Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98845791-6887-3eb7-8c37-73f4bb6814b7.roa
File:                     98845791-6887-3eb7-8c37-73f4bb6814b7.roa (raw, json)
Hash identifier:          BNc+u0o7g26t3CXpl7IbMFn3DBJn5sNXREFPEzgO/1g=
Subject key identifier:   3C:34:E3:C3:E0:47:3D:99:68:F6:F6:48:4D:CA:45:9D:A3:35:D2:6E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0885E1963541906C81B05C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98845791-6887-3eb7-8c37-73f4bb6814b7.roa
Signing time:             Thu 14 Nov 2024 13:35:47 +0000
ROA not before:           Thu 14 Nov 2024 13:35:47 +0000
ROA not after:            Wed 12 Feb 2025 13:35:47 +0000
asID:                     397209
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:5e:19:63:54:19:06:c8:1b:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:47 2024 GMT
            Not After : Feb 12 13:35:47 2025 GMT
        Subject: CN=5a6ef5c8-60eb-4ad4-b4db-3d466603050c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2e:57:9e:a1:73:b4:c9:0c:f9:55:0a:25:d0:
                    e2:84:a9:bc:e7:fe:f9:4d:c2:3b:a2:aa:3f:97:e9:
                    88:ae:f9:74:38:67:54:e8:5d:cf:82:9b:60:4a:0b:
                    e1:38:74:b1:ee:c3:8a:6c:ab:63:ee:72:40:bf:c8:
                    29:f7:a1:6f:9e:4b:6b:2e:9a:ce:05:7e:67:d8:dc:
                    80:04:c0:ec:da:76:af:e1:ac:00:5f:74:dc:20:57:
                    c0:c7:f0:d4:c8:17:96:2e:91:98:c4:23:fc:e1:5c:
                    cf:d0:0c:eb:c1:42:0c:3f:1d:4a:45:fa:4d:87:e8:
                    2b:41:e5:e9:f8:e7:98:41:6d:21:20:c6:b7:90:56:
                    c6:d4:a1:8c:4c:da:ee:30:2b:60:74:c3:cc:91:0f:
                    40:74:5c:5f:42:0c:4d:9a:39:ef:2f:96:11:a1:88:
                    78:59:9c:0d:99:92:41:54:53:b0:98:a2:64:75:7d:
                    fb:1d:3d:a4:cc:a8:04:36:ea:bd:41:72:d4:aa:9f:
                    cd:6f:67:43:cd:c6:aa:dc:a0:b6:64:14:11:1b:f4:
                    da:08:0c:85:ce:18:1b:ab:95:fc:18:b8:34:35:84:
                    dc:d9:a8:5a:5e:35:2e:34:09:60:a8:be:4c:4b:69:
                    40:19:31:b5:b4:d6:cd:7f:9a:0f:46:96:76:23:18:
                    f8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:34:E3:C3:E0:47:3D:99:68:F6:F6:48:4D:CA:45:9D:A3:35:D2:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98845791-6887-3eb7-8c37-73f4bb6814b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:0e:8b:62:e5:99:19:97:6b:e7:7e:fb:83:a5:25:1f:66:f6:
         ab:07:0e:dc:e0:4f:92:ee:75:23:78:c2:04:17:e8:ac:28:d6:
         63:9c:ef:d6:63:77:01:a1:a7:a5:21:9e:0a:0e:a1:a0:08:b7:
         67:d9:f5:75:6c:42:e2:34:21:55:f2:45:d6:15:d6:6a:c6:2d:
         60:6b:8c:8e:cc:69:a7:a7:22:42:eb:10:4b:04:11:9c:59:d8:
         bd:0e:85:4c:aa:9c:d7:9f:22:ce:f2:6f:95:5b:49:52:f9:a9:
         52:fb:18:42:df:22:d2:db:1a:8d:c9:b5:40:f9:e6:c2:49:4a:
         8e:23:55:d5:e4:73:9d:0b:e3:b8:17:47:a3:d6:5f:56:e7:cd:
         07:9c:e8:55:a7:d7:a7:46:3e:c2:1b:db:af:22:a4:98:5b:c1:
         b4:24:29:29:d0:98:0d:91:db:8f:cd:17:f5:8b:d5:44:a8:96:
         dd:a1:e1:15:65:b6:2a:10:20:1d:df:d3:66:31:cd:79:41:bf:
         62:7c:d4:e6:e2:d5:5c:1c:32:2c:a4:b3:0d:af:59:6e:ac:29:
         f9:30:85:fa:2a:23:62:d3:6d:98:77:ae:c0:e9:20:3a:55:fd:
         4d:a7:1d:47:d8:4b:a5:73:f0:a4:65:56:1d:16:47:30:6a:cf:
         cf:7f:06:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:10 2024 by rpki-client on console-ams.rpki-client.org