Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acbd52ea-36d6-38dc-8874-8b6349c91e10.roa
File:                     acbd52ea-36d6-38dc-8874-8b6349c91e10.roa (raw, json)
Hash identifier:          o3DEjP07jec77V3EfeNhqo3fkifOSOwZozXVhkgU3+s=
Subject key identifier:   16:00:8D:BF:B9:2A:34:F0:48:AE:93:96:24:CE:3B:6C:4F:1C:46:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858499F24BE8B81BB389E327FF100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acbd52ea-36d6-38dc-8874-8b6349c91e10.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     396575
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:be:8b:81:bb:38:9e:32:7f:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=9f295a72-67ef-40f8-a230-2a3deafb73f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:c5:b0:e7:f9:5f:ee:cc:af:72:2c:db:bc:
                    7e:3b:67:82:fd:7d:df:03:e6:f6:16:0d:88:a6:35:
                    cf:ff:36:41:09:a5:f4:d8:d8:39:c9:51:66:5d:81:
                    28:23:23:dd:71:71:12:a6:ed:96:14:2f:ce:cb:35:
                    cf:2d:d2:4d:db:5d:d4:bc:4b:2b:a1:5a:e5:3d:5d:
                    ac:1f:73:64:c6:ea:fa:54:7c:a4:6e:6d:45:26:e6:
                    62:8f:a4:29:bd:aa:15:de:59:1f:f5:73:5f:20:0a:
                    89:dc:8c:66:a9:67:e0:b4:8b:ba:1c:53:4a:6d:e0:
                    7c:21:34:67:cb:29:4f:bc:d6:3d:bf:df:73:77:09:
                    34:b7:c6:f6:09:8c:03:46:b2:20:42:0c:4d:a2:3c:
                    8b:da:62:19:79:3e:5e:1d:69:9e:d6:68:fe:74:d5:
                    44:36:69:49:a8:18:9d:73:b9:50:ee:1e:c1:f0:46:
                    48:9d:7e:0a:49:74:35:53:7d:ac:77:04:2a:4f:3d:
                    db:ef:3d:64:ef:f5:85:a2:2f:d7:28:e9:25:65:0a:
                    bb:50:29:95:35:9a:18:a8:7e:41:ec:c5:7a:1e:5e:
                    e2:11:cd:04:d5:40:79:2a:38:b4:7f:19:2b:82:ca:
                    af:f7:35:cf:46:a6:93:d2:1e:5f:8d:70:ab:d5:0a:
                    63:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:00:8D:BF:B9:2A:34:F0:48:AE:93:96:24:CE:3B:6C:4F:1C:46:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acbd52ea-36d6-38dc-8874-8b6349c91e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f4:3d:71:01:56:2a:33:70:f4:02:f7:b5:ca:a5:bc:2d:25:
         5f:e2:70:e8:29:99:ff:cd:c8:3b:78:1b:73:72:64:e9:b9:e0:
         39:91:2f:26:26:13:2b:06:51:64:d6:1f:82:61:91:e6:af:58:
         e7:df:28:dd:c5:c4:7c:9a:7a:1f:04:cb:26:78:da:46:73:3c:
         0b:4d:ae:78:66:aa:36:ee:a6:8a:30:8f:88:fe:c1:7d:c7:ab:
         7c:37:02:b5:d7:97:23:e1:76:c9:9e:c1:4e:af:b9:98:b7:ff:
         79:d5:5b:dd:6c:81:28:30:d6:b2:10:4a:4e:46:45:f0:d1:fb:
         c4:c1:8f:4a:e9:c2:8f:04:a7:62:e8:37:a0:b1:0b:e9:72:dd:
         47:1d:03:ea:ba:f2:2f:11:63:7c:7e:1b:34:c7:95:a0:ed:3d:
         57:99:0f:b9:bb:9c:49:be:32:ea:3b:29:98:cc:2b:10:ab:59:
         e6:56:3c:9c:a1:d5:22:95:52:81:af:e9:cb:16:c7:78:6c:58:
         54:6b:6f:6d:d3:2e:77:bb:bb:cd:be:0d:39:23:e0:8d:c8:58:
         5a:9f:54:60:1f:f0:1d:dc:db:f5:14:8e:d5:45:e4:dc:91:6f:
         82:3f:84:da:b6:eb:60:c4:fb:9d:34:57:2c:4a:8d:a6:1a:9b:
         8e:ab:73:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:18:39 2025 by rpki-client