Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acb0f3bc-6e71-3dfd-981b-0573c23e86cc.roa
File:                     acb0f3bc-6e71-3dfd-981b-0573c23e86cc.roa (raw, json)
Hash identifier:          RL4G9Mzf2/eGPXTNZ6E9k0zAbECCNAw2j7jmsB7GdyI=
Subject key identifier:   35:2D:30:0E:4D:78:94:E9:F2:62:C8:CD:61:1C:54:C1:7C:A5:F2:A3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E08861E7003AF0E43F7BBEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acb0f3bc-6e71-3dfd-981b-0573c23e86cc.roa
Signing time:             Thu 14 Nov 2024 13:35:49 +0000
ROA not before:           Thu 14 Nov 2024 13:35:49 +0000
ROA not after:            Wed 12 Feb 2025 13:35:49 +0000
asID:                     397199
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:61:e7:00:3a:f0:e4:3f:7b:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:49 2024 GMT
            Not After : Feb 12 13:35:49 2025 GMT
        Subject: CN=3af5eb03-b62b-4208-8aa2-3aecd2865395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c1:e3:d4:79:cb:ed:c8:7b:00:9b:c0:6f:3c:
                    17:af:57:5a:b3:6d:00:3b:f8:ea:e5:a8:9e:d5:05:
                    ff:46:c8:a6:47:13:99:e5:f5:1d:71:ca:18:e7:66:
                    3a:24:41:61:79:bb:cc:af:05:b0:fc:10:13:9e:df:
                    91:9b:f8:2c:22:c8:1f:b5:e1:97:77:45:ab:72:2d:
                    f0:ed:00:93:4a:c7:e1:31:0b:1e:91:92:41:8d:ab:
                    7a:61:25:10:46:f0:0f:a2:2c:2a:de:27:e4:08:1b:
                    0c:4e:ef:eb:db:92:7b:46:4e:db:97:94:ee:4f:e8:
                    7d:e4:08:e7:35:44:d1:82:7a:ee:17:bf:c2:28:75:
                    83:54:11:39:c3:d4:37:8d:e4:a2:60:09:88:91:ae:
                    c2:7c:e2:47:9e:1e:16:d5:bf:2d:02:8f:1d:bc:84:
                    31:86:7f:8f:82:3c:7f:65:fa:41:a4:73:a4:48:f1:
                    90:1a:af:10:be:8b:ea:d5:b6:93:cd:77:e3:5e:68:
                    07:17:38:80:de:19:80:09:c3:25:fd:eb:73:41:5d:
                    be:7e:df:03:a0:20:82:5e:14:6e:68:10:d9:ca:35:
                    58:2d:40:73:f1:1d:2e:c4:62:79:f3:c0:90:e8:74:
                    96:02:dc:84:91:38:3c:fe:57:73:4a:17:c0:fe:a5:
                    62:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2D:30:0E:4D:78:94:E9:F2:62:C8:CD:61:1C:54:C1:7C:A5:F2:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acb0f3bc-6e71-3dfd-981b-0573c23e86cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f7:23:2c:8e:56:83:a1:e9:5f:f5:ae:cd:2d:32:6c:e2:13:
         bd:fe:4f:3b:5d:77:90:04:dc:d3:ef:67:11:89:74:86:5b:a8:
         e9:83:9d:73:e5:02:ed:81:cc:b8:aa:73:b0:4c:c1:98:8b:5d:
         52:eb:e2:a6:0b:0e:fd:d7:bb:da:51:89:70:88:c3:01:8a:9b:
         54:93:4e:cb:e5:1d:e4:27:a7:e0:be:3b:de:2e:b6:3a:cc:bf:
         23:52:a7:4b:4e:2a:8b:15:95:f3:56:cf:79:0b:4d:f1:3e:9e:
         24:52:69:3f:fe:89:bf:f1:b0:85:38:0a:5a:a7:68:dd:e9:3f:
         92:8a:c2:44:de:cb:ee:8d:15:5a:48:ba:a9:16:95:08:6a:0f:
         95:b7:72:01:a9:ee:8e:7a:bc:84:73:db:39:53:fa:8a:f0:26:
         53:82:cf:ec:a2:92:ad:34:12:1e:48:71:cf:ff:33:26:d0:f7:
         4b:79:39:44:01:95:b6:9d:a6:6f:68:79:e9:f2:5b:a4:8e:34:
         6d:62:bc:b9:55:af:53:8d:b0:ce:c3:3f:2b:31:93:9f:66:22:
         f7:71:e3:c1:ba:00:73:68:57:56:06:32:5b:1b:19:da:10:80:
         52:f7:aa:30:29:d0:d7:77:51:00:73:0b:2b:78:c5:d4:49:e6:
         94:7b:e3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:12 2024 by rpki-client on console-ams.rpki-client.org