Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2013e6f0-9211-3297-8734-b523b1c7ea5a.roa
File:                     2013e6f0-9211-3297-8734-b523b1c7ea5a.roa (raw, json)
Hash identifier:          TPH1iy748tdktFVGbYg1Lj5dNXFCd+0IZ68lqIvyNKc=
Subject key identifier:   F2:77:83:1C:B4:C3:55:4D:D5:01:42:DA:95:F7:70:E1:A0:71:04:18
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858499F24C19AD779646DDB692D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2013e6f0-9211-3297-8734-b523b1c7ea5a.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     397212
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:c1:9a:d7:79:64:6d:db:69:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=90e29dd9-a2ec-4793-883a-24836e61c698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:82:86:c4:e1:1e:34:da:84:4f:d1:fb:ad:
                    5e:cc:ff:5d:e3:c1:53:5b:df:47:a2:99:fa:b3:29:
                    99:f3:06:fe:09:7e:df:57:6c:24:c8:db:11:0f:cf:
                    80:c1:97:26:60:bc:d8:c9:f4:65:93:06:10:7e:50:
                    f3:de:88:f2:67:8d:38:6d:e5:55:e2:ba:a9:b8:8a:
                    06:2a:91:ca:dc:00:dd:ca:a2:20:31:23:ce:f9:58:
                    78:48:2b:58:6b:41:2a:75:61:12:9b:bc:38:42:ed:
                    79:c9:fe:c0:c0:d1:5e:2f:92:7f:8b:b0:79:42:bf:
                    18:6a:c8:47:4b:28:cf:8d:d8:2a:62:11:4a:79:fc:
                    90:7e:41:2a:23:08:9f:4b:6a:ed:c8:ae:72:2f:a8:
                    98:68:a8:1d:3f:68:9c:c5:8d:d9:89:7d:0f:7e:63:
                    f1:bd:48:a4:3f:13:ca:f1:3b:00:fe:55:4d:6d:fa:
                    3c:f6:87:cc:b6:20:ae:2d:e5:1a:3a:46:ab:f4:05:
                    dd:cc:33:41:ff:3b:93:50:12:98:17:b5:e8:2d:7e:
                    5b:b1:7c:68:a5:9a:10:93:d3:ab:49:54:c8:0f:90:
                    69:7e:8d:e4:ee:b1:ac:96:b3:28:18:a2:2f:42:e0:
                    14:b1:52:d8:35:c9:45:91:fd:f3:6a:64:cd:07:0f:
                    55:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:77:83:1C:B4:C3:55:4D:D5:01:42:DA:95:F7:70:E1:A0:71:04:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2013e6f0-9211-3297-8734-b523b1c7ea5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:5b:21:db:50:52:a5:bb:a4:63:8f:e9:98:92:70:79:37:eb:
         59:c6:f4:24:af:fb:45:f8:e1:6e:b0:1c:b5:b4:44:e2:51:c8:
         95:4d:31:da:80:f6:b6:69:72:ac:74:a8:74:57:d0:cf:1b:64:
         3e:64:29:ad:cd:39:80:19:67:88:67:21:03:b6:24:ef:f9:0d:
         37:a6:76:59:08:e5:0d:24:dd:6c:39:33:9a:1b:b9:5f:cc:a1:
         72:a2:b1:89:d6:b1:94:6a:74:ee:0b:ff:17:71:65:79:75:b8:
         ff:e1:fa:cb:a3:1e:c9:3e:c1:37:63:20:70:78:2e:34:5c:e0:
         84:b7:01:96:06:d1:05:25:24:7a:09:4e:a2:8c:e8:83:17:35:
         01:be:c3:46:f0:93:04:8a:83:74:e5:2e:82:65:60:e1:c1:8d:
         b3:fd:98:20:0c:4a:cb:95:b3:03:71:79:16:cc:cf:c6:27:78:
         cd:16:6d:99:ce:e7:e4:22:21:2e:ce:3b:ed:cd:db:34:c2:a8:
         8b:dd:ff:f3:49:3e:76:f0:fa:fd:0b:75:37:a7:4f:33:0b:c6:
         01:65:97:90:dd:b8:43:84:66:87:9b:b6:56:8f:4d:8c:6a:e1:
         9e:0e:a0:ce:b8:55:d6:22:cd:8b:2e:51:d8:6e:0b:13:94:ec:
         21:65:0a:7a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJMGa13lkbdtpLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk
OTBlMjlkZDktYTJlYy00NzkzLTg4M2EtMjQ4MzZlNjFjNjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN+ChsThHjTahE/R+61ezP9d48FTW99Hopn6
symZ8wb+CX7fV2wkyNsRD8+AwZcmYLzYyfRlkwYQflDz3ojyZ404beVV4rqpuIoG
KpHK3ADdyqIgMSPO+Vh4SCtYa0EqdWESm7w4Qu15yf7AwNFeL5J/i7B5Qr8YashH
SyjPjdgqYhFKefyQfkEqIwifS2rtyK5yL6iYaKgdP2icxY3ZiX0PfmPxvUikPxPK
8TsA/lVNbfo89ofMtiCuLeUaOkar9AXdzDNB/zuTUBKYF7XoLX5bsXxopZoQk9Or
SVTID5Bpfo3k7rGslrMoGKIvQuAUsVLYNclFkf3zamTNBw9V0wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPJ3gxy0w1VN1QFC2pX3cOGgcQQYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjAxM2U2ZjAtOTIxMS0z
Mjk3LTg3MzQtYjUyM2IxYzdlYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAgWyHbUFKlu6Rjj+mYknB5N+tZxvQkr/tF+OFu
sBy1tETiUciVTTHagPa2aXKsdKh0V9DPG2Q+ZCmtzTmAGWeIZyEDtiTv+Q03pnZZ
COUNJN1sOTOaG7lfzKFyorGJ1rGUanTuC/8XcWV5dbj/4frLox7JPsE3YyBweC40
XOCEtwGWBtEFJSR6CU6ijOiDFzUBvsNG8JMEioN05S6CZWDhwY2z/ZggDErLlbMD
cXkWzM/GJ3jNFm2ZzufkIiEuzjvtzds0wqiL3f/zST528Pr9C3U3p08zC8YBZZeQ
3bhDhGaHm7ZWj02MauGeDqDOuFXWIs2LLlHYbgsTlOwhZQp6
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:08:36 2025 by rpki-client