Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6cd735d-c7bc-315e-b04d-d15e683277a6.roa
File:                     b6cd735d-c7bc-315e-b04d-d15e683277a6.roa (raw, json)
Hash identifier:          L7tLP0O3ltSfR8c9fl7RX3pkwJ7R1B7MuhRWH+qAQ6A=
Subject key identifier:   7E:ED:93:2E:EA:B9:F1:A9:00:D0:6C:BF:5A:F4:50:AC:77:EC:58:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CD00CD181067C9247AF5D600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6cd735d-c7bc-315e-b04d-d15e683277a6.roa
Signing time:             Thu 07 Nov 2024 13:42:17 +0000
ROA not before:           Thu 07 Nov 2024 13:42:17 +0000
ROA not after:            Wed 05 Feb 2025 13:42:17 +0000
asID:                     396591
IP address blocks:        2001:500:135::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:00:cd:18:10:67:c9:24:7a:f5:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  7 13:42:17 2024 GMT
            Not After : Feb  5 13:42:17 2025 GMT
        Subject: CN=1b08b469-e90c-42fe-a8db-08d614182d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:4e:4e:a9:56:c6:61:10:c7:ee:d4:0f:71:
                    e9:c4:8d:5b:0a:40:4e:e2:fa:7b:6f:7d:58:79:eb:
                    2f:51:9c:12:8d:49:ee:2d:f6:3b:79:f6:9a:a9:17:
                    87:83:09:72:be:94:96:bb:82:54:57:b1:a8:20:07:
                    60:b9:ea:69:d7:2a:b1:08:2e:0b:40:c7:f5:dc:7d:
                    a3:d2:ad:aa:d7:f6:47:69:ad:1a:e3:9a:3f:c5:1e:
                    03:d2:68:08:73:d4:f2:f0:a8:85:18:c7:a0:fd:82:
                    6e:5c:ab:2c:4c:4e:22:ee:1f:c0:db:cc:87:ee:26:
                    df:97:73:73:08:2e:cc:37:c4:1b:90:6a:08:a5:d4:
                    b4:91:30:e8:30:b3:8e:d5:d4:ae:08:cb:35:b1:41:
                    44:c3:1b:da:3e:62:ce:49:08:3e:ee:06:32:3d:98:
                    06:17:ef:e7:19:fc:6f:ff:63:35:bb:b1:c2:dd:5e:
                    2c:e7:37:18:77:e2:1d:2e:18:09:ba:0b:f1:41:cc:
                    eb:0a:74:35:67:2b:dc:c2:8e:3c:cd:e3:8c:f2:39:
                    a4:1f:c4:63:39:55:b1:89:11:c8:f8:dc:0e:23:7f:
                    6b:b8:54:63:48:ea:a6:2b:19:a8:8c:ed:92:14:1a:
                    b1:55:bc:28:10:6e:b7:f7:19:70:2b:5b:53:f8:49:
                    30:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:ED:93:2E:EA:B9:F1:A9:00:D0:6C:BF:5A:F4:50:AC:77:EC:58:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6cd735d-c7bc-315e-b04d-d15e683277a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:40:23:a3:2f:6b:4a:58:d9:e6:59:43:9d:3c:60:b9:c7:2a:
         f1:99:80:93:62:33:81:f0:f9:58:c9:49:69:a5:af:92:37:d0:
         fc:cb:d9:89:bc:96:73:e3:4f:ca:80:ac:4b:ee:ea:38:e5:67:
         80:43:2c:30:a1:81:70:3a:36:f9:60:bd:64:a7:15:00:56:83:
         f4:a7:28:22:9f:d3:de:fc:a3:50:00:5a:5c:53:71:78:f1:be:
         b2:b1:41:fb:dd:8f:06:31:15:ea:c6:da:7d:c8:80:4c:23:75:
         06:66:db:82:ae:af:3a:40:c7:de:7b:92:07:91:6d:3f:49:a9:
         85:6f:4e:9c:78:98:7e:89:0d:ef:f0:78:56:5a:3d:e0:33:c8:
         a6:d8:64:87:04:41:55:2d:b8:62:8b:18:08:54:62:9a:78:51:
         ee:17:a8:73:04:b5:a8:f1:35:a6:e0:0c:b3:25:51:8a:9e:7b:
         06:48:e9:42:cb:a7:dc:be:88:3b:73:eb:62:58:54:99:da:2b:
         aa:84:3d:f4:7a:f3:1d:3f:32:0d:bd:c8:dd:1e:a3:93:bb:7e:
         32:9b:4c:ff:79:68:c4:3f:fb:21:b6:e3:07:15:a5:85:da:4b:
         cf:d3:22:0f:c6:a7:27:fd:e2:06:32:4e:c2:f0:11:e3:c5:cf:
         dd:45:39:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:13 2024 by rpki-client on console-ams.rpki-client.org