Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c87a4738-351a-3ba7-9c0d-12268ac6ca75.roa
File:                     c87a4738-351a-3ba7-9c0d-12268ac6ca75.roa (raw, json)
Hash identifier:          3Jkt5wWkqEUJdb8ZXnvkm5hB8D7KV5Udz6yta+0oMXA=
Subject key identifier:   04:EB:AB:0A:AD:AC:B9:62:4E:7B:5C:E4:EF:A7:FC:6D:3F:96:19:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E088629E3E27037396A80280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c87a4738-351a-3ba7-9c0d-12268ac6ca75.roa
Signing time:             Thu 14 Nov 2024 13:35:49 +0000
ROA not before:           Thu 14 Nov 2024 13:35:49 +0000
ROA not after:            Wed 12 Feb 2025 13:35:49 +0000
asID:                     396583
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:62:9e:3e:27:03:73:96:a8:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:49 2024 GMT
            Not After : Feb 12 13:35:49 2025 GMT
        Subject: CN=b72c36e5-d825-4d28-aff1-05a5c73cf600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:52:fb:f4:a6:4d:03:ac:87:ca:41:18:be:
                    38:cc:da:17:ba:0a:ee:be:02:c8:cb:bf:56:29:5a:
                    6f:8f:b3:75:b2:1f:fa:e6:6d:e2:4f:e8:0c:7b:07:
                    9a:1b:8f:48:d6:b2:3b:be:83:d9:4b:85:aa:68:8f:
                    5d:9d:91:71:bb:f6:28:2c:cf:63:a9:35:88:fa:f6:
                    b3:15:80:71:02:6b:ec:de:11:ab:cf:ee:c4:17:2c:
                    73:5e:73:54:e0:f4:5a:e5:bf:b8:95:d6:f9:f0:78:
                    7c:be:fb:6b:fd:e3:e0:e3:ba:d9:ae:a5:1a:10:93:
                    1d:18:74:79:47:3c:f4:c9:9b:25:8c:6b:37:35:e4:
                    82:7b:ad:26:44:2a:ea:d0:5d:dc:83:b8:42:38:d9:
                    6f:24:02:8f:ce:74:70:46:34:5e:59:dd:5f:7d:19:
                    ed:d1:45:b9:4a:26:15:40:c9:f3:00:a3:32:c5:f5:
                    24:b4:16:17:27:45:99:2d:b3:e5:90:3c:c1:6d:16:
                    57:7b:58:a5:8f:64:53:46:2e:4e:37:10:bb:81:16:
                    f5:64:c3:39:62:f7:f5:5b:9e:aa:9e:44:23:1c:a4:
                    e3:b9:43:12:0d:4c:10:be:1e:2f:12:51:42:d7:16:
                    dd:ff:9c:ff:46:64:67:47:e6:df:6a:a9:48:4d:73:
                    81:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EB:AB:0A:AD:AC:B9:62:4E:7B:5C:E4:EF:A7:FC:6D:3F:96:19:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c87a4738-351a-3ba7-9c0d-12268ac6ca75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:37:cd:ca:2a:4b:70:f5:d5:43:43:91:2b:97:c4:54:21:c7:
         ef:21:c6:75:1b:02:e7:4b:56:a5:17:15:da:85:3a:41:57:94:
         f3:9d:e4:28:8c:b4:3d:09:86:12:28:e5:c2:c7:8a:03:a8:5b:
         f8:29:eb:a2:4c:79:84:3e:e6:8d:4e:63:1e:a3:3e:ea:09:0f:
         19:9c:5d:58:c7:d2:34:61:eb:ab:8f:35:2d:dd:4d:74:34:af:
         9e:63:0f:5b:98:3b:67:8e:71:8f:21:49:36:77:a3:b7:dc:f6:
         5f:41:67:9f:fa:4b:aa:d2:e7:f1:74:60:05:aa:36:c9:a2:07:
         2a:f6:17:9f:ab:6f:59:1f:f3:2e:86:3e:a4:e3:e2:97:35:09:
         86:20:47:9c:f3:d9:ff:27:5b:1f:0b:f3:a9:9a:0a:98:72:13:
         6a:a5:ee:2c:ed:82:82:3c:60:9e:14:05:9b:35:5b:9c:b7:08:
         89:ee:40:58:cb:c4:e4:67:b7:cc:5f:91:5a:bb:15:78:4e:20:
         ec:eb:62:d4:96:2d:50:07:fd:22:c0:2c:83:be:b8:6a:15:6b:
         a5:0d:c8:95:96:a7:99:d6:3e:95:e4:d4:08:4d:42:65:9b:b0:
         d3:28:84:e6:6d:6f:f3:85:5c:35:e7:d4:aa:3a:27:3c:2f:8f:
         f7:e5:ef:c8
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfgiGKePicDc5aoAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTExNDEzMzU0OVoXDTI1MDIxMjEzMzU0OVowLzEtMCsGA1UEAxMk
YjcyYzM2ZTUtZDgyNS00ZDI4LWFmZjEtMDVhNWM3M2NmNjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrNS+/SmTQOsh8pBGL44zNoXugruvgLIy79W
KVpvj7N1sh/65m3iT+gMeweaG49I1rI7voPZS4WqaI9dnZFxu/YoLM9jqTWI+vaz
FYBxAmvs3hGrz+7EFyxzXnNU4PRa5b+4ldb58Hh8vvtr/ePg47rZrqUaEJMdGHR5
Rzz0yZsljGs3NeSCe60mRCrq0F3cg7hCONlvJAKPznRwRjReWd1ffRnt0UW5SiYV
QMnzAKMyxfUktBYXJ0WZLbPlkDzBbRZXe1ilj2RTRi5ONxC7gRb1ZMM5Yvf1W56q
nkQjHKTjuUMSDUwQvh4vElFC1xbd/5z/RmRnR+bfaqlITXOBiwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFATrqwqtrLliTntc5O+n/G0/lhklMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzg3YTQ3MzgtMzUxYS0z
YmE3LTljMGQtMTIyNjhhYzZjYTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAlN83KKktw9dVDQ5Erl8RUIcfvIcZ1GwLnS1al
FxXahTpBV5TzneQojLQ9CYYSKOXCx4oDqFv4KeuiTHmEPuaNTmMeoz7qCQ8ZnF1Y
x9I0YeurjzUt3U10NK+eYw9bmDtnjnGPIUk2d6O33PZfQWef+kuq0ufxdGAFqjbJ
ogcq9hefq29ZH/Muhj6k4+KXNQmGIEec89n/J1sfC/OpmgqYchNqpe4s7YKCPGCe
FAWbNVuctwiJ7kBYy8TkZ7fMX5FauxV4TiDs62LUli1QB/0iwCyDvrhqFWulDciV
lqeZ1j6V5NQITUJlm7DTKITmbW/zhVw159SqOic8L4/35e/I
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:46 2024 by rpki-client on console-fra.rpki-client.org