Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7657f7d-37bb-3af7-911a-081a6105e01b.roa
File:                     c7657f7d-37bb-3af7-911a-081a6105e01b.roa (raw, json)
Hash identifier:          chpuEp22tIWutmxfd45m0lQSQGd+icDM577BGtKibhE=
Subject key identifier:   E3:4F:A2:C6:15:F5:D9:85:F5:A1:3C:2B:51:8D:1C:F7:B8:B8:3B:35
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CD00CDF30F6FDBD09D136040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7657f7d-37bb-3af7-911a-081a6105e01b.roa
Signing time:             Thu 07 Nov 2024 13:42:17 +0000
ROA not before:           Thu 07 Nov 2024 13:42:17 +0000
ROA not after:            Wed 05 Feb 2025 13:42:17 +0000
asID:                     396599
IP address blocks:        2001:500:135::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:00:cd:f3:0f:6f:db:d0:9d:13:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  7 13:42:17 2024 GMT
            Not After : Feb  5 13:42:17 2025 GMT
        Subject: CN=2ee4b4b8-2f77-4462-addb-1cd02a7e2d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f0:47:30:c7:68:f7:aa:c5:0e:79:dd:e7:15:
                    61:2e:c2:60:3b:59:39:9b:93:87:59:4c:7a:a0:ce:
                    49:16:36:cc:33:4a:68:4d:dc:c5:96:01:5b:9f:cc:
                    8f:ab:09:ab:20:b1:25:13:43:e1:e7:0f:bb:df:83:
                    11:45:b9:61:03:43:38:d4:6b:a7:40:b0:6f:c7:b9:
                    05:b9:ba:02:dc:89:e5:2b:d2:07:ae:31:bf:34:7f:
                    97:e3:51:38:18:e8:a6:bf:5a:06:42:68:e9:b9:55:
                    26:03:b9:4b:25:e0:ad:26:5f:98:09:3f:d0:fc:2d:
                    43:00:41:d9:13:5b:a4:e8:53:36:77:e7:57:7f:f7:
                    b0:ac:23:a1:83:a4:a9:f9:83:22:86:d5:58:34:d6:
                    7c:a6:f2:7a:6d:4d:b7:bb:76:89:08:45:b5:3c:6b:
                    53:01:5c:aa:92:99:59:f3:da:23:23:f3:35:46:23:
                    fb:d2:06:01:f2:a8:00:89:e1:f9:04:c6:0c:91:5c:
                    40:24:cc:ab:e5:2a:18:bb:46:54:6a:e7:f4:44:9a:
                    e1:75:75:45:55:fb:4d:bd:86:94:e6:b7:35:6e:5d:
                    49:f4:7d:af:ba:b0:f6:ab:92:df:52:6c:93:02:00:
                    90:e0:d4:e4:d1:0c:8e:eb:81:b0:97:26:ad:8d:87:
                    29:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4F:A2:C6:15:F5:D9:85:F5:A1:3C:2B:51:8D:1C:F7:B8:B8:3B:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7657f7d-37bb-3af7-911a-081a6105e01b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:f0:22:84:e9:99:6e:ce:30:b7:79:92:0d:4f:b9:a4:cf:f6:
         88:25:7b:ec:33:7f:2b:0e:83:37:cb:22:ad:c0:c7:11:51:15:
         16:66:21:a7:3d:72:4d:e6:2d:92:0c:42:e1:66:7b:77:35:d8:
         d1:49:8c:45:d7:3f:f3:fb:14:c4:f9:17:90:4f:c4:7a:7f:ef:
         0e:ac:44:bd:08:a7:52:62:12:a9:b7:ae:b9:74:3a:66:27:1c:
         47:f7:84:f5:8a:7a:6d:fd:c4:72:e7:01:83:b3:ae:fb:58:8b:
         ca:0c:39:1c:ad:33:56:ce:db:ca:9d:5f:19:6e:0f:f3:eb:e4:
         75:d2:75:16:49:ae:3c:87:1a:53:b8:e0:06:f5:45:00:66:3a:
         6d:ea:48:fd:31:a5:c9:c1:75:a5:56:a2:6a:e8:d8:a9:5c:06:
         19:fa:f4:ad:00:9b:38:8c:6c:7b:2f:4a:c3:4e:17:23:21:63:
         29:ef:ae:7a:0b:bc:b5:fe:db:e2:6b:5e:ca:f7:0b:dd:03:2b:
         47:b1:3d:63:df:ff:a3:47:9c:af:97:26:27:a2:89:60:6b:8a:
         dd:7c:72:62:9f:03:7f:7c:b3:04:86:6d:c7:d9:63:14:e9:8b:
         bd:64:43:04:f1:13:06:3f:4f:53:11:af:7d:d4:90:34:fd:48:
         fc:0a:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:46 2024 by rpki-client on console-fra.rpki-client.org