Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6275e3e-daa8-303c-9e7c-f3bd5fc1be8d.roa
File:                     f6275e3e-daa8-303c-9e7c-f3bd5fc1be8d.roa (raw, json)
Hash identifier:          /utVNTs2BDi+/BbHESWnImGIRXX+4QZyxkC3YaJW5yo=
Subject key identifier:   B0:CF:55:E4:C7:00:15:C8:66:4E:AF:88:A0:D3:90:FF:25:15:C8:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847DAF51E75DAC5A76544DEC898
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6275e3e-daa8-303c-9e7c-f3bd5fc1be8d.roa
Signing time:             Tue 12 Nov 2024 13:40:03 +0000
ROA not before:           Tue 12 Nov 2024 13:40:03 +0000
ROA not after:            Mon 10 Feb 2025 13:40:03 +0000
asID:                     396567
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:f5:1e:75:da:c5:a7:65:44:de:c8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 13:40:03 2024 GMT
            Not After : Feb 10 13:40:03 2025 GMT
        Subject: CN=7fd4bd00-89cf-4248-a8ca-b33164b911b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8a:ee:82:1f:bc:1c:a3:08:5a:9f:15:73:4b:
                    e7:1e:2a:97:20:79:c9:99:b1:20:00:16:81:39:aa:
                    13:f3:bc:d5:fa:48:07:ae:e3:a4:8f:4c:ce:b6:2d:
                    df:6a:b3:da:3b:17:78:d5:a9:70:e1:7c:f9:e9:ee:
                    de:32:bd:26:64:a4:15:57:50:b5:67:b3:b2:6c:a0:
                    5c:84:61:e5:89:38:73:66:50:41:73:e4:6f:6a:6e:
                    00:37:b9:ad:a9:84:51:29:63:ab:53:7e:a0:a5:e9:
                    a1:1a:c1:5e:3c:ab:04:e2:7e:f8:22:4b:12:f9:b3:
                    62:30:92:82:97:cf:98:84:f4:2d:98:cb:a4:7b:b6:
                    de:2a:8a:ef:32:18:83:41:9e:ee:77:6d:a4:36:76:
                    37:0b:81:c6:82:01:50:97:f3:a0:d8:ed:25:ac:53:
                    03:c8:2f:7a:d3:e1:d0:99:de:73:6f:7e:4f:fe:bd:
                    e0:e0:13:b1:e5:84:b6:c1:fb:e9:c5:33:21:5b:96:
                    e1:63:70:61:71:c1:af:33:6c:82:d0:c5:db:4a:e9:
                    ee:80:2a:cc:3a:f3:52:41:e7:1f:64:6a:48:8d:c4:
                    45:0c:3c:a0:d9:e1:a0:b7:3e:93:32:04:a2:21:9a:
                    8d:7d:9a:65:8a:5d:72:66:ff:61:58:ed:93:5e:98:
                    47:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CF:55:E4:C7:00:15:C8:66:4E:AF:88:A0:D3:90:FF:25:15:C8:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6275e3e-daa8-303c-9e7c-f3bd5fc1be8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:cb:77:70:dc:ec:49:42:37:bd:df:47:3a:f0:a6:e4:6f:e0:
         0b:0f:40:a0:e5:cd:3e:c1:95:45:06:5c:05:c4:71:ee:f0:54:
         5f:1f:39:a8:06:88:e8:59:0d:75:57:20:7d:99:7d:fd:7a:48:
         04:a3:94:31:28:08:64:6f:6d:f4:73:7b:cd:8d:4b:32:b0:91:
         d1:60:2e:e2:17:4b:84:24:d2:ab:30:cc:e4:e0:e4:ae:f0:83:
         54:e4:dd:70:b7:2d:5b:60:35:54:63:ca:64:33:c4:57:a2:0a:
         f7:b0:87:f7:99:6a:1b:56:d7:3d:13:c6:42:8c:62:c3:5f:c3:
         e1:02:25:b3:15:e9:c9:6f:59:f8:b3:24:fe:ef:52:95:2e:38:
         32:58:02:2f:c6:40:20:8b:69:1b:b9:8c:f4:d1:e4:5e:51:5b:
         dc:77:9c:43:84:4d:ea:42:c4:4c:f1:d2:9f:50:ac:76:29:20:
         6e:a5:71:c6:92:d8:4d:5d:35:19:be:7b:74:db:a3:3f:2b:4b:
         bf:c8:40:83:a6:91:51:31:d4:2f:05:5f:13:ef:e1:93:6c:7f:
         a3:28:ca:98:2e:98:18:6d:91:9c:74:0c:59:df:92:b5:57:16:
         89:de:67:61:2c:1e:b3:8a:0a:f2:80:b9:48:6d:f1:c6:6a:e6:
         89:77:97:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:19 2024 by rpki-client on console-ams.rpki-client.org