Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb3a2a47-fd80-3a8b-83e9-5fe9bb43c954.roa
File:                     bb3a2a47-fd80-3a8b-83e9-5fe9bb43c954.roa (raw, json)
Hash identifier:          9R91kFNrbtFQiJ1eBkpOjaTvO9amgkz46rwas1NUO8Q=
Subject key identifier:   CE:D1:6D:0D:EC:20:5A:2D:BF:12:5C:28:0E:57:0D:10:31:80:5F:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0885AD1AE0CB3FBB0F9DDC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb3a2a47-fd80-3a8b-83e9-5fe9bb43c954.roa
Signing time:             Thu 14 Nov 2024 13:35:45 +0000
ROA not before:           Thu 14 Nov 2024 13:35:45 +0000
ROA not after:            Wed 12 Feb 2025 13:35:45 +0000
asID:                     396554
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:5a:d1:ae:0c:b3:fb:b0:f9:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:45 2024 GMT
            Not After : Feb 12 13:35:45 2025 GMT
        Subject: CN=f5d54a79-a4ee-41c0-a98e-0e099964626b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7c:99:d3:83:c0:48:b1:6d:33:76:be:8c:15:
                    f4:27:e7:b6:dd:7d:1c:f4:1f:01:63:0e:b1:33:c8:
                    18:fd:e6:36:33:69:3d:1e:f6:9a:a0:ed:e7:ff:01:
                    4f:88:48:a2:27:11:21:ec:9b:46:a0:47:e1:e2:4c:
                    61:65:ed:09:5d:c6:cc:bd:c4:86:6b:3f:c1:70:d7:
                    37:6a:d6:f2:61:be:7d:2e:33:2c:c0:e3:bc:b9:02:
                    92:f9:51:6b:96:df:4e:73:1a:a6:08:a6:06:97:96:
                    c1:00:6f:62:fd:ab:c1:89:72:f4:b0:b8:f0:2f:ff:
                    00:e4:48:2c:0b:a7:8f:70:2c:a3:e7:d3:4d:b6:d2:
                    6e:e4:2d:0d:2b:b9:31:f6:e3:7c:2b:f1:bb:84:67:
                    59:db:d7:b6:65:0e:8a:3b:d0:1c:13:2b:cb:44:de:
                    68:f2:4a:b2:6c:a3:8e:bd:a1:1c:ea:b9:e3:f8:87:
                    a8:72:77:bd:c9:5b:4b:21:c5:95:77:bf:fc:3f:6e:
                    f9:7c:55:fb:85:7b:8d:59:2e:ef:1b:a9:c7:9d:83:
                    5f:5a:84:db:7d:3c:9c:0d:8f:72:71:2a:7d:f7:86:
                    c5:dc:7c:81:95:99:71:1a:94:c1:d0:f8:e8:f4:d8:
                    ed:09:00:49:53:71:a1:bb:2c:6d:9d:4a:f2:24:84:
                    11:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D1:6D:0D:EC:20:5A:2D:BF:12:5C:28:0E:57:0D:10:31:80:5F:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb3a2a47-fd80-3a8b-83e9-5fe9bb43c954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:04:95:4c:1a:4f:7f:37:7c:3e:d6:9b:db:8f:93:31:d8:39:
         17:21:c8:f9:fb:de:44:7d:b6:36:30:bb:87:b4:25:98:3c:a5:
         3a:f8:8e:86:c5:94:5a:10:fd:ba:f7:8a:c0:fc:59:39:6a:1d:
         c2:2c:7c:f6:1d:83:69:0c:6f:ea:98:82:d7:b1:7b:3e:f5:e4:
         78:49:6c:b9:79:53:23:72:f0:ae:c6:5c:a1:a4:5e:72:23:fd:
         34:76:64:bf:cd:63:6c:9f:d8:58:b9:81:84:8e:02:59:33:45:
         c7:09:1b:4c:1f:98:9a:65:93:5b:0b:58:1e:f6:55:6c:45:c7:
         b9:1c:9e:25:5f:65:e5:e6:b1:82:9b:10:4b:56:5e:46:a2:72:
         f5:4a:6a:50:f6:8b:db:51:9d:b7:a8:29:eb:1a:39:28:7e:a1:
         3f:13:68:55:44:81:ab:0f:e5:9e:35:c3:e6:e7:91:81:ce:6b:
         8c:9f:2f:f8:83:2c:d1:f5:62:1d:d8:f4:6b:29:51:3c:c3:1d:
         44:e7:43:97:d4:77:82:96:9c:fd:79:70:aa:a4:9f:a2:bc:6c:
         c1:b8:b8:e4:2b:d4:84:41:f8:a6:71:79:eb:f0:a2:89:dc:7d:
         18:73:28:fc:3a:c6:a1:8a:e0:e1:bd:55:f3:f4:97:96:e7:db:
         45:64:ce:5c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfgiFrRrgyz+7D53cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTExNDEzMzU0NVoXDTI1MDIxMjEzMzU0NVowLzEtMCsGA1UEAxMk
ZjVkNTRhNzktYTRlZS00MWMwLWE5OGUtMGUwOTk5NjQ2MjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHyZ04PASLFtM3a+jBX0J+e23X0c9B8BYw6x
M8gY/eY2M2k9HvaaoO3n/wFPiEiiJxEh7JtGoEfh4kxhZe0JXcbMvcSGaz/BcNc3
atbyYb59LjMswOO8uQKS+VFrlt9OcxqmCKYGl5bBAG9i/avBiXL0sLjwL/8A5Egs
C6ePcCyj59NNttJu5C0NK7kx9uN8K/G7hGdZ29e2ZQ6KO9AcEyvLRN5o8kqybKOO
vaEc6rnj+Ieocne9yVtLIcWVd7/8P275fFX7hXuNWS7vG6nHnYNfWoTbfTycDY9y
cSp994bF3HyBlZlxGpTB0Pjo9NjtCQBJU3GhuyxtnUryJIQRRwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFM7RbQ3sIFotvxJcKA5XDRAxgF/CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmIzYTJhNDctZmQ4MC0z
YThiLTgzZTktNWZlOWJiNDNjOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAkBJVMGk9/N3w+1pvbj5Mx2DkXIcj5+95EfbY2
MLuHtCWYPKU6+I6GxZRaEP2694rA/Fk5ah3CLHz2HYNpDG/qmILXsXs+9eR4SWy5
eVMjcvCuxlyhpF5yI/00dmS/zWNsn9hYuYGEjgJZM0XHCRtMH5iaZZNbC1ge9lVs
Rce5HJ4lX2Xl5rGCmxBLVl5GonL1SmpQ9ovbUZ23qCnrGjkofqE/E2hVRIGrD+We
NcPm55GBzmuMny/4gyzR9WId2PRrKVE8wx1E50OX1HeClpz9eXCqpJ+ivGzBuLjk
K9SEQfimcXnr8KKJ3H0Ycyj8OsahiuDhvVXz9JeW59tFZM5c
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:43 2024 by rpki-client on console-fra.rpki-client.org