Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0907bf5f-d820-3c6e-b7d3-8ec7ee7049b5.roa
File:                     0907bf5f-d820-3c6e-b7d3-8ec7ee7049b5.roa (raw, json)
Hash identifier:          WR9nTRhk7RoSLSBBGTouV7ILFPkr3B7oZWdOASs7Alw=
Subject key identifier:   84:61:A9:B5:2B:8E:65:43:39:3A:6F:F2:5A:5B:97:30:B2:0A:59:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849998F4C7C176AB96BA099BD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0907bf5f-d820-3c6e-b7d3-8ec7ee7049b5.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     397200
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:4c:7c:17:6a:b9:6b:a0:99:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=f77e8541-7e8c-4916-9505-b603c4372468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b4:c7:44:dc:7e:94:9d:15:8c:1c:26:7a:35:
                    2e:31:7e:74:38:08:90:d6:0c:1b:15:46:e7:cc:e9:
                    d2:8d:16:34:fc:cf:bd:b9:26:71:84:89:43:ea:dd:
                    d1:a4:f7:90:33:29:8d:cd:a3:3f:e7:7d:2c:00:f4:
                    dc:d4:ba:e6:3c:21:ef:a3:d2:85:f9:a0:f8:34:a2:
                    4d:3e:f8:15:4e:0a:46:fb:b9:70:ed:06:00:2b:a1:
                    a9:c1:72:4c:6d:83:5a:fa:12:a9:ee:bc:e6:03:48:
                    2c:0f:c6:22:02:cb:72:28:9a:d6:f3:6b:50:d0:6e:
                    3b:61:39:75:e7:58:12:aa:62:cc:66:94:fa:6f:58:
                    4c:6d:c2:fe:09:b0:da:ac:94:13:d1:f0:44:9e:50:
                    ec:52:54:2f:a4:c8:77:4e:83:fa:cc:10:af:3a:52:
                    e2:76:54:96:4a:f9:3c:91:3e:7a:83:a7:1f:57:80:
                    d8:71:49:3e:1c:07:14:91:3d:3f:7b:8b:74:55:7d:
                    a4:ae:a4:d6:ed:58:67:30:81:ed:ed:c2:f9:29:6f:
                    ea:dc:80:08:08:e6:b8:9c:27:ac:b6:40:a9:8a:ab:
                    97:04:1a:ce:e8:96:7c:ff:88:be:aa:ca:96:bd:cf:
                    a2:f2:db:ca:cf:e0:e8:34:61:bf:e6:3e:b2:15:84:
                    52:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:61:A9:B5:2B:8E:65:43:39:3A:6F:F2:5A:5B:97:30:B2:0A:59:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0907bf5f-d820-3c6e-b7d3-8ec7ee7049b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:67:eb:08:e1:44:56:df:a1:6e:c1:20:ad:d4:c0:5b:36:08:
         d8:3a:ba:c7:53:20:96:9f:56:1c:88:33:b0:29:1e:0a:9c:27:
         00:c4:03:98:42:d5:cd:c0:61:57:37:4d:47:9f:9f:74:8b:30:
         9a:71:01:8d:a3:76:a2:aa:2f:9a:df:db:10:75:35:c9:8c:77:
         6c:cc:0d:e4:11:1e:b9:49:de:32:98:1b:3f:b8:65:8b:de:13:
         0a:bb:da:a3:f5:63:5c:20:98:b6:cc:9c:61:81:ff:ac:41:0a:
         27:c7:e2:df:b9:ce:08:da:d3:2b:a1:2c:c9:7e:fe:9d:e1:6c:
         6e:2f:f2:4f:5b:87:34:75:10:3f:cc:eb:f8:c5:0b:77:89:b4:
         ef:73:6c:6b:56:49:d9:ad:31:32:90:78:9c:ac:0a:29:d8:11:
         f3:38:0a:ef:bf:68:f4:c5:6a:1f:84:fe:80:af:b3:a8:45:ef:
         2e:3f:dd:f4:40:43:00:af:22:e0:af:92:65:33:ee:fd:65:16:
         c3:7c:74:4f:64:5f:a0:49:d4:da:ed:15:0d:32:7e:5e:c7:49:
         4f:e9:87:a5:e9:2d:fa:4c:b2:12:a9:51:f7:04:a3:5a:3c:bf:
         3f:00:51:88:09:11:d8:30:67:df:fa:10:2f:d6:22:4c:1a:11:
         3d:51:ec:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:32:49 2025 by rpki-client