Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a141bd35-7cfe-3a89-a1cc-a49f2245f886.roa
File:                     a141bd35-7cfe-3a89-a1cc-a49f2245f886.roa (raw, json)
Hash identifier:          6CrGEY9HAfMzuGCRh/Ce+dokL5VBf2+r9BPR3jqah4w=
Subject key identifier:   5E:EA:CE:83:84:CA:3E:53:A2:D0:7E:95:34:FD:D9:F6:FC:21:E0:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849998F4B130F2B291BD277CF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a141bd35-7cfe-3a89-a1cc-a49f2245f886.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     396581
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:4b:13:0f:2b:29:1b:d2:77:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=67671d8a-6caf-4c0e-90d9-7bf63771e2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:66:d9:53:36:7b:b5:96:9a:0a:44:b0:ad:
                    7b:ed:77:64:7f:ea:39:05:bc:71:71:f6:7e:50:c1:
                    65:2a:82:55:89:c0:35:12:20:91:b8:ac:29:bb:1f:
                    88:b6:3e:19:ae:ed:37:8f:5d:37:7c:85:ad:42:76:
                    c5:93:cf:40:9e:84:8d:67:04:1c:5f:e5:ec:3d:d1:
                    53:5e:62:5a:a7:4a:0c:7d:94:2d:c1:eb:9b:d9:9d:
                    cb:ef:e3:70:e6:f5:5f:4a:72:48:b5:b0:3c:b8:21:
                    fc:5d:61:d8:87:e5:a3:4e:fa:44:ba:ba:6e:21:94:
                    a6:bc:03:a5:05:94:91:23:8d:0e:e2:60:cb:14:9d:
                    55:58:dc:3d:88:18:e7:e1:2a:22:6e:e2:d6:93:53:
                    51:48:e2:c2:60:5c:49:7a:d6:7c:bb:51:c5:99:a8:
                    4d:3e:a4:96:6a:63:71:f3:16:c4:7c:7d:9c:e2:7f:
                    01:dd:ff:43:9c:86:16:f3:20:1d:0c:b9:62:49:f0:
                    2a:f7:75:98:c5:57:49:f0:bd:6d:58:89:d8:a9:7c:
                    ee:0a:63:55:1b:75:4f:5b:04:ab:8c:3d:f7:a4:18:
                    ec:66:ca:28:2d:98:cd:45:0c:ec:b3:7e:49:ab:08:
                    b0:51:c7:ca:8e:da:d0:3d:e3:ef:65:bc:09:ac:21:
                    65:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EA:CE:83:84:CA:3E:53:A2:D0:7E:95:34:FD:D9:F6:FC:21:E0:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a141bd35-7cfe-3a89-a1cc-a49f2245f886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:38:e3:15:33:f2:df:a1:f7:87:01:d8:62:da:0f:11:8b:7d:
         f0:50:da:5c:a8:e5:05:c9:48:1d:25:8a:54:1c:51:9c:0f:35:
         0b:81:7a:af:ac:e8:63:aa:ec:a6:57:df:46:d4:bf:eb:f0:55:
         04:a7:f8:26:f9:2f:c5:e4:c5:25:3d:f1:dd:83:00:33:3f:22:
         37:67:b5:1b:34:99:47:f9:43:cf:64:cc:76:cf:e8:9f:57:27:
         85:24:30:02:32:60:62:1b:8c:05:31:33:c9:3a:d3:69:db:1e:
         84:45:ce:bb:1a:5d:2c:92:ab:c2:a9:94:c7:02:85:04:9c:2d:
         39:31:20:a6:5b:b2:24:37:f8:b2:53:ad:72:ce:96:45:9e:07:
         da:99:4d:be:34:ca:85:29:ea:3f:4e:a2:14:6f:4a:49:af:a6:
         39:f2:28:24:9c:99:ac:bf:c2:aa:91:1f:16:cc:a0:84:cf:ed:
         38:7c:47:c6:5d:06:ea:ee:e9:db:0e:68:1a:0e:5b:23:64:fe:
         4c:7c:b7:d7:a8:01:e5:f2:1f:64:df:bc:10:a6:f6:e6:7a:d0:
         bb:c7:ef:4b:65:df:e5:5e:72:65:f1:47:e8:97:b8:9d:66:7f:
         25:47:e6:c2:ac:c4:c0:92:e3:c9:67:22:6f:00:6c:3c:40:e3:
         4a:ba:20:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:45:07 2025 by rpki-client