Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a635cf40-1129-391f-af16-b09e6ed51ccd.roa
File:                     a635cf40-1129-391f-af16-b09e6ed51ccd.roa (raw, json)
Hash identifier:          cr0Oh06XLbIuycRSHe6Q3ggsmjyGJAy7U24iZyn4Nao=
Subject key identifier:   F0:CD:D7:C9:06:CB:9B:C5:37:B5:81:AD:1D:4C:E0:79:EC:94:73:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CD00CEF4037CB2381A73E280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a635cf40-1129-391f-af16-b09e6ed51ccd.roa
Signing time:             Thu 07 Nov 2024 13:42:17 +0000
ROA not before:           Thu 07 Nov 2024 13:42:17 +0000
ROA not after:            Wed 05 Feb 2025 13:42:17 +0000
asID:                     397210
IP address blocks:        2001:500:135::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:00:ce:f4:03:7c:b2:38:1a:73:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  7 13:42:17 2024 GMT
            Not After : Feb  5 13:42:17 2025 GMT
        Subject: CN=7448f7ae-2b7b-4f48-ad06-50c89c0f15ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e4:07:e5:0c:cc:1c:17:5b:df:8e:27:28:d0:
                    ad:91:7f:9e:22:80:f2:8d:77:90:9d:ff:73:7a:dc:
                    4e:85:03:1e:ad:cb:81:20:05:74:ab:da:09:a4:11:
                    af:a0:83:db:1d:c0:12:56:a7:69:26:16:19:30:c9:
                    9e:be:e1:21:14:2f:e4:06:70:31:bd:4e:ac:e2:58:
                    fe:80:df:1b:df:c9:5b:28:bc:b0:53:ca:11:09:0e:
                    4d:02:7c:89:fa:c3:b1:ea:fe:1e:ea:ad:cb:7a:95:
                    da:28:83:bf:94:c9:35:87:f7:ce:be:7c:ce:90:f1:
                    c5:d2:2f:ac:ec:4b:ab:e5:b7:3d:35:74:25:84:63:
                    5a:d4:43:d9:48:98:9b:63:ac:a7:f3:4c:62:a6:17:
                    9d:36:95:da:3b:8f:2f:d3:1e:0b:01:1c:67:61:84:
                    dc:95:33:31:2b:84:dd:de:8b:15:c9:bd:fd:bc:bc:
                    09:8f:8b:bf:7c:d5:e5:36:46:e1:73:1a:42:18:54:
                    96:a2:b9:b3:2a:f8:07:8d:72:03:b7:d9:a3:b5:e0:
                    3a:c4:19:47:e5:91:45:12:c8:87:5b:89:7a:0e:f8:
                    48:91:ff:cb:78:61:d4:d7:e8:6c:d4:05:f8:35:f0:
                    d0:c3:1e:84:60:ea:62:a5:32:4a:fa:60:e7:44:1c:
                    d8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CD:D7:C9:06:CB:9B:C5:37:B5:81:AD:1D:4C:E0:79:EC:94:73:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a635cf40-1129-391f-af16-b09e6ed51ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ea:8f:39:73:09:84:04:b3:d1:e3:ab:71:64:f1:2b:6b:48:
         30:77:94:7c:0f:0e:3f:77:f5:28:94:4e:b3:42:15:73:6c:67:
         23:fe:25:3c:b8:16:55:80:3c:a4:a8:82:58:49:34:a2:c2:c5:
         0f:4f:5a:63:00:51:5a:42:65:26:9c:75:01:69:e8:4b:35:0c:
         fe:8a:2b:c3:08:50:ef:ac:7e:92:a3:a0:ca:2b:4f:b7:1a:9c:
         41:c8:70:af:b8:9c:fb:a4:71:c4:2e:48:82:fd:dd:a4:ec:3a:
         25:38:31:71:51:2a:39:31:82:56:9e:d4:90:65:84:90:7f:1d:
         86:c3:e1:89:90:4c:a9:09:80:be:17:46:42:05:24:4c:eb:be:
         c3:06:71:0e:75:1e:96:dc:37:3a:8d:00:e8:5f:41:2c:31:4e:
         f2:18:86:c4:c5:db:db:35:f3:28:dc:05:0f:43:68:7b:a3:df:
         94:80:32:fd:89:cd:29:80:50:a5:3f:8c:c3:a7:7a:68:4f:00:
         18:28:0e:c8:7e:5c:e1:2c:39:bc:d9:06:51:fb:18:93:34:06:
         bb:f9:b2:7d:16:a9:b9:48:db:12:ca:39:10:ea:4c:55:be:0b:
         2d:92:12:8f:36:41:12:ef:f8:78:db:7a:82:a9:ea:b0:9c:59:
         b9:0c:cb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:11 2024 by rpki-client on console-ams.rpki-client.org