Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1361adb-477c-366f-b5fb-ee26ad6476c7.roa
File:                     a1361adb-477c-366f-b5fb-ee26ad6476c7.roa (raw, json)
Hash identifier:          h8eWywfSt+ggR5T7jzcDSuTXJIViteot2G2SpQQ0V80=
Subject key identifier:   D2:9F:3E:25:1D:6A:04:68:59:A1:4F:3F:64:30:A2:32:16:4E:6F:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858499F24C2C60FBD03F5EAC2AB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1361adb-477c-366f-b5fb-ee26ad6476c7.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     396602
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:c2:c6:0f:bd:03:f5:ea:c2:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=8a92b81f-7f42-4a9a-a6bb-41cb98786822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:62:71:95:c9:f3:ce:8a:75:42:01:15:fe:12:
                    17:de:cf:28:96:a1:8d:1a:12:a3:22:eb:52:19:19:
                    77:74:4a:4a:3e:18:04:0d:bb:80:c7:e8:1a:b2:49:
                    45:a5:fb:3a:35:56:61:12:21:31:cd:9f:ac:77:c6:
                    c1:71:8e:7d:35:a6:e7:df:d6:f6:e7:d0:21:a1:5d:
                    8b:29:65:45:f1:05:9e:d3:3e:3f:ad:79:36:ea:76:
                    0a:28:8d:47:f9:66:bc:8d:4c:21:fd:28:b5:fa:f7:
                    33:ce:a0:12:42:24:da:a9:e9:6c:90:ad:1e:86:35:
                    22:6b:0d:6f:8c:9b:e1:9d:8f:04:e4:11:cd:f3:41:
                    44:5c:6a:1b:fc:d1:95:12:18:c5:0e:5c:ea:90:4f:
                    59:20:9a:b8:99:64:32:6c:f7:72:45:6e:cd:76:0e:
                    da:ce:3b:5e:17:b5:af:a7:6c:06:d7:2c:f8:d1:dd:
                    0c:84:bb:d9:4a:28:e8:8e:9e:38:fa:e2:0b:d6:63:
                    da:49:51:d5:64:38:a5:ff:46:29:6a:60:4e:c1:d5:
                    69:ea:2a:f0:1e:e7:d0:b0:3e:64:e5:23:e3:02:57:
                    eb:cb:d7:ed:a1:cf:8d:52:11:a1:f8:9d:d4:00:33:
                    9f:87:0b:18:2b:b0:6f:e1:a5:79:21:a1:ac:2d:dd:
                    24:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9F:3E:25:1D:6A:04:68:59:A1:4F:3F:64:30:A2:32:16:4E:6F:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1361adb-477c-366f-b5fb-ee26ad6476c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:5f:20:42:0c:3e:40:5e:ea:8b:e5:2b:92:eb:8f:2f:2d:cb:
         32:d0:ef:bf:24:7f:f0:e8:4f:48:42:5d:8c:92:29:f0:4b:bb:
         14:dd:dc:ea:45:1d:96:17:3a:31:6e:9c:5e:67:5c:1a:42:98:
         a0:cb:46:71:15:6e:a0:54:a4:48:aa:eb:2b:95:45:f4:a0:c4:
         2e:91:9f:90:6a:67:4d:07:a8:29:17:f6:c1:05:26:3a:c4:fe:
         8c:a8:5c:28:22:62:63:f3:c1:3c:7a:6c:94:67:8e:0b:fe:d1:
         b5:ff:aa:26:9f:f4:69:40:47:3d:9e:da:98:32:49:19:be:4a:
         71:49:31:69:ad:6d:c3:67:56:f3:24:3f:ca:40:63:f2:a7:1f:
         bc:a7:eb:19:a3:c8:a1:24:4f:ba:07:03:f7:3e:95:c0:0b:e5:
         61:d3:61:60:0e:00:e4:ff:1d:cb:1d:b8:d4:e6:1d:61:d7:ac:
         3d:d2:60:b2:d4:02:22:2f:6f:b4:d2:fc:12:d1:58:74:78:0e:
         08:7a:9f:b2:ce:17:4f:b7:3a:0e:a4:aa:55:07:e6:e2:70:92:
         c6:49:90:66:39:ab:99:56:73:a2:11:8b:d2:5c:12:34:0c:b6:
         58:f8:3d:40:70:19:03:24:ac:7c:f1:e5:a5:45:25:10:a0:2c:
         bc:ae:ca:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:57 2025 by rpki-client