                    70:49:3b:1d:a6:62:ab:4c:08:24:16:1a:1e:25:25:
                    e7:21:26:e6:29:ea:59:cf:88:46:1c:3a:15:c7:69:
                    34:00:38:ab:79:7b:b2:bb:b4:6b:6b:e4:fd:1a:72:
                    48:1c:84:5a:27:a9:c5:75:fe:2b:c6:46:3d:a5:ed:
                    f9:0e:ec:aa:9d:4c:02:0f:c4:68:33:cb:f7:ac:5b:
                    0d:4a:fa:32:42:74:06:ff:54:5e:12:65:d6:0c:01:
                    ea:c5:df:fe:a7:6e:cb:ac:ed:ec:71:aa:a3:62:47:
                    28:6f:3e:46:b7:02:c8:c7:bc:f5:dd:fa:83:4e:aa:
                    dd:52:bc:28:8e:06:6b:58:b7:e9:39:f2:04:04:22:
                    97:e9:c3:5d:2c:44:24:a1:11:a6:39:d7:7d:9f:44:
                    62:85:e3:d9:0a:55:08:24:2d:08:09:78:f4:c3:a6:
                    07:e5:bc:7b:e2:cd:4c:f6:42:7d:a3:75:bf:c0:16:
                    3b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:25:6A:A2:01:FC:D4:64:A2:1D:33:C6:07:FC:B0:DA:40:EF:A8:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a58b6b5-73ca-3972-9a14-f111e29e11f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:74:5e:9e:d3:9a:b4:22:88:5b:40:f0:61:af:5f:c0:77:bf:
         fd:bc:c3:ed:c5:75:b1:7f:a4:56:a3:95:b3:33:c5:cb:4f:8a:
         d2:38:f1:1d:69:e5:a0:44:f0:c7:a7:eb:a7:35:af:5c:04:e7:
         b0:cf:72:45:64:f5:0c:e7:20:96:3b:bf:53:06:fb:96:2c:0a:
         55:a4:c2:f3:b9:b0:b0:6a:55:dc:21:9c:5e:29:ff:fa:f6:07:
         69:ff:c1:81:38:73:73:81:9f:08:0b:a4:b7:e5:30:88:08:12:
         90:93:b7:24:f4:48:8d:85:7c:d1:d7:b0:d1:43:19:da:cb:33:
         59:1b:6c:7c:8b:60:84:cf:90:5c:61:62:d4:00:35:a0:55:f3:
         b0:7c:46:e9:d0:90:d9:90:e8:c7:d1:cc:e1:38:2e:20:a6:ac:
         ce:83:3b:9d:14:e4:34:64:ad:af:3a:30:ed:bc:e7:bc:3b:1e:
         07:c1:a6:55:67:37:6d:cf:b9:03:19:12:63:54:5d:83:87:2c:
         29:f5:7a:75:54:12:6c:10:c3:4a:23:db:e8:17:7d:c5:5d:87:
         cd:eb:c5:6e:4f:86:39:b4:2e:c0:3b:8d:f8:82:5c:a6:a4:f5:
         3e:ad:08:5e:77:52:50:95:49:38:b1:56:59:73:50:ed:92:5c:
         26:61:87:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:35 2024 by rpki-client on console-fra.rpki-client.org