Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7badab9-b8da-3728-9606-56571b7ffcee.roa
File:                     c7badab9-b8da-3728-9606-56571b7ffcee.roa (raw, json)
Hash identifier:          wXNPR5G9lmXrz4mwIwK29qsnLSzLfUK0Y8T9u1Q2V2I=
Subject key identifier:   1F:83:1D:62:75:E2:ED:35:1D:2C:DD:4D:52:B1:98:54:89:0E:26:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CD00D1E7B80F94D75436A300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7badab9-b8da-3728-9606-56571b7ffcee.roa
Signing time:             Thu 07 Nov 2024 13:42:19 +0000
ROA not before:           Thu 07 Nov 2024 13:42:19 +0000
ROA not after:            Wed 05 Feb 2025 13:42:19 +0000
asID:                     396584
IP address blocks:        2001:500:135::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:00:d1:e7:b8:0f:94:d7:54:36:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  7 13:42:19 2024 GMT
            Not After : Feb  5 13:42:19 2025 GMT
        Subject: CN=dee31464-438b-4e35-b7a2-7f90ac054ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:93:4b:f5:41:dd:bf:6a:a1:05:be:50:b0:70:
                    01:ae:fc:51:3f:d7:3c:d7:1d:7f:25:df:65:c1:21:
                    d0:97:b0:b0:5b:45:8b:64:58:5a:85:e4:44:80:97:
                    59:90:eb:5c:cd:1d:88:5f:06:0b:36:85:ab:3e:07:
                    a0:cf:5f:a3:a2:91:45:8d:c1:16:13:f8:81:33:91:
                    1f:5d:36:01:d2:42:d5:37:16:0d:47:7f:80:99:af:
                    19:13:43:f4:a6:5f:10:76:4f:4f:d1:e1:f4:7f:e2:
                    9d:40:4c:6a:0b:c0:22:9c:e4:1a:8a:fc:0f:22:ec:
                    cd:fc:7b:72:47:19:47:21:0b:cc:7a:3b:09:41:9e:
                    64:d4:ca:cc:f6:17:a7:0e:af:8b:d8:71:44:a9:72:
                    e4:e4:02:9b:83:2d:88:1c:0a:4b:1d:54:3e:03:46:
                    22:4a:c7:2a:bf:0d:69:54:bb:58:4f:46:ad:cd:1c:
                    81:9e:c4:7c:cc:3b:f5:5d:33:ba:2e:2b:8a:3a:be:
                    ee:f7:d4:93:d3:41:da:55:46:5c:81:31:e9:65:4f:
                    d1:ce:f6:ca:5d:40:60:57:86:fc:29:d4:ca:cd:58:
                    c3:fd:30:2b:d3:2e:69:c7:42:85:61:6e:ba:f8:a9:
                    1b:ff:c9:d3:19:3b:5f:17:07:88:b6:c8:b9:e3:85:
                    90:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:83:1D:62:75:E2:ED:35:1D:2C:DD:4D:52:B1:98:54:89:0E:26:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7badab9-b8da-3728-9606-56571b7ffcee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:48:a3:58:ff:4d:2a:81:8a:e3:88:e8:44:dd:04:d4:ab:79:
         ab:bb:60:c1:e9:53:18:74:80:c6:c2:ea:a7:06:68:b3:40:7c:
         9a:d0:1e:85:ae:8c:2b:b9:a2:a6:b8:69:77:2c:63:d6:c8:37:
         b5:0c:37:07:ce:9d:91:27:e9:bb:2d:8a:89:8e:12:d2:1a:a6:
         e3:84:60:40:5d:c5:c8:9a:ec:45:45:dd:da:b2:76:ab:b3:aa:
         d0:0d:90:93:fe:a6:0f:b4:dd:6c:a9:d5:0d:b9:56:50:60:f9:
         5e:c6:73:3f:de:f6:a7:a0:1e:6f:ac:b5:85:11:e4:ae:20:d7:
         61:3d:c5:69:6f:b8:d4:3c:67:4b:8f:51:45:cf:73:21:b3:d9:
         b9:fa:5e:9d:cd:e9:d7:90:b7:bc:ca:f8:3a:8f:e6:d5:96:d5:
         8d:40:4a:d8:df:e1:d6:9c:53:35:4d:d0:3f:76:96:fc:d8:dc:
         88:43:de:f1:76:96:08:2f:21:f6:fd:b8:65:4d:93:4d:a7:7a:
         7a:d1:40:e4:3b:2d:a6:6f:73:a4:cf:c3:d4:15:53:8b:55:60:
         ca:d8:9a:c1:84:fd:59:85:b0:b0:10:d7:95:bc:76:e8:87:a3:
         b6:6a:3c:ca:3f:cd:b2:c2:bc:e6:03:74:6a:84:a8:ef:ba:e5:
         9c:26:06:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:46 2024 by rpki-client on console-fra.rpki-client.org