Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1162e1a9-09d6-3b44-a91e-84fa4bec5621.roa
File:                     1162e1a9-09d6-3b44-a91e-84fa4bec5621.roa (raw, json)
Hash identifier:          B4PV18wprzOZF/z3jMP/qRefUeNKIoh6baq3xdCfuoA=
Subject key identifier:   ED:7A:58:F8:D3:E3:30:25:D3:F4:A7:B4:19:B8:6F:AB:76:7B:10:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849998F4B96CC3EC6177660DF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1162e1a9-09d6-3b44-a91e-84fa4bec5621.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     396592
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:4b:96:cc:3e:c6:17:76:60:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=2a2c5143-2617-4ec7-8f88-fb3a3e111259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:da:5b:c0:52:5d:ce:2c:ac:c6:d4:5e:26:55:
                    3f:f8:b3:07:77:46:96:71:bb:3e:6c:bc:cc:e7:c9:
                    2a:a8:80:2b:30:30:ca:e1:38:03:90:7b:cb:70:96:
                    89:43:4e:40:c9:7c:d2:16:ec:62:85:d8:cf:9f:bd:
                    58:db:a5:3d:91:6b:6e:01:11:87:e3:73:73:8e:21:
                    ed:65:a3:4a:9c:8d:35:63:e3:33:5c:27:7f:6b:be:
                    a5:83:a5:f2:36:50:53:3a:f3:e4:e5:02:a3:44:be:
                    f6:c1:a5:ba:6f:b8:35:93:2e:c5:c1:41:c1:6b:de:
                    c1:f0:52:7d:bb:a9:7b:ff:ec:ff:9b:b9:c6:31:2f:
                    8e:f4:a8:15:31:e1:2a:0a:36:a7:b9:91:f1:c7:95:
                    ea:eb:cc:fe:92:23:01:32:88:3f:51:5a:f3:56:98:
                    75:1b:05:90:07:ec:d5:96:89:e9:17:e7:0a:d1:7d:
                    ba:27:78:30:cc:5b:54:91:72:63:9b:20:61:ce:fb:
                    f6:39:22:92:c9:bd:12:b6:f8:40:00:f2:b2:c3:47:
                    ec:8a:7e:af:bc:57:f6:a0:2a:35:16:8e:9c:b5:3f:
                    76:01:c1:b8:03:1e:62:a5:0a:6c:33:e3:cb:4d:d3:
                    67:dd:0a:37:41:3e:4d:47:22:96:23:1d:ca:d0:43:
                    45:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7A:58:F8:D3:E3:30:25:D3:F4:A7:B4:19:B8:6F:AB:76:7B:10:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1162e1a9-09d6-3b44-a91e-84fa4bec5621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ce:41:fa:49:c1:ee:8f:6c:ba:54:74:53:98:a2:56:74:3d:
         08:0f:1d:53:88:05:05:95:5d:8f:aa:15:fc:7b:1d:a1:e4:a2:
         63:9c:a7:6c:4e:85:f1:ee:de:55:82:3e:6f:c5:39:39:dd:94:
         19:9d:00:96:1d:3d:23:26:64:55:93:bc:f3:4d:c6:9c:d7:84:
         6d:fd:91:ee:d0:58:e9:dd:df:3d:c7:f2:75:be:b2:67:54:39:
         4b:47:65:e1:ad:43:5b:d2:e9:3a:ab:7f:03:0c:9d:b7:d5:d8:
         26:06:38:16:59:4c:8d:d6:18:5c:66:7f:ca:e0:af:13:58:55:
         bc:da:a9:ba:4b:73:0c:0f:3a:3f:8f:97:ea:2e:82:50:44:72:
         6c:94:c8:5a:f9:45:4d:82:10:dc:56:df:68:82:45:95:9c:a6:
         22:41:9f:eb:c9:62:fa:27:a0:7e:d2:8f:23:a1:44:73:dc:5e:
         d0:41:1e:e1:c6:cd:68:54:c9:55:86:e1:54:d3:00:fb:1b:6f:
         22:cb:ad:e8:cd:0f:0b:92:e6:71:41:a5:b5:72:c0:3f:35:99:
         c7:20:21:58:4d:59:dd:d9:78:7d:d4:a8:41:4b:31:36:e3:f1:
         db:e0:ee:f9:ce:69:e1:0a:75:94:77:42:da:af:c5:1f:66:34:
         e6:3a:58:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:47:47 2025 by rpki-client