Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96470af8-a40b-3157-a578-b330aca1dca2.roa
File:                     96470af8-a40b-3157-a578-b330aca1dca2.roa (raw, json)
Hash identifier:          /UcQIYy/rERxcHHluN7VYPdcJ/x8ZyX2XSk0Djc0LZI=
Subject key identifier:   C6:8F:23:EE:AD:71:EA:74:D0:6E:F6:11:1F:98:90:5F:56:0E:CE:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF51A506F8F3AF4B6092F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96470af8-a40b-3157-a578-b330aca1dca2.roa
Signing time:             Tue 12 Nov 2024 13:40:01 +0000
ROA not before:           Tue 12 Nov 2024 13:40:01 +0000
ROA not after:            Mon 10 Feb 2025 13:40:01 +0000
asID:                     396542
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:1a:50:6f:8f:3a:f4:b6:09:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:01 2024 GMT
            Not After : Feb 10 13:40:01 2025 GMT
        Subject: CN=9b8dc672-1ffb-4619-8b96-8dcf58c326e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ac:72:81:e2:14:b3:ed:b0:62:9a:90:ab:55:
                    f8:22:cb:f1:eb:53:01:d4:07:35:9d:af:09:21:19:
                    05:f1:3d:c6:3a:07:3b:e4:50:36:d3:92:da:c8:e3:
                    bc:03:8c:23:df:05:eb:74:e2:88:f6:35:9c:e7:31:
                    9d:10:8c:bd:b0:8f:9f:df:33:75:a3:1c:a5:0f:66:
                    f0:11:68:f6:0e:89:11:cf:fe:4a:42:ad:a9:92:9c:
                    4b:6f:3c:21:c1:98:20:e3:90:d9:b2:e4:93:ef:89:
                    8b:cb:27:e7:bf:58:c1:d7:4a:c7:c8:c2:0d:a9:f3:
                    40:61:66:21:fa:4e:d6:24:31:bd:1d:a7:63:03:1c:
                    8c:13:80:1f:e1:e3:bb:02:f4:57:c7:dd:e7:69:c9:
                    54:2f:00:05:13:60:43:18:0f:52:13:94:d6:dc:cb:
                    af:cd:2e:01:fc:59:64:1c:04:c6:9e:11:fc:58:21:
                    f0:db:27:24:ed:f8:b1:38:dc:9f:95:5a:3c:fc:d2:
                    cf:8b:d5:b0:6e:4c:7e:9e:16:d3:12:59:74:9b:ea:
                    3d:b9:3b:61:d9:33:78:cb:3f:69:dd:b6:1e:d9:90:
                    5b:d8:94:eb:7e:3a:90:93:66:25:8c:30:af:45:5f:
                    46:c2:6d:67:a9:e3:eb:c8:97:f5:17:64:48:38:39:
                    72:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8F:23:EE:AD:71:EA:74:D0:6E:F6:11:1F:98:90:5F:56:0E:CE:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96470af8-a40b-3157-a578-b330aca1dca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:7b:76:5b:76:09:0b:4c:2f:c2:2e:94:8a:06:59:37:f7:53:
         ba:be:2c:fa:13:18:5c:24:cc:37:c1:ee:02:46:d6:7b:97:ee:
         05:47:74:ce:97:e0:c4:55:8f:76:5e:01:17:7c:b8:f3:4d:52:
         11:38:6d:dc:b5:c5:ec:31:f2:80:95:3d:47:38:93:96:3e:d2:
         26:59:61:a4:63:2b:85:20:0a:59:a1:7b:49:ad:fb:37:66:ae:
         d7:82:1d:aa:48:fe:8c:9e:0b:cb:65:f3:c7:d3:45:a5:fa:e0:
         4e:67:8f:41:74:9f:a1:d5:fa:b6:39:d8:89:b5:6c:94:70:39:
         46:1c:62:28:7d:08:5b:56:11:33:a2:ca:75:07:94:51:ef:a1:
         22:f8:b3:69:c5:f0:73:6d:df:c0:78:d2:9d:9f:42:b2:25:e7:
         e3:b8:39:5c:b9:bb:25:45:8a:5f:47:9a:c6:f1:0b:97:05:0e:
         0e:55:29:05:39:85:bf:75:91:af:de:ab:b7:94:ed:36:7c:a7:
         8f:49:9f:fe:78:2e:fd:0c:99:da:0e:d6:63:82:4c:6a:74:25:
         92:c9:e9:19:57:25:2e:13:58:57:1b:b4:3f:5b:17:be:77:e4:
         fd:a0:df:37:b2:86:df:02:7f:11:5f:32:9f:d1:d4:24:68:09:
         28:ad:ff:6f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfa9RpQb4869LYJL0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTExMjEzNDAwMVoXDTI1MDIxMDEzNDAwMVowLzEtMCsGA1UEAxMk
OWI4ZGM2NzItMWZmYi00NjE5LThiOTYtOGRjZjU4YzMyNmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqxygeIUs+2wYpqQq1X4Isvx61MB1Ac1na8J
IRkF8T3GOgc75FA205LayOO8A4wj3wXrdOKI9jWc5zGdEIy9sI+f3zN1oxylD2bw
EWj2DokRz/5KQq2pkpxLbzwhwZgg45DZsuST74mLyyfnv1jB10rHyMINqfNAYWYh
+k7WJDG9HadjAxyME4Af4eO7AvRXx93naclULwAFE2BDGA9SE5TW3MuvzS4B/Flk
HATGnhH8WCHw2yck7fixONyflVo8/NLPi9Wwbkx+nhbTEll0m+o9uTth2TN4yz9p
3bYe2ZBb2JTrfjqQk2YljDCvRV9Gwm1nqePryJf1F2RIODly0wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMaPI+6tcep00G72ER+YkF9WDs53MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTY0NzBhZjgtYTQwYi0z
MTU3LWE1NzgtYjMzMGFjYTFkY2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC2e3ZbdgkLTC/CLpSKBlk391O6viz6ExhcJMw3
we4CRtZ7l+4FR3TOl+DEVY92XgEXfLjzTVIROG3ctcXsMfKAlT1HOJOWPtImWWGk
YyuFIApZoXtJrfs3Zq7Xgh2qSP6MngvLZfPH00Wl+uBOZ49BdJ+h1fq2OdiJtWyU
cDlGHGIofQhbVhEzosp1B5RR76Ei+LNpxfBzbd/AeNKdn0KyJefjuDlcubslRYpf
R5rG8QuXBQ4OVSkFOYW/dZGv3qu3lO02fKePSZ/+eC79DJnaDtZjgkxqdCWSyekZ
VyUuE1hXG7Q/Wxe+d+T9oN83sobfAn8RXzKf0dQkaAkorf9v
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:10 2024 by rpki-client on console-ams.rpki-client.org