Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0112490-89b8-3789-ac0d-2bcb3ec0af36.roa
File:                     a0112490-89b8-3789-ac0d-2bcb3ec0af36.roa (raw, json)
Hash identifier:          ExtXItCCG7SZDuc4y87hcQAvCVrye26VM2QnKAw8p4o=
Subject key identifier:   A9:78:41:71:5D:7C:88:08:3A:AF:0C:FE:5E:D2:27:CF:91:F8:71:0A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF51FFE5C2C41447EBC34C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0112490-89b8-3789-ac0d-2bcb3ec0af36.roa
Signing time:             Tue 12 Nov 2024 13:40:04 +0000
ROA not before:           Tue 12 Nov 2024 13:40:04 +0000
ROA not after:            Mon 10 Feb 2025 13:40:04 +0000
asID:                     396574
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:1f:fe:5c:2c:41:44:7e:bc:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:04 2024 GMT
            Not After : Feb 10 13:40:04 2025 GMT
        Subject: CN=2df5f348-3c3c-494b-a3d0-7d9c6a68b1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:81:11:d9:60:2d:da:5d:7d:e1:43:d9:2f:66:
                    c7:fd:aa:71:4c:b9:14:20:b9:aa:81:36:fb:41:01:
                    d7:14:45:87:03:a7:78:cc:ce:97:b9:97:98:1f:c5:
                    d4:1e:bc:6d:26:c7:a8:9c:50:74:f7:bd:a3:16:06:
                    80:1f:9a:58:5e:fe:cb:69:48:f7:5f:6b:1d:13:be:
                    5f:01:76:a0:0b:6f:4e:fb:dd:27:6b:d8:ca:14:aa:
                    73:3f:3a:f2:c6:cd:17:7f:7b:5e:d6:fb:53:db:a9:
                    c5:62:ef:a9:c6:8d:c0:d7:a6:4e:e5:df:8a:16:b5:
                    d1:79:74:b0:90:da:f7:79:f5:76:37:fe:a1:60:54:
                    0c:45:32:da:82:10:9d:5a:22:bf:c2:02:b5:d3:92:
                    e2:17:98:1f:97:71:09:28:0f:6f:fe:31:57:16:95:
                    33:17:ff:be:c7:9f:53:7f:2d:67:c4:bd:8a:82:66:
                    21:f6:9b:a8:6e:1d:d7:de:4a:f5:41:80:00:e7:a5:
                    97:b2:97:6d:6c:0a:47:02:2d:1e:62:03:2f:08:ee:
                    b2:bc:76:b3:50:c6:f7:1b:b5:4b:39:9f:ec:90:4c:
                    6d:e8:12:6e:72:58:27:ca:8c:e5:1a:74:12:aa:d1:
                    c1:2a:31:47:f5:c1:db:af:6a:09:67:d9:a9:7a:91:
                    d4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:78:41:71:5D:7C:88:08:3A:AF:0C:FE:5E:D2:27:CF:91:F8:71:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0112490-89b8-3789-ac0d-2bcb3ec0af36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:d8:34:ae:36:88:8b:cd:f7:d3:35:d1:34:a5:9f:05:e5:50:
         3c:2b:8f:91:ed:59:cc:8f:03:c3:1c:cd:0a:36:9f:d4:4a:7e:
         0e:1c:3d:42:95:ee:f7:c8:15:56:0b:91:b4:8c:d6:96:6a:5d:
         bb:30:52:af:00:0b:30:95:eb:92:b6:b5:03:d7:aa:23:30:a1:
         62:a2:99:ec:4c:de:be:8d:06:e9:f7:4e:d6:a4:9c:f7:53:c6:
         16:b2:67:6c:95:44:e9:0a:ca:91:4f:ab:ac:f3:40:a9:f6:2b:
         f9:20:96:ad:d0:89:0f:a8:83:8f:28:a5:cc:17:26:22:2d:61:
         ed:b4:77:6a:df:fa:06:01:05:69:29:b5:c3:6a:47:23:7f:7a:
         45:04:67:51:ca:2f:4a:e7:4a:6c:68:fd:fb:ce:26:06:49:ed:
         79:ab:54:f8:2d:f9:e8:09:75:7f:66:1b:10:06:36:9a:1e:61:
         45:ba:d7:d9:9b:ba:51:42:25:ee:f7:a2:97:d0:21:2c:c4:13:
         eb:fc:e3:96:5d:ca:7c:db:e0:2a:38:c3:51:b0:c6:5a:32:47:
         ab:cc:06:1b:9b:9c:2a:b1:f4:5d:05:d3:0d:d1:c9:e0:b5:ec:
         43:f4:f6:a2:a2:98:53:fb:2f:e8:4a:cf:d9:02:c8:c9:8e:0d:
         49:2f:1f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:37 2024 by rpki-client on console-fra.rpki-client.org