Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0b37070-61d8-33a8-a6a3-b1f07158ed3b.roa
File:                     c0b37070-61d8-33a8-a6a3-b1f07158ed3b.roa (raw, json)
Hash identifier:          ioZXcjM89EqqbkAZNnJy3XJnYnIL5b/HbDWVO5AZ44U=
Subject key identifier:   94:70:69:B3:01:E5:AF:1F:FA:58:83:F5:8E:E3:B5:D7:B2:EF:BA:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498B99DC6E78A50FBBD0083680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0b37070-61d8-33a8-a6a3-b1f07158ed3b.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     36629
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:dc:6e:78:a5:0f:bb:d0:08:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=f84e9fea-0d05-4fe6-8eaf-8817acc24a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:61:ad:38:68:b0:73:c6:37:48:a9:f7:49:48:
                    6e:1a:97:fc:af:03:e0:0d:1b:56:56:79:cd:ee:80:
                    02:47:61:94:18:db:27:2b:13:4d:ec:5b:e5:cd:09:
                    fe:80:42:ac:75:ac:09:fd:09:f5:cd:15:80:a7:47:
                    1c:6c:c4:60:01:f2:01:2a:15:33:02:15:22:09:a0:
                    25:b8:6c:6e:8e:c0:4d:b4:1e:8a:f7:6d:c6:d2:c2:
                    ad:a4:ff:c2:12:b3:6a:36:2b:b5:cd:cd:43:ee:16:
                    f2:53:cb:7a:9c:e0:d0:c7:dd:e4:98:7a:7d:c7:88:
                    08:6e:ef:be:b7:d6:33:e8:c7:9e:bf:2d:46:57:98:
                    51:f2:81:c1:6b:85:98:3a:cc:84:e2:69:3c:64:80:
                    71:63:a0:28:c3:33:43:d9:89:ab:bd:95:81:24:c4:
                    21:ae:35:81:65:a9:17:6d:32:7b:f5:a8:95:91:03:
                    9e:69:d1:15:1a:1f:e5:89:78:c2:1e:cf:0c:19:1d:
                    b1:07:c4:d2:71:b9:32:bd:a3:1c:4f:33:41:fb:21:
                    08:08:e9:36:fa:64:b4:17:67:c6:e0:1f:e2:8b:58:
                    bb:ec:5d:91:19:bd:38:18:5a:d0:1c:2a:0f:65:1c:
                    26:45:21:0e:31:35:af:5a:db:de:4c:c3:77:f9:cb:
                    e2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:70:69:B3:01:E5:AF:1F:FA:58:83:F5:8E:E3:B5:D7:B2:EF:BA:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0b37070-61d8-33a8-a6a3-b1f07158ed3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:ff:88:92:ee:f2:38:17:57:4f:33:aa:82:18:45:00:8e:cd:
         b3:a6:e6:a6:ff:6d:db:22:ec:a9:79:9f:5b:e0:94:26:a1:f4:
         61:6a:c6:b4:5c:a6:b7:aa:98:c7:d3:15:78:28:39:14:2f:ac:
         b1:c4:4d:ca:ac:a1:f3:dc:30:e6:18:24:2a:d7:81:a2:02:47:
         12:97:89:77:9b:46:58:72:72:60:21:5e:de:c5:73:a9:64:dc:
         df:f7:11:b0:ce:91:b0:a9:ad:60:65:ce:1e:91:b2:37:07:8c:
         17:c6:94:22:1f:75:c3:86:0f:fe:fb:5b:a8:98:cd:c6:a5:d2:
         43:1a:a9:76:9c:32:c9:c1:15:fe:00:fa:af:2f:0a:fa:1f:5a:
         c3:5d:d2:d4:3f:d0:5b:ae:a2:96:fb:f1:44:ba:34:de:07:05:
         9f:a7:a6:10:02:f3:6d:48:4c:e9:6c:d9:b0:e3:d7:56:01:da:
         56:02:2d:73:c7:96:56:e8:76:d3:98:21:c4:5b:a4:ae:53:ec:
         41:f7:f5:98:92:10:c4:f2:76:fe:cd:40:8f:ea:58:61:d8:dd:
         e1:d0:ab:c9:6d:7a:62:86:b0:20:c1:2a:13:f0:5b:55:4e:84:
         75:13:f9:64:d6:bd:0f:05:68:27:f5:72:55:d9:5b:81:52:4c:
         64:04:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:08:35 2025 by rpki-client