Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1de365ab-0a27-33f1-ac37-b2eb6462db51.roa
File:                     1de365ab-0a27-33f1-ac37-b2eb6462db51.roa (raw, json)
Hash identifier:          9dOlX+NklEpunpETxvgepLqIXhF7rCyUGltZuC1p4t0=
Subject key identifier:   B7:09:35:48:84:B4:4F:24:FA:E2:E5:91:95:74:AB:5F:B0:43:DC:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498B99E01FE14DB124242CBE40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1de365ab-0a27-33f1-ac37-b2eb6462db51.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     396570
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:e0:1f:e1:4d:b1:24:24:2c:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=af3e1c8f-3b71-4a6f-a9da-376cca610879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:c4:2b:dc:3c:95:ce:7c:cb:90:17:6d:ef:
                    30:66:92:0b:e8:71:f5:5b:e4:ed:94:e6:82:9f:11:
                    a2:63:d3:3e:90:24:34:dc:ef:51:e0:18:c3:76:9f:
                    40:b0:1a:af:fc:aa:c7:05:17:3b:7c:9d:49:4d:45:
                    9d:c7:2e:c8:f8:b0:d1:52:5a:6f:bd:a7:53:37:13:
                    27:66:e6:b4:30:9d:fe:9c:f0:e2:f3:0d:bb:21:8e:
                    57:c7:cd:9b:eb:3b:5f:88:11:cf:19:13:53:57:8f:
                    39:c1:2e:c8:68:91:6e:8c:f3:85:58:08:1e:a6:14:
                    da:b5:44:bc:43:57:cb:94:d2:0b:dc:04:46:78:17:
                    29:db:ee:bd:37:65:00:a2:6c:0a:7f:29:f8:f0:3b:
                    60:96:e6:77:d8:c3:8a:7f:74:97:9a:0f:d0:f4:76:
                    b1:b7:fd:8b:27:a2:ac:8c:d1:75:5e:f5:c4:2c:12:
                    49:48:44:76:b8:46:44:9e:ad:22:3b:f3:e3:c0:d8:
                    9e:23:9c:08:6a:c6:19:63:5f:bc:2e:ac:b1:1b:b7:
                    59:48:25:ac:b5:43:99:30:e5:4a:c5:25:ae:af:8f:
                    97:f9:de:14:bd:8c:fa:5a:5a:36:f4:c6:4d:ce:fd:
                    ce:6c:01:34:f5:1a:44:11:2a:d9:e8:4d:fd:ea:85:
                    11:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:09:35:48:84:B4:4F:24:FA:E2:E5:91:95:74:AB:5F:B0:43:DC:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1de365ab-0a27-33f1-ac37-b2eb6462db51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:d0:ec:b9:d4:0d:27:ae:c0:a8:13:bc:f7:f6:8f:e7:81:b7:
         10:86:35:b9:ec:3f:a3:53:5d:04:10:02:dd:56:77:68:03:a7:
         c6:93:ca:56:60:71:7e:eb:f9:7f:d2:1a:7e:70:33:8c:43:93:
         7d:84:0f:7e:0c:c8:8d:35:28:72:83:6b:ed:71:79:75:76:66:
         25:c3:83:9d:85:97:ef:44:da:93:62:6c:97:bd:91:0f:b7:b1:
         ac:d2:d6:da:96:08:5e:ab:80:f6:ca:94:f0:ca:1f:e1:b9:bd:
         b6:05:13:f9:10:14:11:56:42:1c:4e:81:36:73:97:01:f8:d6:
         cd:ea:78:8e:85:b1:2b:34:f6:06:3d:e1:2c:9c:ef:c8:8d:db:
         39:34:eb:21:b8:c6:7c:04:fd:b9:21:af:3c:bb:3c:df:72:df:
         10:39:2d:f9:f2:a9:a5:e6:e4:b4:56:b7:c4:58:a0:6e:a1:b1:
         5c:95:dc:30:e6:e2:c0:95:e1:a1:a2:05:3b:48:2b:8b:d3:6a:
         b1:a1:ad:95:d7:d0:25:fb:92:36:41:5c:bf:96:85:2c:3e:65:
         1c:e9:fb:f1:50:82:0f:19:ec:0c:84:b6:28:2d:29:21:4e:57:
         be:1c:46:e9:45:b7:f1:3f:33:61:2d:3a:e6:f2:62:b2:7f:26:
         48:f8:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:18:45 2025 by rpki-client