Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/968c2740-9d33-3505-bd27-9206f2c52b76.roa
File:                     968c2740-9d33-3505-bd27-9206f2c52b76.roa (raw, json)
Hash identifier:          RG85B2O3qo48UopOZE9o7jWWv4dAZ2VqaakLQa3/kxI=
Subject key identifier:   C0:64:00:11:7F:C0:D8:D1:3E:B3:EC:4C:F7:A0:5D:3F:E7:54:E5:22
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E08862FEB80FADBB5C36D180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/968c2740-9d33-3505-bd27-9206f2c52b76.roa
Signing time:             Thu 14 Nov 2024 13:35:49 +0000
ROA not before:           Thu 14 Nov 2024 13:35:49 +0000
ROA not after:            Wed 12 Feb 2025 13:35:49 +0000
asID:                     36630
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:62:fe:b8:0f:ad:bb:5c:36:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:49 2024 GMT
            Not After : Feb 12 13:35:49 2025 GMT
        Subject: CN=cb727542-2286-4f6e-bcf3-bcccea1c629d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:c5:79:6f:df:64:9d:00:75:09:b0:78:9c:
                    ed:ba:d7:b2:c3:ac:f8:1d:ca:0d:6d:69:65:f0:e4:
                    c9:47:69:2f:bd:ed:7f:e2:9b:c4:18:d8:06:c4:9f:
                    2b:1b:3a:c7:30:bc:bc:0f:d2:9c:fe:28:2f:d6:d5:
                    53:6e:80:f0:d1:8c:19:6c:3f:0b:bc:91:06:4c:f2:
                    ea:ff:45:dc:34:5f:36:d8:6e:67:9e:49:47:65:17:
                    8d:47:3c:6e:37:c3:66:17:ad:12:1b:80:dc:d5:0e:
                    16:15:fd:08:2a:b9:d7:0c:c7:46:c0:ca:cd:88:30:
                    cf:f9:58:2f:3e:53:7f:bb:20:61:f3:4b:b7:5e:25:
                    0b:63:47:75:d0:68:97:65:0d:67:32:ab:d1:f5:1d:
                    ce:10:7b:0c:04:1f:b7:b8:5c:6e:21:54:50:1e:94:
                    ac:22:83:73:dc:b1:53:1f:88:27:ee:79:2b:33:2a:
                    46:a7:61:b4:f3:6f:2e:d4:2e:1d:42:98:a0:31:8e:
                    d5:d9:13:c2:d0:20:1e:53:ab:29:ef:7d:b7:c3:95:
                    b9:ed:45:aa:26:a5:8e:89:05:a7:3c:74:ef:4f:62:
                    47:ea:f2:d3:9a:fc:7e:1d:0a:34:69:c8:eb:50:72:
                    1f:e6:41:a2:14:c6:1b:f3:05:bd:24:02:fd:4e:4e:
                    2b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:64:00:11:7F:C0:D8:D1:3E:B3:EC:4C:F7:A0:5D:3F:E7:54:E5:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/968c2740-9d33-3505-bd27-9206f2c52b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:4a:e9:e2:2a:53:b9:7d:10:08:55:7c:4c:f8:7a:82:46:f0:
         74:b6:0f:98:36:cb:93:51:72:4e:d9:fd:13:a8:78:cc:24:02:
         52:64:f5:40:ed:80:6c:23:d2:ed:bb:fe:50:b8:7b:91:ea:dc:
         67:64:ea:84:2e:09:dc:19:f5:7e:83:db:78:d5:80:51:ab:25:
         8a:8f:60:37:9f:0a:47:d4:04:35:99:75:d7:79:98:46:9f:65:
         98:21:51:10:9b:e4:0a:8a:6e:67:9b:99:80:33:64:af:63:d8:
         f3:a9:e2:29:62:4b:26:83:ff:d6:4d:b7:fa:a9:49:25:ad:96:
         b7:1f:d1:47:c9:ca:f4:40:69:fa:57:dd:b6:a8:57:fc:ae:55:
         72:c4:1f:75:b9:4f:84:d9:65:eb:78:bf:83:ca:91:d3:c6:4f:
         f8:7b:89:3c:2e:61:f6:40:de:92:07:9b:a3:59:a5:02:14:63:
         74:c2:39:10:af:89:d5:7e:5c:c0:40:22:23:f6:a7:15:f2:25:
         24:ba:d8:7f:42:91:01:75:9b:14:34:63:37:08:dd:cb:7b:50:
         09:53:ca:aa:ba:ae:98:48:3e:aa:53:50:12:c4:c3:6f:cc:d6:
         36:1f:6a:59:03:55:dc:b5:1f:db:0d:06:30:95:55:e8:33:51:
         cd:3a:1c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:36 2024 by rpki-client on console-fra.rpki-client.org