Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd3f39b1-225c-3a63-b362-46081ce30613.roa
File:                     bd3f39b1-225c-3a63-b362-46081ce30613.roa (raw, json)
Hash identifier:          tTTKozQvwCPyvsDEHisH8O7rgSugim/+VgaQXJhCRMs=
Subject key identifier:   A4:6D:0C:33:34:A2:7D:BD:67:6D:A3:83:91:5E:27:2C:B3:88:23:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0886259EAA70DFA31AEC2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd3f39b1-225c-3a63-b362-46081ce30613.roa
Signing time:             Thu 14 Nov 2024 13:35:49 +0000
ROA not before:           Thu 14 Nov 2024 13:35:49 +0000
ROA not after:            Wed 12 Feb 2025 13:35:49 +0000
asID:                     36626
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:62:59:ea:a7:0d:fa:31:ae:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:49 2024 GMT
            Not After : Feb 12 13:35:49 2025 GMT
        Subject: CN=497cdfa0-6cad-467f-b959-b49042829c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f8:d5:3e:ad:0c:e8:24:e0:d5:2f:d9:ec:6a:
                    c3:fd:41:be:d3:28:9d:74:65:67:fc:80:80:5f:8a:
                    08:3c:c3:f9:96:cc:2b:02:b3:e3:cd:75:e2:c1:93:
                    cc:f7:22:d0:dd:3b:5d:55:95:8f:a8:36:10:fb:0b:
                    30:0f:58:f2:05:a5:11:90:24:09:4e:fd:e5:cf:6f:
                    9b:4e:c6:9f:4f:cf:c9:f7:17:c0:93:4e:7a:cf:f1:
                    42:35:57:85:fd:a7:6d:b0:0f:f6:1c:c9:c7:68:46:
                    40:34:c4:49:90:b4:c9:19:39:9f:87:0f:e7:88:12:
                    0c:11:79:07:10:ba:07:74:56:2e:b2:cb:c2:77:ad:
                    10:3b:38:c1:f8:b2:6b:56:05:1e:50:d9:4a:6e:ee:
                    ad:ff:a3:51:dd:86:07:fd:be:0c:c3:13:2c:24:87:
                    63:96:11:50:60:c6:45:78:7a:7c:bf:d2:b0:05:7c:
                    44:14:9e:50:6f:4e:55:03:e0:c2:2e:34:91:4c:f4:
                    4a:fc:0e:82:08:3c:f7:dd:5f:38:46:47:85:b5:0b:
                    57:73:2f:b0:92:5a:15:48:f7:2d:43:59:5b:29:89:
                    b6:b3:ef:e4:70:66:3f:05:e0:d9:82:9d:ff:b9:f6:
                    ea:81:6d:99:61:a0:5f:49:70:76:0d:5d:e9:e0:6e:
                    eb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6D:0C:33:34:A2:7D:BD:67:6D:A3:83:91:5E:27:2C:B3:88:23:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd3f39b1-225c-3a63-b362-46081ce30613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f6:dc:c7:6c:1c:93:f7:ab:7b:4b:6c:44:51:67:ea:d6:55:
         e7:2a:2e:a7:e9:18:ee:f1:50:69:50:7a:b3:66:5d:2b:7f:c8:
         a5:82:8f:c9:68:5e:cc:e2:97:65:f8:64:0f:9a:6c:66:ea:d1:
         f2:6c:f4:4b:3b:d8:e6:c6:1c:83:ef:45:09:b3:db:99:2b:49:
         92:d0:78:2c:d1:cd:00:b7:41:ab:74:f0:5a:7d:36:16:db:9a:
         6a:ce:e9:29:d1:ec:a9:5b:78:86:37:f0:4e:1c:d3:f3:37:d7:
         e1:95:30:bf:a1:6e:fc:17:71:37:be:6c:42:99:77:fc:61:6a:
         0c:7f:bd:ac:1c:72:54:83:2c:5e:89:87:7c:4b:6f:1a:82:1d:
         f8:bb:cd:40:12:2d:1f:47:e1:ea:5b:83:6f:50:98:11:cd:1a:
         c7:3e:eb:63:a7:9a:cc:ce:d9:61:87:ce:71:88:bc:f4:0e:bb:
         29:a7:b6:bb:23:1d:c5:6f:b8:3b:47:20:4a:c9:e9:46:47:07:
         49:ba:e7:0b:3c:6b:92:05:28:ed:b1:de:41:cb:ba:6e:86:46:
         7e:97:ea:51:ba:5f:0d:f4:ba:27:0c:fe:a7:ff:21:48:f5:50:
         56:dc:a1:fd:89:f5:0b:52:fa:cd:80:24:fb:5f:69:9c:c9:6b:
         c6:fa:6b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:43 2024 by rpki-client on console-fra.rpki-client.org