Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e29151c-48fa-337f-bf19-af06cddd54cc.roa
File:                     4e29151c-48fa-337f-bf19-af06cddd54cc.roa (raw, json)
Hash identifier:          oyk0TkeAsVRmfAnDWdvEaHzrRP9kcl/zu5DDOsFHlcw=
Subject key identifier:   40:59:F1:5B:88:96:5F:C7:FE:C6:46:8B:37:FA:82:95:64:85:43:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498B99DFCFA5EF9FBB1D9D5800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e29151c-48fa-337f-bf19-af06cddd54cc.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     396583
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:df:cf:a5:ef:9f:bb:1d:9d:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=a2962dfb-e4c2-481d-98e7-be0622d5700c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:da:70:e1:ba:6a:6b:59:2e:27:74:cc:4c:45:
                    8f:25:ef:0a:70:ab:cb:4f:f5:c8:4e:e5:8e:d1:e0:
                    cd:9f:a2:a3:c0:53:e3:09:86:b1:c3:6e:37:8f:ca:
                    78:a1:bc:86:34:a6:49:92:30:c8:2b:2d:71:49:39:
                    01:a4:ea:27:0d:8e:58:38:b4:93:a4:2c:81:2d:51:
                    90:85:f7:9a:f2:71:3e:06:eb:1c:7a:26:d4:56:23:
                    cc:e0:5e:a7:ed:79:b8:9a:2a:fe:51:86:73:ca:eb:
                    9d:4c:58:36:17:5f:9b:1d:c8:ba:44:60:39:6a:92:
                    ae:78:d6:8b:14:f9:45:5b:ac:2c:00:93:82:8f:cf:
                    80:02:94:1d:bd:41:04:5d:69:29:06:6c:fa:f4:59:
                    a3:c7:8a:aa:3a:d2:e7:a2:62:14:4f:92:b4:67:a1:
                    39:3b:1a:e4:be:4a:29:32:fa:85:99:ff:53:e8:24:
                    c8:10:2b:4a:ed:a5:89:28:d1:65:cf:8f:7e:05:7c:
                    ea:e8:9b:fa:36:e0:10:23:46:42:34:2b:30:8b:8a:
                    b0:85:76:03:04:1d:ae:7d:db:59:0b:6b:d9:83:6c:
                    a1:ef:fd:5b:90:21:83:fb:59:8f:09:8c:a9:46:35:
                    1f:fb:75:7d:5d:6f:5c:60:bd:32:f5:2c:8f:53:b7:
                    c7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:59:F1:5B:88:96:5F:C7:FE:C6:46:8B:37:FA:82:95:64:85:43:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e29151c-48fa-337f-bf19-af06cddd54cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:3c:39:d4:db:2c:a6:bf:9f:b4:4a:96:3f:af:f7:60:9f:a4:
         d3:da:eb:19:ab:cd:26:f3:9a:2f:af:33:90:3f:2e:e7:3d:10:
         60:06:ce:5f:ca:1c:2e:9c:72:11:ae:c5:a0:59:1b:97:9c:e4:
         6b:d0:04:db:86:02:d4:54:29:86:2f:66:56:34:04:b3:39:1f:
         0f:9c:3f:18:f7:b0:4c:cc:b7:65:b7:01:5e:32:94:54:82:72:
         0c:ea:12:aa:78:3d:f5:cc:f6:71:7a:c3:72:2c:82:a6:bb:8a:
         8b:88:42:73:57:3c:98:10:79:51:ce:5d:0d:39:88:75:4e:a4:
         f7:78:c7:15:fa:ae:a3:01:09:2a:83:2f:a5:b2:bf:d4:10:00:
         88:92:0b:e9:d9:25:63:1a:44:17:43:4d:4d:3a:00:35:ab:43:
         d8:e1:fe:ab:70:7a:7a:92:62:84:16:73:53:17:1e:e9:6c:60:
         4c:d4:4a:de:24:21:e3:99:a6:94:b4:72:e2:17:ef:67:89:c0:
         d4:09:0f:e1:3d:d4:f4:75:58:95:a5:39:36:84:c4:f2:c0:e9:
         90:83:a5:de:ff:10:6f:94:87:c1:cb:21:93:81:e6:72:dc:06:
         7c:09:ee:63:bf:f6:a1:1e:e7:41:2a:84:bd:e4:b3:89:77:f1:
         17:c6:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:16:10 2025 by rpki-client