Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb3a2a47-fd80-3a8b-83e9-5fe9bb43c954.roa
File:                     bb3a2a47-fd80-3a8b-83e9-5fe9bb43c954.roa (raw, json)
Hash identifier:          1/uWKwARoFcUkvCY9CbvzgxN9NbqPb2aqQIisLMbolQ=
Subject key identifier:   AB:EB:2A:99:3B:DF:88:2B:B1:A6:77:4B:6A:62:2A:55:56:94:12:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858499F24BF3EEE32E991575C6D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb3a2a47-fd80-3a8b-83e9-5fe9bb43c954.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     396554
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:bf:3e:ee:32:e9:91:57:5c:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=2308a549-fc0a-413b-905c-a2c40b20ff94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:19:00:31:bc:55:f4:df:c4:b7:27:43:56:0f:
                    1a:68:91:a0:0b:22:4f:a4:73:1e:6c:b9:28:74:1f:
                    d7:b6:4f:18:7f:d5:fc:09:a3:eb:65:4d:8d:8c:ca:
                    07:3f:1f:82:67:32:cf:fd:08:15:70:12:64:bb:6c:
                    fb:c7:77:20:0f:e9:33:95:09:48:d7:22:94:88:cc:
                    bf:b4:d6:eb:60:e9:37:eb:c5:d8:d0:cb:2b:bc:02:
                    68:1c:17:70:1b:03:58:7c:3e:ee:2f:4c:57:84:8e:
                    2d:39:a3:27:27:e9:00:3b:a8:de:43:67:af:ec:2e:
                    d3:62:6e:a0:1f:0e:28:72:88:70:4f:6b:78:f4:56:
                    b3:c1:bc:0f:5b:42:88:87:ab:99:7c:8a:fb:ac:32:
                    f0:3b:26:36:35:bf:c3:be:6b:0a:92:cf:0c:29:3c:
                    50:e1:8e:71:99:7d:0c:f6:02:de:66:4a:4c:b5:81:
                    54:14:5f:f3:e0:31:c2:8b:11:fc:d3:c7:aa:75:62:
                    1d:36:c5:71:23:e6:31:eb:71:52:25:7c:05:88:f0:
                    8b:9e:bd:82:d1:e4:3a:18:7f:20:c1:6f:90:6e:b8:
                    54:44:a7:d6:b9:d0:10:86:20:e5:02:32:c8:fa:27:
                    ef:81:f5:ba:fa:d2:85:b1:1d:8e:d4:fd:ca:98:80:
                    cf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EB:2A:99:3B:DF:88:2B:B1:A6:77:4B:6A:62:2A:55:56:94:12:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb3a2a47-fd80-3a8b-83e9-5fe9bb43c954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:80:36:f7:3f:bc:27:99:74:8d:89:0b:44:a5:11:0a:e7:69:
         7b:43:7b:ce:c5:fe:66:2a:8e:d1:3a:da:6e:0d:3a:1f:85:5b:
         99:5c:8b:be:99:7d:a0:79:72:a2:f3:23:1d:50:4f:19:de:3a:
         4b:74:cf:ee:43:85:ec:de:a3:06:be:a4:1b:c1:31:34:a1:9a:
         52:1a:fa:c9:97:2c:93:59:20:bc:2a:de:65:db:01:45:3b:f8:
         74:19:59:2f:50:ad:fc:cf:86:b2:d9:c0:86:f6:d9:17:f3:de:
         85:57:44:95:13:84:21:0f:7a:2a:72:a8:73:dd:ea:40:62:74:
         35:9c:43:a6:35:16:06:b7:d3:51:88:f4:e8:9f:e5:97:33:7b:
         89:eb:9f:33:ef:ba:f9:2c:dc:b1:4d:34:19:48:fb:34:bb:c4:
         60:7e:c5:ec:4f:10:a4:c6:0a:7c:84:e6:b0:80:35:31:83:77:
         48:0c:1c:a6:4a:f6:db:6c:a5:ed:93:ae:90:cc:1a:b9:7f:3c:
         18:5f:95:98:6c:c8:fc:36:c4:49:f3:2f:f8:bd:40:90:7f:17:
         04:17:16:39:28:85:e1:79:26:16:92:e1:da:b8:16:52:69:d0:
         c6:9b:5b:2a:d8:b1:61:b5:90:b8:88:eb:5c:f0:4f:2a:47:5b:
         bd:3f:12:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:16:05 2025 by rpki-client