Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/844755a7-bab8-3dfc-9b8e-4ab66bd15b4a.roa
File:                     844755a7-bab8-3dfc-9b8e-4ab66bd15b4a.roa (raw, json)
Hash identifier:          2+CKdBuAAmJebbcZveQM463Zk3IaCS5aRYR05YzW78U=
Subject key identifier:   AB:D9:5D:C9:00:63:AA:07:91:3E:A0:2F:30:AB:8D:FC:C5:7B:7B:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498B99DC2F90E76F3D13023500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/844755a7-bab8-3dfc-9b8e-4ab66bd15b4a.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     10515
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:dc:2f:90:e7:6f:3d:13:02:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=c5c7f835-b19a-49f8-9cd9-118b2097c26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:e1:df:22:5f:5a:a8:52:db:71:31:89:aa:
                    2f:82:d7:bd:8e:f7:74:8b:8e:08:a8:3a:12:3d:34:
                    af:8b:26:10:95:9f:9f:8b:f4:7e:42:d6:ce:fe:d3:
                    33:d8:b7:22:c8:2a:e5:e9:9a:93:a7:15:ed:99:aa:
                    f3:be:4b:4a:44:3c:35:e6:4a:74:82:14:be:42:5f:
                    b2:26:59:ec:17:db:96:01:7e:1a:af:52:00:40:b0:
                    06:29:be:5c:b0:8b:b1:1b:fa:4a:f2:94:a7:51:7d:
                    16:88:7b:88:9f:cc:52:d2:59:17:fa:00:c6:72:dd:
                    50:c3:ac:19:f0:d6:81:ca:be:db:30:8f:e5:e8:92:
                    86:88:e7:cb:0a:16:48:b8:06:a4:62:9a:29:79:d6:
                    24:57:a3:45:12:ec:8f:74:4d:7b:b1:73:98:0f:0a:
                    ff:8b:e4:37:67:c8:0a:b8:0c:17:fe:bf:6d:ad:a5:
                    0f:f2:15:45:09:50:f9:0e:37:63:6f:b7:73:91:05:
                    cc:75:f5:da:b8:2d:9c:28:df:f6:9e:6c:ed:2f:84:
                    ef:e1:8d:12:23:33:76:2a:e9:72:1e:62:41:d6:58:
                    81:6c:d5:ef:36:8f:12:ad:fd:f1:d0:97:58:1d:4b:
                    7a:0f:4f:b2:91:7f:04:31:2f:cb:97:21:cc:90:7d:
                    3f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D9:5D:C9:00:63:AA:07:91:3E:A0:2F:30:AB:8D:FC:C5:7B:7B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/844755a7-bab8-3dfc-9b8e-4ab66bd15b4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:59:b9:78:73:4a:cb:d7:ae:bb:66:a8:89:eb:2a:67:57:3b:
         b9:6c:71:b7:7f:e6:2b:1e:2d:97:ae:33:3b:45:85:03:f1:dd:
         5b:f2:82:81:25:35:88:10:a0:79:f6:b6:19:56:e4:26:99:09:
         c6:ce:0a:06:7d:a3:b1:8d:d0:09:28:18:9d:ad:16:ad:a3:90:
         91:24:65:ea:08:1e:d3:29:5c:21:07:c9:c7:92:39:e8:d3:52:
         cc:09:31:d2:0a:43:c0:fb:67:4d:73:0d:bd:f3:aa:43:81:92:
         b1:5c:ac:64:b4:0c:1a:a5:0f:c4:32:35:20:03:b5:1e:1c:b2:
         a1:fc:73:df:41:cb:79:a1:3e:f6:05:dd:86:af:b7:3c:55:fb:
         8e:be:e9:57:b7:e4:dd:2e:3c:7c:4a:d2:45:fa:3d:b7:27:ba:
         b3:c4:39:51:a1:85:ba:76:7f:a2:91:ea:f9:ae:16:2d:fe:5f:
         87:fc:e3:26:1c:bd:c3:bc:4f:63:ee:c3:1a:3b:d5:4a:13:b0:
         1e:4b:e1:4a:9e:ea:76:da:37:90:8d:4c:7d:d2:f5:16:26:5b:
         00:96:80:de:74:e7:a5:28:f7:dc:a9:dd:c6:b0:94:80:a0:79:
         cb:d1:05:ae:31:dd:aa:d7:63:3f:76:c9:21:a2:57:1d:7d:c1:
         40:25:ac:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:00:06 2025 by rpki-client