Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc65554-e3b0-3017-b4a9-4be5acf37481.roa
File:                     ddc65554-e3b0-3017-b4a9-4be5acf37481.roa (raw, json)
Hash identifier:          xS9VbGyWIylnGT23TSOZmZJt1F6dVB/+aKT1NuqwGGE=
Subject key identifier:   F9:B6:AE:AD:5C:F5:44:EC:17:75:97:E8:AB:F2:2E:00:C6:A1:48:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CD00D1063756E06C5B4DAA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc65554-e3b0-3017-b4a9-4be5acf37481.roa
Signing time:             Thu 07 Nov 2024 13:42:18 +0000
ROA not before:           Thu 07 Nov 2024 13:42:18 +0000
ROA not after:            Wed 05 Feb 2025 13:42:18 +0000
asID:                     396545
IP address blocks:        2001:500:135::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:00:d1:06:37:56:e0:6c:5b:4d:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  7 13:42:18 2024 GMT
            Not After : Feb  5 13:42:18 2025 GMT
        Subject: CN=1e913f97-3b4a-4576-9b1f-c2ed000e46e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:93:7e:06:ef:bc:d8:63:3f:2c:0d:db:14:
                    fd:b7:a0:af:fc:6b:09:5f:de:91:06:da:91:d7:a2:
                    51:78:15:96:72:2f:86:1c:69:2d:40:66:81:d2:b6:
                    2a:e2:88:09:2e:64:73:e9:0b:11:85:c3:5b:32:b0:
                    14:07:8b:a2:fb:62:03:37:5a:5c:74:12:67:14:79:
                    73:d5:de:54:46:e2:e6:05:67:2e:4a:d3:2e:06:d7:
                    99:e8:da:42:60:73:d2:20:65:70:1e:bf:08:0b:c3:
                    28:b2:5a:ae:a5:76:63:9c:f2:c6:1c:4d:4e:c6:11:
                    5c:94:d0:df:c3:0e:09:c5:9b:e1:92:7c:fb:8b:af:
                    db:4a:d3:27:a3:ac:af:ee:9a:ff:52:96:0e:f2:25:
                    2c:20:c6:c1:e4:77:e1:4a:88:c9:f8:4f:c1:9f:af:
                    9a:8b:fa:84:26:f2:e8:c0:83:8f:9b:30:42:fb:d5:
                    4e:96:75:76:11:42:fa:9f:73:0a:d9:8b:77:f3:4e:
                    e1:c9:6e:d9:0d:81:1d:2f:d6:b4:e3:d3:3d:ef:8e:
                    24:14:d8:ed:3b:c8:1f:9e:f0:cc:06:9d:c6:ab:fe:
                    2c:15:e1:4c:a6:31:87:49:e0:82:97:11:95:ca:b0:
                    2a:87:a3:78:a0:74:42:d6:5b:ef:a3:b7:4f:3d:5e:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B6:AE:AD:5C:F5:44:EC:17:75:97:E8:AB:F2:2E:00:C6:A1:48:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc65554-e3b0-3017-b4a9-4be5acf37481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:2d:65:a6:e9:2e:fd:8d:9d:fd:c1:2b:42:45:29:8d:20:75:
         08:0d:4d:59:b5:a2:ef:75:9d:24:31:75:23:8e:ba:e7:80:d3:
         e7:0b:49:79:cb:b7:b0:fc:91:a5:ac:0d:fa:4b:89:21:7d:06:
         07:b8:e1:4f:b6:fd:0d:a7:54:17:e4:16:1e:8c:e8:c6:a9:fa:
         50:53:da:f0:ab:57:a8:c4:56:1f:43:69:83:8c:95:e1:28:cd:
         56:5d:3f:70:61:15:ea:5d:38:03:5e:1a:d1:c2:3c:2e:46:cf:
         b7:ca:7a:30:2e:7a:f8:c9:88:fc:6c:b1:d1:eb:e0:fa:6a:ea:
         9f:2e:8e:86:90:9b:25:65:23:c0:21:0b:f1:b5:54:18:ab:7f:
         ea:df:15:a7:fc:0b:fb:69:2f:ee:47:bf:7e:d6:f3:8e:f0:10:
         e7:81:6e:5d:49:00:ab:c8:df:3e:b0:21:79:ab:43:df:a0:ce:
         7b:e7:d6:e0:10:90:6e:a2:21:18:0e:20:0c:76:95:7b:1d:ad:
         49:53:6a:98:f7:26:dc:d0:e9:79:a5:0f:1c:1f:45:46:e3:69:
         6d:16:93:27:cc:88:da:7c:38:88:7d:52:24:92:dc:82:bc:91:
         60:3c:e5:80:1d:7d:d5:f1:80:5a:0c:af:31:2a:92:04:21:4d:
         9a:65:bf:76
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfNANEGN1bgbFtNqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEwNzEzNDIxOFoXDTI1MDIwNTEzNDIxOFowLzEtMCsGA1UEAxMk
MWU5MTNmOTctM2I0YS00NTc2LTliMWYtYzJlZDAwMGU0NmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6KTfgbvvNhjPywN2xT9t6Cv/GsJX96RBtqR
16JReBWWci+GHGktQGaB0rYq4ogJLmRz6QsRhcNbMrAUB4ui+2IDN1pcdBJnFHlz
1d5URuLmBWcuStMuBteZ6NpCYHPSIGVwHr8IC8MoslqupXZjnPLGHE1OxhFclNDf
ww4JxZvhknz7i6/bStMno6yv7pr/UpYO8iUsIMbB5HfhSojJ+E/Bn6+ai/qEJvLo
wIOPmzBC+9VOlnV2EUL6n3MK2Yt3807hyW7ZDYEdL9a049M9744kFNjtO8gfnvDM
Bp3Gq/4sFeFMpjGHSeCClxGVyrAqh6N4oHRC1lvvo7dPPV53jwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPm2rq1c9UTsF3WX6KvyLgDGoUhtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGRjNjU1NTQtZTNiMC0z
MDE3LWI0YTktNGJlNWFjZjM3NDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAbLWWm6S79jZ39wStCRSmNIHUIDU1ZtaLvdZ0k
MXUjjrrngNPnC0l5y7ew/JGlrA36S4khfQYHuOFPtv0Np1QX5BYejOjGqfpQU9rw
q1eoxFYfQ2mDjJXhKM1WXT9wYRXqXTgDXhrRwjwuRs+3ynowLnr4yYj8bLHR6+D6
auqfLo6GkJslZSPAIQvxtVQYq3/q3xWn/Av7aS/uR79+1vOO8BDngW5dSQCryN8+
sCF5q0PfoM5759bgEJBuoiEYDiAMdpV7Ha1JU2qY9ybc0Ol5pQ8cH0VG42ltFpMn
zIjafDiIfVIkktyCvJFgPOWAHX3V8YBaDK8xKpIEIU2aZb92
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:17 2024 by rpki-client on console-ams.rpki-client.org