Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c5d868d-f2b2-3a74-adc9-eb61a063c8f7.roa
File:                     3c5d868d-f2b2-3a74-adc9-eb61a063c8f7.roa (raw, json)
Hash identifier:          WYJxPEft1FaKAc0FoREZLRrcIndN9ih04FItOtKg8lA=
Subject key identifier:   C8:A9:4B:6F:03:32:FC:57:5F:96:FE:95:86:87:C1:7D:61:EE:3F:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498B99DDC8E265719F1EC60780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c5d868d-f2b2-3a74-adc9-eb61a063c8f7.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     36618
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:dd:c8:e2:65:71:9f:1e:c6:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=4b9d3b77-7fda-4ab1-9368-7523fc3a955f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9b:b3:ff:3d:a0:4a:b6:38:36:24:e1:a2:2e:
                    e1:a8:15:e9:33:43:57:fd:c3:43:09:6b:23:6b:a0:
                    bb:56:6f:e5:4a:d2:96:fe:da:85:e6:25:2b:88:b4:
                    ea:bf:2d:7f:04:99:a4:09:a6:ec:7a:31:5e:02:1f:
                    39:70:04:d4:45:fe:15:3e:3d:4d:d5:70:e1:f4:e7:
                    f3:03:38:b5:53:cc:1c:ee:87:ba:ef:39:b5:52:3a:
                    85:ef:bf:23:f0:fb:78:06:97:0f:ec:1b:77:80:32:
                    96:b4:82:db:b1:3b:06:0d:e1:96:3e:7a:ba:0f:1d:
                    50:7f:a1:69:6e:9e:81:f3:dd:a5:93:1f:cd:e0:1b:
                    8e:07:0d:19:92:8b:c7:7f:e3:e7:25:d0:b4:ec:5d:
                    d9:18:37:67:62:d8:87:74:b4:c2:cf:4a:39:3c:04:
                    a6:1f:13:42:88:00:fa:e2:c9:b9:8f:79:5a:38:a3:
                    bc:87:bc:92:17:6f:c4:9b:86:fd:b5:62:45:2d:98:
                    ff:e6:88:ec:d6:10:ab:60:68:3b:9e:c3:9c:c3:df:
                    31:98:05:db:19:9c:46:f2:e1:36:10:a2:62:ae:a8:
                    b8:a3:98:21:cd:a7:6f:39:b5:22:78:f7:ac:d6:c4:
                    ce:69:75:73:d0:43:a7:9e:00:3e:47:61:55:c6:d1:
                    f7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A9:4B:6F:03:32:FC:57:5F:96:FE:95:86:87:C1:7D:61:EE:3F:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c5d868d-f2b2-3a74-adc9-eb61a063c8f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:7b:a3:3f:bd:04:41:07:1f:07:f8:ad:cf:54:44:12:aa:e1:
         82:b1:78:6b:62:77:e3:9a:f5:b4:ea:bc:52:01:34:95:c5:67:
         eb:68:68:99:9c:66:13:5f:77:1c:5b:6a:59:ac:49:ad:d4:a9:
         74:a2:42:b4:0b:19:cf:48:3d:5a:c9:7f:35:5d:37:b1:4a:26:
         24:a6:a1:60:3f:51:cc:12:6b:50:fe:a0:ef:b2:d8:01:10:75:
         af:55:25:2c:55:95:41:24:2c:b5:8b:99:37:5c:d8:a1:2c:c3:
         69:af:16:92:a2:21:8c:b1:cc:3a:31:0d:b0:64:4c:6c:96:b9:
         f2:98:a8:d7:64:fe:70:b1:36:01:5f:c4:2c:0b:46:f1:0c:59:
         c6:e0:ea:4b:ff:8f:ac:9b:d3:7a:ac:e3:c0:65:eb:78:a4:83:
         1b:70:d6:b3:2d:40:2f:5a:05:80:6b:59:ed:e1:1b:f8:66:78:
         b0:86:b0:3e:f8:a6:bf:0c:74:52:c9:3b:86:51:c9:93:01:a8:
         92:30:79:60:08:94:ed:ab:58:15:45:0d:67:e9:2f:92:76:84:
         41:52:ee:f4:ac:fc:54:44:c1:ed:ca:3b:c4:71:c8:7c:65:6a:
         fb:b9:21:0f:f6:27:65:d7:9e:55:30:69:d1:0a:7d:b0:ef:d0:
         c0:55:b8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:39:51 2025 by rpki-client