Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0a3c617-0468-3330-92b9-2c3c79f149e5.roa
File:                     d0a3c617-0468-3330-92b9-2c3c79f149e5.roa (raw, json)
Hash identifier:          qEyFVCaE6nhWZDjyUV0NPP76FYtjeQuGLq0PMfy2SjA=
Subject key identifier:   EB:30:FA:97:7A:6E:8B:7F:2C:AB:C2:05:9B:4B:C2:07:34:07:23:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0885DDDC67E475115360E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0a3c617-0468-3330-92b9-2c3c79f149e5.roa
Signing time:             Thu 14 Nov 2024 13:35:47 +0000
ROA not before:           Thu 14 Nov 2024 13:35:47 +0000
ROA not after:            Wed 12 Feb 2025 13:35:47 +0000
asID:                     36622
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:5d:dd:c6:7e:47:51:15:36:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:47 2024 GMT
            Not After : Feb 12 13:35:47 2025 GMT
        Subject: CN=20fb987b-635d-4717-8e94-63e4e4c386c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:84:4a:6d:c7:b1:82:2c:14:c3:29:ce:a5:72:
                    d8:79:cc:e3:4b:fc:56:f2:2a:c1:dd:c8:d8:a0:e8:
                    c7:e3:5b:cc:3c:54:f7:94:6d:4d:a8:97:18:7f:6b:
                    94:17:1f:00:d9:20:a9:e4:29:50:9f:97:d2:40:12:
                    84:e4:cf:80:08:6f:8d:cc:8a:65:6c:10:44:21:ba:
                    37:dd:dc:fc:28:8c:a5:9c:d8:51:41:07:74:f0:fa:
                    73:ba:6d:e3:39:4f:be:d8:0a:d9:a8:cd:5f:08:f1:
                    11:2f:5f:1a:b6:45:51:c8:97:1e:d4:d7:6f:da:96:
                    b8:44:34:93:02:80:35:ab:cc:96:f7:c5:77:53:85:
                    32:fa:09:c5:9b:34:5a:bd:98:85:cb:03:bc:95:6c:
                    ed:07:cd:14:93:db:50:9b:7b:2e:1a:ae:a7:a3:4a:
                    bb:2e:cd:35:19:3e:61:94:0d:af:0b:99:f0:8d:f1:
                    38:18:67:08:bb:e5:ea:e8:ad:34:0f:14:c4:96:cb:
                    64:0a:33:d1:f4:5f:24:a0:29:94:c9:91:37:61:4c:
                    99:3f:f9:f5:90:63:32:97:ab:b0:b7:b3:ac:80:c9:
                    ea:3e:a2:5e:0c:d7:9c:58:91:6e:47:10:d7:ce:db:
                    af:73:dd:3c:10:0a:5e:00:db:96:71:3e:42:a1:c1:
                    28:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:30:FA:97:7A:6E:8B:7F:2C:AB:C2:05:9B:4B:C2:07:34:07:23:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0a3c617-0468-3330-92b9-2c3c79f149e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:12:cd:37:03:a8:e5:e9:9a:3a:ff:00:89:b9:b3:d6:e3:1c:
         77:11:30:95:f3:dd:a8:76:5a:fb:5e:2c:99:12:6c:6d:ba:07:
         dc:1c:7c:11:11:f9:4e:01:21:05:f4:de:db:79:60:9f:bf:f2:
         71:85:98:51:b8:22:0f:2e:c9:b2:58:20:44:2e:0c:03:28:8a:
         29:a9:a7:e5:6d:ed:cf:1d:af:a5:d2:6d:43:41:49:bc:8c:95:
         1e:67:98:94:c1:a9:42:07:cd:45:6e:82:70:25:60:d6:52:36:
         ea:e5:f3:35:c4:af:8a:c6:36:06:fb:60:a3:96:2c:28:72:5a:
         4c:b1:f1:bc:1a:b0:7b:d2:c1:8f:d7:8a:58:6a:32:e6:b2:3a:
         b8:ab:1a:e9:8c:da:13:79:60:a7:64:00:d6:4f:f2:37:19:de:
         de:9f:61:5e:6c:39:aa:eb:c8:2c:9a:1c:78:bb:11:96:a1:d8:
         5b:ef:35:37:02:35:12:06:c1:6e:e5:b2:74:f7:c1:91:23:1a:
         9e:e7:0e:8f:8f:b0:18:81:0c:9c:22:8b:52:da:1e:aa:69:e1:
         32:08:23:cb:76:4e:38:32:d9:64:24:af:53:3b:38:65:17:c2:
         2e:76:8a:3b:a1:73:78:f4:71:c3:06:75:20:5c:4e:69:90:ca:
         32:12:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:47 2024 by rpki-client on console-fra.rpki-client.org