Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3b64bd2-2723-3bbb-9fd6-fc6b2eaf7d78.roa
File:                     d3b64bd2-2723-3bbb-9fd6-fc6b2eaf7d78.roa (raw, json)
Hash identifier:          lQj2iVI/i/EqZugnkm5IQyPOWsggWDxT4c38Fj3LT8w=
Subject key identifier:   F7:AD:3A:31:49:5A:6A:44:4C:C4:51:9B:10:84:59:34:DA:7D:CA:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0885BDCEAE69D1D4A73E4E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3b64bd2-2723-3bbb-9fd6-fc6b2eaf7d78.roa
Signing time:             Thu 14 Nov 2024 13:35:46 +0000
ROA not before:           Thu 14 Nov 2024 13:35:46 +0000
ROA not after:            Wed 12 Feb 2025 13:35:46 +0000
asID:                     396559
IP address blocks:        2001:500:133::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:5b:dc:ea:e6:9d:1d:4a:73:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:46 2024 GMT
            Not After : Feb 12 13:35:46 2025 GMT
        Subject: CN=6b309894-810e-49ad-846e-5a8244b46e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ff:81:4b:de:4b:a3:65:99:bb:37:16:ec:8f:
                    08:56:6f:89:b3:64:b2:3e:ae:9f:00:6a:bb:9f:6b:
                    bf:e4:1a:83:ca:fc:e5:d5:c4:bb:0a:02:91:1a:78:
                    8c:fd:07:0d:a3:dd:1d:af:b8:17:99:26:57:b6:2e:
                    eb:97:0d:14:10:11:b3:94:c2:15:59:38:de:29:b5:
                    cc:89:5a:29:ac:8d:f9:e7:f9:80:16:7f:fc:96:5a:
                    b1:14:88:e2:2a:42:68:e2:d2:4c:e6:b9:fc:36:02:
                    ec:0a:77:26:bb:b1:71:ad:b7:98:36:c9:47:51:65:
                    a6:8e:7d:86:c7:b8:b2:0a:61:67:d9:54:8d:14:26:
                    15:d4:a2:aa:19:0f:87:bd:b3:d3:dc:44:05:68:36:
                    b1:71:48:42:67:7d:01:fd:c8:32:b3:01:16:86:3c:
                    64:14:df:dc:ba:24:f6:ef:a4:ba:25:8c:fd:cf:d8:
                    35:e6:ee:e7:6e:e7:0f:e3:4e:71:68:68:b2:23:96:
                    96:8a:84:ab:51:bd:a2:4f:c0:a6:b0:c6:b1:24:ce:
                    ee:af:54:fd:cf:10:c7:e0:c6:6d:99:c5:29:32:c9:
                    58:8c:6c:40:dc:59:0f:9b:9b:3f:2d:15:24:09:b5:
                    92:c7:6a:65:c8:f1:e3:a5:0e:4f:94:52:2b:30:60:
                    32:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AD:3A:31:49:5A:6A:44:4C:C4:51:9B:10:84:59:34:DA:7D:CA:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3b64bd2-2723-3bbb-9fd6-fc6b2eaf7d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:75:92:82:af:8c:c1:b5:7b:ad:e4:d5:94:62:6a:de:5d:a4:
         da:78:b1:f9:62:e2:55:8c:76:81:c7:97:11:8f:8a:42:e8:6f:
         61:92:96:c3:51:b5:c8:c3:84:bd:1d:3b:b4:64:95:51:4e:9a:
         60:6f:cb:e0:ed:39:f3:f2:64:77:c7:94:ce:79:18:86:45:c9:
         41:86:55:8d:1c:e2:67:5e:67:3d:d3:4d:eb:51:10:4a:f1:cb:
         46:bf:e6:1b:4a:c8:64:ec:18:31:b5:55:98:6b:23:19:e4:c8:
         40:e3:6d:94:b5:e3:e4:85:34:ab:29:fb:29:8c:30:44:a2:36:
         81:98:dc:4e:d4:70:3c:dd:7a:25:8e:7d:fc:56:25:5c:19:af:
         04:e0:6c:cb:59:38:17:ce:a4:55:76:94:a1:f7:36:8f:e7:58:
         57:50:86:44:07:d8:2f:8a:ec:0b:8f:52:1c:e6:9d:f5:49:c4:
         c7:6f:f1:2f:18:11:d3:bd:a3:77:a4:4d:06:fd:1b:49:8f:0a:
         23:0a:e5:8d:d0:9b:4b:7e:9a:a7:ff:38:e8:59:16:c1:6a:c7:
         c8:77:fb:ed:90:2b:5e:dd:9d:d3:ab:ec:0d:80:70:0d:cf:e7:
         04:1d:1f:f2:ab:49:8a:16:2e:df:21:c6:30:9e:6b:7d:86:14:
         06:65:1f:ab
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfgiFvc6uadHUpz5OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTExNDEzMzU0NloXDTI1MDIxMjEzMzU0NlowLzEtMCsGA1UEAxMk
NmIzMDk4OTQtODEwZS00OWFkLTg0NmUtNWE4MjQ0YjQ2ZTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf+BS95Lo2WZuzcW7I8IVm+Js2SyPq6fAGq7
n2u/5BqDyvzl1cS7CgKRGniM/QcNo90dr7gXmSZXti7rlw0UEBGzlMIVWTjeKbXM
iVoprI355/mAFn/8llqxFIjiKkJo4tJM5rn8NgLsCncmu7FxrbeYNslHUWWmjn2G
x7iyCmFn2VSNFCYV1KKqGQ+HvbPT3EQFaDaxcUhCZ30B/cgyswEWhjxkFN/cuiT2
76S6JYz9z9g15u7nbucP405xaGiyI5aWioSrUb2iT8CmsMaxJM7ur1T9zxDH4MZt
mcUpMslYjGxA3FkPm5s/LRUkCbWSx2plyPHjpQ5PlFIrMGAyNwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPetOjFJWmpETMRRmxCEWTTafcomMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDNiNjRiZDItMjcyMy0z
YmJiLTlmZDYtZmM2YjJlYWY3ZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCpdZKCr4zBtXut5NWUYmreXaTaeLH5YuJVjHaB
x5cRj4pC6G9hkpbDUbXIw4S9HTu0ZJVRTppgb8vg7Tnz8mR3x5TOeRiGRclBhlWN
HOJnXmc9003rURBK8ctGv+YbSshk7BgxtVWYayMZ5MhA422UtePkhTSrKfspjDBE
ojaBmNxO1HA83Xoljn38ViVcGa8E4GzLWTgXzqRVdpSh9zaP51hXUIZEB9gviuwL
j1Ic5p31ScTHb/EvGBHTvaN3pE0G/RtJjwojCuWN0JtLfpqn/zjoWRbBasfId/vt
kCte3Z3Tq+wNgHANz+cEHR/yq0mKFi7fIcYwnmt9hhQGZR+r
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:47 2024 by rpki-client on console-fra.rpki-client.org