Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbadc4c2-0df9-3f7c-bf56-de05d52a42b0.roa
File:                     bbadc4c2-0df9-3f7c-bf56-de05d52a42b0.roa (raw, json)
Hash identifier:          3nyw/JDCAFRqOpe8yN7YqOKPe0nutQ1THV/P5EZUK4k=
Subject key identifier:   E0:4F:D1:D9:95:A7:25:57:55:C1:40:36:C7:4B:A5:2A:2D:4B:CB:E5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CD00D1440047881795FE3F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbadc4c2-0df9-3f7c-bf56-de05d52a42b0.roa
Signing time:             Thu 07 Nov 2024 13:42:18 +0000
ROA not before:           Thu 07 Nov 2024 13:42:18 +0000
ROA not after:            Wed 05 Feb 2025 13:42:18 +0000
asID:                     36630
IP address blocks:        2001:500:135::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:00:d1:44:00:47:88:17:95:fe:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  7 13:42:18 2024 GMT
            Not After : Feb  5 13:42:18 2025 GMT
        Subject: CN=92029e4f-f1db-4737-9263-c7568c9d27ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1f:1a:e5:ca:cb:6b:e4:e1:8d:91:5a:cd:8f:
                    9c:d9:2d:16:81:97:3e:ba:b1:cb:fb:f2:43:a3:c3:
                    41:bb:23:ab:db:e5:70:48:bf:23:bf:3b:52:86:ae:
                    70:20:55:b2:39:c9:5a:d9:3a:78:43:78:27:55:43:
                    10:2e:29:ff:0c:97:9b:bb:6c:c3:a8:1d:78:d4:c2:
                    fb:93:5f:0d:57:df:1e:32:7b:8a:3d:14:b1:62:1b:
                    cb:38:6d:e5:21:a3:9e:a2:f1:19:ab:19:17:14:34:
                    77:d7:96:f7:6f:ef:43:3f:d9:ff:39:1f:d4:ba:14:
                    2e:76:d7:e3:28:57:1f:fe:57:f3:0f:06:e7:d7:4d:
                    bb:37:bd:cf:33:b4:a1:71:46:7c:c2:65:26:65:7e:
                    0c:ad:ff:e2:55:b1:b3:42:2c:c2:63:e0:4c:45:40:
                    9b:40:95:a8:f3:af:34:cb:49:9e:8c:f4:46:dc:e0:
                    fb:44:c2:4d:7c:6b:c9:99:8b:32:16:71:ad:3e:77:
                    27:82:90:e3:c6:8d:94:a3:22:17:30:64:a1:0c:1c:
                    7e:66:26:0e:36:8d:c7:fc:5d:99:99:43:9f:8b:42:
                    66:73:76:4f:57:54:ca:44:a8:b4:c7:15:2d:1c:dd:
                    fc:d0:9a:0c:c3:dd:cc:9f:dd:86:f6:cd:87:14:85:
                    44:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4F:D1:D9:95:A7:25:57:55:C1:40:36:C7:4B:A5:2A:2D:4B:CB:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbadc4c2-0df9-3f7c-bf56-de05d52a42b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:73:32:0b:f2:41:7f:16:6c:c7:1d:3a:5f:d4:42:5c:16:c9:
         d3:44:23:7d:d2:54:fc:ef:5e:d1:74:93:b7:6f:98:8c:71:14:
         05:fa:2b:d4:58:2c:63:6e:9f:cd:5e:dc:92:c0:dd:88:06:59:
         a4:ea:7d:0d:06:1e:b8:80:82:86:cc:d3:1c:89:c4:b0:1b:42:
         67:61:05:1d:0c:ea:71:37:5a:2a:10:8c:d3:8f:55:d5:03:2d:
         03:8d:f1:75:e4:57:9e:91:12:51:36:99:d5:c5:02:32:7b:6e:
         45:e1:2f:c4:c8:fe:55:bb:e0:1a:6c:21:b8:96:72:f0:01:9a:
         89:c2:ed:22:83:6e:5a:2d:a7:33:fe:61:c0:0b:d5:b5:4f:cb:
         f9:8a:78:2d:aa:55:a3:93:07:48:c0:b3:b0:31:47:ef:70:30:
         9e:7d:a6:db:b8:77:78:66:14:eb:9f:7f:fb:01:f1:ab:e1:b3:
         e4:39:e6:dc:57:81:eb:11:9f:5b:28:e7:f8:b3:45:c8:b6:d8:
         a8:80:1b:6b:cd:8b:a9:03:1d:eb:0f:fc:32:45:50:a0:d0:b0:
         25:e3:b4:ee:99:d2:03:2a:90:81:19:b4:f1:d0:46:ed:cc:82:
         24:b4:ed:c3:73:45:4d:e2:c7:d7:d3:ad:45:22:ba:40:17:c2:
         c2:9c:6d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:43 2024 by rpki-client on console-fra.rpki-client.org