Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4169b638-0baf-36ac-8fff-b08b0dc08134.roa
File:                     4169b638-0baf-36ac-8fff-b08b0dc08134.roa (raw, json)
Hash identifier:          joqiURditn16Al9hUNli9wSZXXs1/8BvxsidGMO/bFs=
Subject key identifier:   D5:14:8F:E5:97:0E:99:5C:91:E0:F5:E8:C9:00:E7:05:EA:73:E8:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849998F49C74DF6D8E36AD4CC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4169b638-0baf-36ac-8fff-b08b0dc08134.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     396827
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:49:c7:4d:f6:d8:e3:6a:d4:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=1a35333a-96e7-49e8-a419-0d28ca61c049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:fb:e8:8d:e0:e0:93:8d:e6:18:af:7f:ba:
                    77:f0:7c:d5:3a:43:a2:97:fa:86:97:23:a5:b1:26:
                    f9:74:9f:2b:76:22:58:80:2c:fa:96:f3:ce:fc:82:
                    57:18:9f:5e:7d:13:79:e1:d5:12:9b:b9:02:9f:c7:
                    3c:e1:35:00:9a:37:a1:42:04:9e:69:2f:b8:d8:53:
                    ef:ea:49:a2:64:ea:9f:06:e7:c6:51:db:c9:3d:09:
                    9f:e5:3d:ef:ef:51:81:34:9d:30:39:bc:77:26:16:
                    d9:8f:6f:7e:eb:ee:69:2d:68:ef:4b:a7:7e:ed:94:
                    83:7f:5f:a0:40:80:43:8f:85:4a:77:e8:5b:af:bd:
                    00:26:94:f8:ca:b2:57:78:32:f6:50:8e:f6:08:60:
                    88:24:35:99:4e:86:b3:8c:fa:ee:cf:46:5a:24:47:
                    29:5e:6e:70:d1:3b:1a:88:4a:84:5e:bb:75:cf:98:
                    62:48:67:42:46:69:be:f0:83:8d:b3:cc:b8:78:60:
                    83:12:2e:5e:45:74:d3:a7:c4:8e:b1:a3:8f:4a:df:
                    7e:44:28:3b:5d:53:18:3b:aa:36:b3:c4:3b:b7:36:
                    59:a0:7a:46:50:9b:d8:59:3c:d7:f7:bb:b8:af:19:
                    ce:64:d4:92:5b:ee:8a:76:71:bf:5e:a1:11:1e:ce:
                    15:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:14:8F:E5:97:0E:99:5C:91:E0:F5:E8:C9:00:E7:05:EA:73:E8:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4169b638-0baf-36ac-8fff-b08b0dc08134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:92:97:e2:0f:bb:de:71:b5:6c:2b:88:cf:90:6f:0d:61:2c:
         c2:7b:b1:41:93:40:cc:c2:5e:98:87:df:b7:7b:55:6a:7b:0d:
         09:b8:46:0b:1d:ca:6a:58:48:2a:b0:aa:3e:a4:e9:9e:09:fd:
         58:9f:1e:1b:d5:72:f7:9b:5a:8b:56:f5:82:f9:f0:19:38:b6:
         f0:51:b3:a6:e3:a6:5f:88:0a:41:29:13:63:c7:ad:91:4b:ae:
         d0:0f:0e:79:e3:d6:4b:22:0e:95:2e:a5:73:ca:3f:cc:be:e8:
         87:a7:48:88:f7:04:0b:52:89:9f:19:97:1f:e1:8f:cf:03:fe:
         35:7c:3a:45:e2:85:84:a5:1d:cc:4f:1e:3e:9a:af:cf:67:cf:
         e0:ed:9c:c0:5c:ff:c7:b3:df:cd:e4:87:34:39:77:51:57:2c:
         c4:31:2e:b3:ae:7a:24:36:c4:77:0f:65:60:f7:f1:4e:5c:0e:
         62:20:ae:30:cd:57:5d:f9:54:f3:75:44:ad:78:8a:0e:d0:d7:
         61:e7:cc:c6:1b:b4:01:fb:82:dd:f4:68:17:99:10:4a:4e:fa:
         9c:9c:a5:c3:87:e6:31:95:02:57:14:84:d4:78:ef:3a:ce:ba:
         b1:96:cc:e3:66:bc:bd:03:91:64:20:03:e5:f2:5b:c0:1b:c1:
         de:70:82:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:04:20 2025 by rpki-client