Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eba5ca0b-f0d4-3d8b-808e-1f2314a49fe7.roa
File:                     eba5ca0b-f0d4-3d8b-808e-1f2314a49fe7.roa (raw, json)
Hash identifier:          G7kBrEA+DSRvIC4KbZkQ1sWZxp3EIblv0/lf7LknZkw=
Subject key identifier:   C9:F8:D4:C6:DA:64:D0:A7:D3:77:E7:E7:5F:96:77:BD:8B:4B:82:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847CD00C91FA18D8FAF9499C800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eba5ca0b-f0d4-3d8b-808e-1f2314a49fe7.roa
Signing time:             Thu 07 Nov 2024 13:42:15 +0000
ROA not before:           Thu 07 Nov 2024 13:42:15 +0000
ROA not after:            Wed 05 Feb 2025 13:42:15 +0000
asID:                     396589
IP address blocks:        2001:500:135::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:00:c9:1f:a1:8d:8f:af:94:99:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  7 13:42:15 2024 GMT
            Not After : Feb  5 13:42:15 2025 GMT
        Subject: CN=fd85820f-594c-418b-a3bc-4bc05dc15b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:24:28:5b:15:4b:dd:65:60:4e:63:9c:29:
                    4a:e5:1d:ba:57:3b:9d:0f:89:1c:81:f3:d4:3c:73:
                    69:be:c1:1c:34:e2:d6:d8:2a:da:67:cc:02:e7:bf:
                    e6:57:29:e8:65:d1:68:82:21:b3:5c:8e:c9:e6:d3:
                    11:04:90:ca:ab:3c:25:68:1c:d4:ef:df:6a:16:aa:
                    f0:1e:a9:c7:ed:ab:68:88:28:33:f9:b4:7a:22:d9:
                    d3:5f:2f:0f:f5:ae:a3:69:9b:5e:29:91:7c:33:ac:
                    db:5c:22:fc:58:5d:cf:d5:d5:c3:ce:7f:b1:e1:6e:
                    05:6b:4c:d7:6b:0e:4d:83:6a:29:9f:a6:1f:9a:fe:
                    57:b2:00:76:59:42:bb:67:1b:16:52:88:39:6c:42:
                    a4:42:f5:c9:5b:c7:6b:c3:2a:84:62:fe:8f:03:34:
                    2a:5a:18:dd:9b:e0:11:61:ca:2b:e4:9e:b7:0e:d5:
                    5e:66:59:f6:71:5c:b6:fa:74:d5:58:f9:bd:52:37:
                    da:88:65:05:ed:c4:89:ee:0e:7e:a2:ac:e4:a6:da:
                    ba:7b:ab:e6:e8:e6:bd:90:8d:1e:8d:22:9d:0f:e7:
                    22:5f:4b:ee:bd:fa:9c:75:35:6d:5d:0d:fe:c8:1f:
                    ab:30:0f:46:b3:96:13:87:85:2e:53:9f:8d:61:43:
                    27:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F8:D4:C6:DA:64:D0:A7:D3:77:E7:E7:5F:96:77:BD:8B:4B:82:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eba5ca0b-f0d4-3d8b-808e-1f2314a49fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:67:95:a4:c7:00:e7:17:0b:af:6b:da:40:14:03:bb:48:b2:
         20:18:ad:4e:eb:24:05:c0:a1:5b:22:4a:9a:7a:72:57:e8:3c:
         ab:53:eb:41:78:1e:3a:b6:b5:7e:e2:46:7e:48:f0:16:da:04:
         67:69:ad:5e:14:2e:77:df:b5:3c:a1:16:f3:7f:80:e6:91:3d:
         d9:e4:5a:a6:d7:31:54:e0:7e:2f:29:65:ab:be:52:71:69:cc:
         b1:d8:d2:b8:22:74:8a:f1:03:f6:6f:f8:fe:d0:32:31:92:d0:
         04:4b:36:ca:2e:2b:66:1a:2e:d9:3b:e1:3f:25:4c:ab:22:4e:
         44:9c:f5:6c:11:28:a9:4a:35:4a:ad:09:05:81:66:7a:e4:50:
         e5:e8:e9:90:55:3f:e6:69:ef:50:19:46:5f:1d:ab:eb:39:ac:
         77:9e:17:8c:53:09:05:d1:f4:c6:fb:04:16:f7:8e:0f:e7:3a:
         9d:95:6f:cb:a5:28:4e:eb:c7:70:2d:85:f5:f8:36:d1:32:32:
         c8:6b:1a:d1:fb:24:f0:21:fd:60:c4:9c:ef:77:35:30:9d:4c:
         be:76:97:f4:c3:d5:e7:e1:be:fc:e8:91:73:ac:36:23:16:22:
         64:27:c1:21:8f:c4:50:36:0b:ef:fc:33:18:83:5e:8e:f4:83:
         67:e8:e7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:51 2024 by rpki-client on console-fra.rpki-client.org