Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6444ba0-e871-3868-876f-f655ce0b6371.roa
File:                     a6444ba0-e871-3868-876f-f655ce0b6371.roa (raw, json)
Hash identifier:          /ns6i3yn8zt1eb2CH+tCuikDm5V3grdyJ9S/RcwzUo4=
Subject key identifier:   55:A1:80:7A:68:B2:43:56:DD:E4:0E:20:1E:FF:2D:A9:AE:5D:4B:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498B99DC9C8495BC66F06D9DA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6444ba0-e871-3868-876f-f655ce0b6371.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     397201
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:dc:9c:84:95:bc:66:f0:6d:9d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=4ce27b43-f1d1-45ea-a240-1414a251117d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d5:96:32:08:76:61:77:aa:c0:79:88:c0:c8:
                    64:ed:2f:19:b5:a5:62:e2:25:0c:2b:e7:0b:67:24:
                    f3:e8:4c:26:ea:b5:99:65:9d:c1:50:57:7a:a1:c7:
                    8c:92:9a:e7:ff:eb:6a:9b:4c:92:7e:55:e3:35:44:
                    18:3e:b6:7c:1b:81:c1:6a:0e:d3:52:70:1d:32:97:
                    6d:f4:6f:36:dd:69:cb:c3:74:2f:28:41:35:9a:29:
                    b3:59:08:1e:52:da:76:bf:6a:57:d2:16:70:24:35:
                    eb:ed:3a:13:ac:08:bf:a8:62:38:7c:81:e1:79:c6:
                    70:16:96:3d:19:14:ec:c4:93:06:ee:06:e0:d4:c9:
                    89:0e:d8:c6:9e:33:2d:b5:3d:cb:be:e6:f9:55:e1:
                    fc:cd:4a:5e:ef:37:fe:55:d2:b2:1c:c1:08:5b:8e:
                    13:16:67:67:fc:24:0c:2e:bc:26:89:df:e4:ef:f1:
                    53:85:87:9c:71:e6:6e:8a:15:ae:4f:07:a9:e6:e3:
                    a8:86:a8:df:be:91:3e:20:b5:51:02:98:ae:3c:0c:
                    2a:b2:62:d9:28:6e:46:ed:5e:46:97:04:fd:35:61:
                    4e:1c:cb:b6:4e:37:52:a0:d4:1e:4e:46:f1:9b:9e:
                    15:78:ca:9e:a0:b5:aa:ae:06:e0:ab:13:58:25:6e:
                    e5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A1:80:7A:68:B2:43:56:DD:E4:0E:20:1E:FF:2D:A9:AE:5D:4B:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6444ba0-e871-3868-876f-f655ce0b6371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:93:7e:49:cd:9e:ca:9f:53:68:63:f6:4f:af:8b:1a:66:6e:
         d0:ff:45:1b:b2:f1:01:92:de:8c:eb:76:36:6a:10:d1:3f:6a:
         0a:1a:9f:11:e4:8c:db:b5:41:89:07:6b:a5:27:ab:8b:2a:02:
         5c:42:74:77:1e:57:72:0e:18:b0:3e:0c:1c:3a:2a:95:c6:e6:
         66:c8:91:29:17:c9:b6:b5:fc:8d:2b:65:21:3e:e8:48:c0:7b:
         c1:7b:53:e1:10:b4:79:db:20:cf:97:26:2e:1d:df:62:f9:55:
         a2:79:02:19:a3:de:5b:47:dc:16:bb:e6:86:29:6e:1a:2d:f0:
         2e:30:11:b6:cf:9a:bb:1a:61:7d:ea:87:25:e0:a8:12:5d:a8:
         51:5c:83:79:c3:c6:89:fc:a9:ef:95:f9:c0:8b:d8:0a:26:1b:
         53:da:b4:5f:c8:43:d0:31:9c:64:ad:48:59:f7:9d:6a:36:15:
         91:b8:96:e2:4d:5a:92:3a:12:e5:02:d1:a7:19:13:99:b8:70:
         07:db:05:fa:d4:5f:f5:b5:4a:c9:71:ba:32:d9:8f:00:f2:9d:
         8b:6a:de:a6:f7:f9:60:b7:36:a7:60:08:76:23:29:80:16:50:
         8a:0e:16:db:71:a0:29:78:60:81:55:02:87:db:f4:e3:9c:d2:
         12:e1:7e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:04:58 2025 by rpki-client