Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa
File:                     a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa (raw, json)
Hash identifier:          wvvECBJwc2oIwPER8f0OBXdv3du2nxMUo1z76st8qA8=
Subject key identifier:   B6:AB:DF:61:A4:C6:7C:EB:60:20:87:70:E7:1C:74:F2:50:82:16:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0885B5F25C30B36380782F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa
Signing time:             Thu 14 Nov 2024 13:35:46 +0000
ROA not before:           Thu 14 Nov 2024 13:35:46 +0000
ROA not after:            Wed 12 Feb 2025 13:35:46 +0000
asID:                     396563
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:5b:5f:25:c3:0b:36:38:07:82:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:46 2024 GMT
            Not After : Feb 12 13:35:46 2025 GMT
        Subject: CN=375814c5-6ce8-4f1e-b08a-3f35ee984967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:7e:75:f3:a9:95:c6:c3:73:22:c0:80:ba:
                    08:d6:4d:75:f5:74:f5:ef:36:f3:8c:c3:7f:f7:19:
                    da:42:a5:b5:28:ae:a3:8c:a2:14:04:57:12:59:5e:
                    50:5a:bc:4a:2a:f6:53:ef:72:43:69:8c:c0:cb:c3:
                    70:03:bc:0f:d6:28:de:2d:4a:33:a2:af:f2:8c:a4:
                    02:98:0d:c7:27:00:b7:16:19:d9:2d:bc:cd:51:08:
                    3b:4a:53:0d:97:99:bf:68:f9:b2:af:8a:e7:0e:58:
                    49:8a:62:cf:82:78:fd:ee:64:37:bc:b0:e3:cc:dd:
                    84:41:42:af:15:3b:62:c6:1f:9e:7f:34:e1:c2:6e:
                    d4:55:9f:f8:ed:d3:e6:dd:d9:06:b3:b0:38:e3:d8:
                    88:0a:c5:9d:2f:b1:3d:0b:9b:a6:e5:6b:65:65:05:
                    d3:62:05:19:03:8e:b5:28:0d:a9:0d:38:c1:a9:f1:
                    86:8d:dd:cd:68:0f:f4:28:4f:ae:9f:56:d5:cc:43:
                    2c:68:db:d7:f6:8b:c8:22:6c:6f:26:40:bb:dd:04:
                    46:93:be:2b:b0:1d:e5:9c:52:84:b0:8b:03:60:6a:
                    ee:0f:fe:ab:9a:2c:0c:b0:9b:1f:2e:11:c8:5e:32:
                    be:c0:4d:85:71:9c:9b:f2:e6:d1:77:e0:b5:5f:19:
                    d8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AB:DF:61:A4:C6:7C:EB:60:20:87:70:E7:1C:74:F2:50:82:16:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:97:93:91:12:9c:b1:05:0f:7f:93:74:5c:1c:4c:82:6a:6c:
         97:63:56:d0:33:85:3a:2b:38:52:48:95:06:69:f1:f6:33:5c:
         fc:73:9b:e8:fa:56:a6:f8:68:85:9a:f6:3d:1b:e5:06:ae:41:
         bd:92:20:d1:7e:4f:a3:67:ea:8b:03:da:80:a0:e3:b3:8b:05:
         b5:e4:b2:90:b7:0f:8a:4e:a8:07:9b:fe:cc:5a:27:b7:6b:43:
         2a:98:e3:a2:52:dd:c3:40:6e:78:4f:d4:a0:3a:7c:c2:db:74:
         e9:4f:e5:2c:fb:14:fc:b9:fd:6f:5e:72:bb:54:b7:2e:05:3d:
         22:6c:86:29:03:38:c0:1e:2d:ba:ff:0c:9c:ba:5d:33:78:b2:
         b8:9c:8f:1f:ce:43:0a:fe:43:8b:4d:c3:f8:14:76:00:74:40:
         db:3c:b8:e2:6a:91:19:ff:38:4f:fd:44:c1:f6:00:f7:4b:a0:
         d0:1d:25:3b:01:34:ed:b4:d9:ad:98:b8:26:74:5a:57:7b:c4:
         c9:b7:81:c5:b7:6b:e1:47:92:d7:80:13:ab:61:9b:38:c9:9e:
         5e:fa:40:a5:7e:35:62:90:bc:88:2b:9c:96:a9:6f:d1:b9:a1:
         e6:76:12:d0:41:ab:b3:d3:42:4a:8e:e2:58:92:51:1c:d8:c9:
         54:3c:cc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:40 2024 by rpki-client on console-fra.rpki-client.org