Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1361adb-477c-366f-b5fb-ee26ad6476c7.roa
File:                     a1361adb-477c-366f-b5fb-ee26ad6476c7.roa (raw, json)
Hash identifier:          xUPma5gV9qOCOevrZdCx/us4arYZd6dsfMdMpqvzXqU=
Subject key identifier:   D9:BB:F0:6B:C6:80:2C:EF:47:59:62:BB:F0:E6:F8:4B:34:FE:E5:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0885FC0415C78FDA3F23380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1361adb-477c-366f-b5fb-ee26ad6476c7.roa
Signing time:             Thu 14 Nov 2024 13:35:48 +0000
ROA not before:           Thu 14 Nov 2024 13:35:48 +0000
ROA not after:            Wed 12 Feb 2025 13:35:48 +0000
asID:                     396602
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:5f:c0:41:5c:78:fd:a3:f2:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:48 2024 GMT
            Not After : Feb 12 13:35:48 2025 GMT
        Subject: CN=d30bb4f0-5e70-40dd-b883-2af18adc670c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d0:eb:ba:d8:c8:5c:94:e9:32:c6:db:66:18:
                    1d:3d:82:a3:03:a3:0c:82:a4:21:66:b8:32:cb:94:
                    8e:69:47:3d:8f:2b:02:ae:98:95:fa:33:e5:80:e5:
                    36:61:0f:91:06:96:3d:e8:d1:76:f2:34:e6:03:14:
                    eb:58:0c:17:a0:ef:c1:9a:e6:fd:4a:22:22:cf:b8:
                    07:e0:23:ba:02:9a:7c:1b:95:93:ae:79:e8:4e:96:
                    aa:73:76:72:c0:58:cf:e6:48:e8:6f:21:8d:db:5a:
                    6a:8a:39:b6:84:6e:cf:39:a8:34:6e:25:22:34:85:
                    ea:72:16:f6:ff:97:9a:92:14:ed:a7:69:96:0f:3d:
                    7a:22:e5:a8:7d:ef:34:11:60:60:27:10:7c:d3:b9:
                    12:00:93:d8:dd:3f:5e:b8:1a:e3:09:bd:e5:87:69:
                    f2:5e:ba:f4:5b:55:cc:5a:b7:da:5a:ae:f9:61:1c:
                    fd:78:a1:7d:be:01:60:58:30:04:0e:2e:98:bf:91:
                    16:f2:10:bc:80:ae:87:af:28:ac:df:5e:af:4a:4d:
                    e1:fd:a6:e9:4f:c0:b0:2a:52:90:b9:8f:d8:16:ca:
                    75:29:60:4e:94:ef:74:a4:5e:45:6d:46:0e:f2:b8:
                    de:18:7e:50:39:3b:c2:d7:d2:ae:d0:1e:1f:2c:80:
                    ac:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BB:F0:6B:C6:80:2C:EF:47:59:62:BB:F0:E6:F8:4B:34:FE:E5:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1361adb-477c-366f-b5fb-ee26ad6476c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c7:aa:3c:d7:00:4e:c5:b3:ef:f0:32:80:48:5e:57:f8:a2:
         ab:a7:91:f4:67:b9:31:5c:9b:27:1b:4b:e8:e7:59:2f:dc:a4:
         bf:24:b1:ea:e5:54:78:78:94:9d:e8:68:55:d9:4e:7f:47:22:
         d8:c5:8d:7c:0b:29:b3:3b:a4:6a:11:82:73:bb:ba:e4:59:b0:
         ae:86:ca:7d:8e:2d:fc:bd:d8:30:36:09:b9:d4:fa:29:7a:b0:
         f6:b9:73:d2:73:76:e2:8b:0e:51:c8:f3:e6:13:bb:17:e4:02:
         e4:d2:82:d5:36:cb:0c:8d:88:4e:82:b4:0a:d5:f3:56:5f:21:
         92:04:39:b8:46:47:86:e1:a8:42:8f:cb:0e:52:3b:70:62:14:
         cd:4e:18:f4:04:c9:cf:ba:1e:a1:ff:e5:89:e3:9d:64:6f:34:
         aa:04:1e:a0:c9:eb:0e:ff:12:eb:ef:0d:38:66:b3:6c:c7:37:
         ac:11:08:51:99:55:09:0e:b7:34:16:c1:61:bc:70:fe:c3:01:
         ca:16:ca:22:c8:eb:86:3d:28:74:0d:84:1a:51:a3:de:af:16:
         80:3f:d7:67:ef:8c:4b:12:b2:34:13:cd:c0:fb:11:65:c9:57:
         ba:6c:ee:0a:ca:8f:1e:e2:c2:da:df:00:d6:1f:9d:da:f5:bf:
         9b:b9:6c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:11 2024 by rpki-client on console-ams.rpki-client.org