Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b02d4165-a2d1-3713-8323-a413b4116c0a.roa
File:                     b02d4165-a2d1-3713-8323-a413b4116c0a.roa (raw, json)
Hash identifier:          vtMK0PbWUsqVjSk5GMuZbDTK45yJ8mgBk/vtPoPWWrg=
Subject key identifier:   3D:DC:10:C1:C9:74:71:F2:A4:1A:29:8D:C3:0E:C3:B6:2A:DB:D5:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF51C817E6A33FF7FBDDF64
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b02d4165-a2d1-3713-8323-a413b4116c0a.roa
Signing time:             Tue 12 Nov 2024 13:40:02 +0000
ROA not before:           Tue 12 Nov 2024 13:40:02 +0000
ROA not after:            Mon 10 Feb 2025 13:40:02 +0000
asID:                     396552
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:1c:81:7e:6a:33:ff:7f:bd:df:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:02 2024 GMT
            Not After : Feb 10 13:40:02 2025 GMT
        Subject: CN=6e165f8b-3936-4932-81aa-a751ce92e397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:71:cd:78:8d:61:50:0c:b1:61:28:a8:69:
                    38:8a:40:82:07:5c:53:ac:76:67:9a:1a:15:34:ee:
                    8c:88:f0:a0:28:a9:9c:df:50:4b:62:8a:f6:a4:f3:
                    04:b8:e3:54:d4:82:ca:4e:76:1c:94:5f:65:11:37:
                    44:06:ad:c7:b3:f6:ec:90:6d:fd:bb:65:da:3d:03:
                    94:e0:c0:02:e1:6d:44:6f:dc:09:9f:c1:37:12:41:
                    40:b0:6a:63:84:fa:3c:75:65:00:84:f1:a7:14:f8:
                    39:5b:fa:04:71:29:0b:05:3d:4e:a0:51:41:17:6e:
                    57:05:cc:a5:a5:62:d2:11:5f:6f:88:e2:6f:37:9b:
                    ff:ba:77:57:7c:b7:15:ac:71:fd:4e:f8:b2:6f:5f:
                    5f:57:99:1f:ea:2b:9a:b1:3e:8e:53:b7:89:47:3a:
                    17:87:ce:07:97:3a:7b:fa:6c:80:e9:b5:f3:9e:bd:
                    9c:c4:81:81:f8:fe:46:8c:07:6a:6d:b9:02:ae:3b:
                    90:59:a2:1c:29:03:1f:75:3d:97:78:e8:10:e4:d1:
                    f9:a0:fa:cd:07:a7:58:d1:83:ec:98:37:7a:ae:09:
                    b7:6e:cd:53:eb:87:08:a1:8d:93:77:81:6f:a8:fc:
                    09:ca:16:3c:55:eb:77:22:2a:a1:bd:ed:75:cf:ab:
                    55:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DC:10:C1:C9:74:71:F2:A4:1A:29:8D:C3:0E:C3:B6:2A:DB:D5:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b02d4165-a2d1-3713-8323-a413b4116c0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:6e:ac:23:c5:05:82:1b:25:3d:1d:a0:d3:28:fd:5d:46:60:
         40:ec:fd:59:c5:de:77:ea:b5:46:56:53:a0:d5:19:a5:f3:1b:
         bd:88:dd:41:bd:bd:ba:87:5e:7f:df:64:75:fd:5f:09:67:f9:
         37:de:b4:8b:1c:d2:aa:39:85:18:8e:82:5d:a6:50:ab:02:c1:
         e5:f1:97:1f:1b:60:ba:7b:39:74:85:1d:2e:3f:85:93:da:70:
         df:69:b9:ca:2a:29:ca:7c:98:ec:6d:4c:b0:72:2b:b5:d0:a5:
         a4:31:09:68:c2:49:f4:97:91:97:50:83:43:a4:e1:70:da:fe:
         01:1a:f5:86:6d:80:64:2c:0f:e7:cb:c4:38:ac:4a:7a:30:8c:
         24:1a:7d:0a:28:e1:1f:42:b2:ac:ec:9e:c8:54:67:81:ab:3d:
         15:fd:57:8a:90:42:db:8d:d7:57:09:6f:f6:1a:70:a5:17:86:
         e4:63:c3:2c:b7:5f:3b:eb:d4:86:4a:e1:c8:58:32:6a:de:12:
         4a:bb:2f:43:96:d7:c0:1e:64:7b:61:59:9a:bc:dc:87:d2:ac:
         4b:17:12:c2:b8:f4:6c:63:22:5c:41:55:c6:a1:dd:72:a8:dc:
         a9:b8:4f:fb:a6:7e:3a:b1:3b:89:d1:28:79:af:47:27:ef:57:
         1f:92:26:33
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfa9RyBfmoz/3+932QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTExMjEzNDAwMloXDTI1MDIxMDEzNDAwMlowLzEtMCsGA1UEAxMk
NmUxNjVmOGItMzkzNi00OTMyLTgxYWEtYTc1MWNlOTJlMzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS1xzXiNYVAMsWEoqGk4ikCCB1xTrHZnmhoV
NO6MiPCgKKmc31BLYor2pPMEuONU1ILKTnYclF9lETdEBq3Hs/bskG39u2XaPQOU
4MAC4W1Eb9wJn8E3EkFAsGpjhPo8dWUAhPGnFPg5W/oEcSkLBT1OoFFBF25XBcyl
pWLSEV9viOJvN5v/undXfLcVrHH9Tviyb19fV5kf6iuasT6OU7eJRzoXh84Hlzp7
+myA6bXznr2cxIGB+P5GjAdqbbkCrjuQWaIcKQMfdT2XeOgQ5NH5oPrNB6dY0YPs
mDd6rgm3bs1T64cIoY2Td4FvqPwJyhY8Vet3Iiqhve11z6tVNwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFD3cEMHJdHHypBopjcMOw7Yq29WmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjAyZDQxNjUtYTJkMS0z
NzEzLTgzMjMtYTQxM2I0MTE2YzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA3bqwjxQWCGyU9HaDTKP1dRmBA7P1Zxd536rVG
VlOg1Rml8xu9iN1Bvb26h15/32R1/V8JZ/k33rSLHNKqOYUYjoJdplCrAsHl8Zcf
G2C6ezl0hR0uP4WT2nDfabnKKinKfJjsbUywciu10KWkMQlowkn0l5GXUINDpOFw
2v4BGvWGbYBkLA/ny8Q4rEp6MIwkGn0KKOEfQrKs7J7IVGeBqz0V/VeKkELbjddX
CW/2GnClF4bkY8Mst18769SGSuHIWDJq3hJKuy9DltfAHmR7YVmavNyH0qxLFxLC
uPRsYyJcQVXGod1yqNypuE/7pn46sTuJ0Sh5r0cn71cfkiYz
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:41 2024 by rpki-client on console-fra.rpki-client.org