Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acd67330-9d77-30ea-aff9-4cd7a6f260fa.roa
File:                     acd67330-9d77-30ea-aff9-4cd7a6f260fa.roa (raw, json)
Hash identifier:          whznbtF/y6HA215FCdBOU9VnREx7JI/VetXiNulsqxU=
Subject key identifier:   A2:D2:4C:A9:31:F7:7E:D5:3D:A6:E5:EA:BC:BD:06:3E:AE:2A:29:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CD00CB620FC8A0C482959900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acd67330-9d77-30ea-aff9-4cd7a6f260fa.roa
Signing time:             Thu 07 Nov 2024 13:42:16 +0000
ROA not before:           Thu 07 Nov 2024 13:42:16 +0000
ROA not after:            Wed 05 Feb 2025 13:42:16 +0000
asID:                     397204
IP address blocks:        2001:500:135::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:00:cb:62:0f:c8:a0:c4:82:95:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  7 13:42:16 2024 GMT
            Not After : Feb  5 13:42:16 2025 GMT
        Subject: CN=e6f83c4c-2d7b-4790-9dd6-17c495849dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:68:59:72:bf:23:3c:58:d1:33:82:8f:6b:ed:
                    e1:5b:eb:66:d7:0f:68:35:84:97:19:10:21:db:26:
                    d1:05:7d:e5:bf:e8:63:9d:9c:69:6a:73:21:43:4c:
                    b0:99:dd:dc:81:b8:c8:cf:93:18:08:00:6a:0f:2d:
                    09:d5:ac:1d:b0:71:cd:c6:8c:90:99:1e:c9:fe:9c:
                    c9:b8:7f:c6:8c:e9:91:22:86:da:0e:b9:b8:2f:b7:
                    2c:05:a0:5f:dc:3d:a0:ce:93:0e:4d:92:8e:99:77:
                    de:7a:94:eb:5c:9c:4f:f4:1b:a2:7e:07:72:a5:33:
                    c2:50:87:c5:31:85:59:40:d4:35:89:c0:9a:84:af:
                    1f:7d:5f:f5:1a:63:7f:c3:be:81:e5:7f:d6:09:d7:
                    db:96:8a:e9:a2:b7:05:2a:e3:1a:29:1b:bb:b3:eb:
                    11:6a:6e:d2:ee:58:1c:07:16:92:1b:5e:15:11:bd:
                    b4:e4:5c:b7:a9:de:56:99:89:ab:73:4f:81:29:90:
                    fb:24:3d:47:85:64:47:c2:6a:7b:da:a2:cc:7e:db:
                    73:0d:7b:1f:cb:c6:ae:c2:77:fc:15:55:b3:ec:e4:
                    0f:17:e6:4b:f2:5c:e0:2f:e4:f3:30:09:54:90:26:
                    49:88:78:77:c4:5f:99:25:dc:6e:77:7f:3e:3d:12:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D2:4C:A9:31:F7:7E:D5:3D:A6:E5:EA:BC:BD:06:3E:AE:2A:29:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acd67330-9d77-30ea-aff9-4cd7a6f260fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:12:ca:e4:57:82:75:c0:a8:f8:7a:96:a4:14:8e:36:bc:c0:
         ab:09:f9:d3:70:f3:c5:3c:00:a9:cf:ba:c9:fa:fa:8a:8a:99:
         a3:c6:7f:ca:14:f4:cd:9f:53:14:58:9d:54:db:10:be:bc:c0:
         f7:77:86:92:16:48:c9:ca:a4:66:ae:c2:07:d7:94:b3:8a:76:
         2f:a6:c7:a1:c0:4c:33:ce:04:75:22:b7:e2:4a:25:d3:c4:ce:
         7a:fa:9c:77:dc:88:91:67:25:c3:3c:c5:06:3a:7d:3a:53:c1:
         30:14:33:ea:8f:c0:a9:00:f7:93:bd:17:30:9d:42:17:58:56:
         13:41:eb:17:c0:5c:d8:c7:20:5b:59:9b:46:57:14:b7:57:fe:
         9e:ad:23:f2:fe:1b:a9:80:cc:f9:d0:aa:95:95:37:f3:b0:f2:
         18:b1:b3:4b:e8:be:55:20:28:a2:a0:e5:a9:69:82:0e:c2:87:
         a0:fc:be:33:dd:ad:a6:18:56:88:36:ae:34:a6:09:93:6d:85:
         f5:d1:d4:ce:21:6c:15:18:83:ab:69:99:16:09:0d:be:34:ad:
         48:b9:89:0e:2a:3f:1c:ad:92:04:e6:dc:d9:0b:3a:03:01:ca:
         66:e1:27:65:f2:e8:08:b7:a0:1b:08:78:ac:64:20:12:1d:14:
         69:25:8c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:12 2024 by rpki-client on console-ams.rpki-client.org