Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce0935c3-d912-37f8-b1fd-2c830e62ec19.roa
File:                     ce0935c3-d912-37f8-b1fd-2c830e62ec19.roa (raw, json)
Hash identifier:          go+GQPPOX6+EgNDnFPgsdF6xcoOCbQ73l/TA7VqfWN8=
Subject key identifier:   32:59:E9:A4:E0:B4:1C:2F:F0:00:D9:C5:14:81:9A:FA:02:B7:FE:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858499F24BFC8137412A71E26B340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce0935c3-d912-37f8-b1fd-2c830e62ec19.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     396560
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:bf:c8:13:74:12:a7:1e:26:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=4198efff-e781-463a-8f96-eeb90f040b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:39:6a:ce:56:ec:b6:b7:21:a1:b6:ae:f8:27:
                    dc:cd:b0:0c:ee:e5:a4:69:08:1b:7a:72:93:96:a8:
                    12:10:9e:16:f0:53:ff:10:8a:23:c3:5d:44:57:e2:
                    24:5e:04:ed:a0:0f:75:c3:2c:ab:b1:ff:89:3f:23:
                    5f:dc:42:a3:91:6b:44:37:58:25:a7:a1:af:46:39:
                    05:46:af:76:8e:fe:3a:9a:1c:70:60:be:a6:42:6b:
                    1f:d9:09:ed:7b:46:85:0c:a8:c3:eb:6c:7d:c9:6b:
                    52:11:4e:c3:5c:71:62:cb:af:ea:0d:db:7e:8b:cd:
                    7e:51:29:ec:d2:4c:41:77:e3:ff:30:68:ae:6a:99:
                    e2:34:74:62:0f:4d:ed:b2:73:ca:0a:4d:e9:12:3e:
                    a4:a4:58:64:84:0f:84:2f:05:7f:85:ac:2d:c5:71:
                    3c:55:97:ec:bc:d9:f7:5b:1f:b7:8d:d0:77:27:6a:
                    e4:85:18:c0:f4:28:96:13:e4:88:13:c8:0e:77:4e:
                    42:8d:94:bf:6e:73:d4:0c:41:1c:d4:a2:56:58:67:
                    49:16:ee:51:05:fe:4f:61:58:49:72:c5:47:93:43:
                    13:41:67:a7:e3:e2:e7:2a:05:8b:65:02:4d:04:1b:
                    ee:1b:a9:8f:c1:48:15:9d:ca:62:47:89:e6:ad:18:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:59:E9:A4:E0:B4:1C:2F:F0:00:D9:C5:14:81:9A:FA:02:B7:FE:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce0935c3-d912-37f8-b1fd-2c830e62ec19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:c2:b6:9a:33:fa:d1:a2:e6:d7:71:c9:6f:e4:7e:5a:9c:d1:
         c0:9b:cf:3e:b4:08:b1:0b:19:6f:bc:d6:71:b8:5e:fa:6d:d9:
         f5:bc:b8:09:44:48:1d:36:67:b3:63:e0:5c:a3:48:22:ae:29:
         e8:de:cf:9e:28:ad:43:c6:6b:16:bf:5c:be:f2:11:e2:65:34:
         0c:6d:a6:b0:20:1c:d1:74:4c:e0:98:1e:b0:da:99:a0:8f:8a:
         3b:1e:f2:1d:1b:7b:75:06:c9:71:36:a7:62:5e:40:b2:97:cd:
         c8:ed:d7:02:9e:1d:e2:74:9a:22:5e:75:f2:0d:de:40:18:5a:
         4d:db:b4:33:a2:5b:ce:bc:64:00:4b:05:5e:41:9b:55:4b:c0:
         c7:90:3d:fd:bf:02:11:31:00:4e:d8:89:38:70:16:dc:13:a9:
         72:c7:95:74:dc:07:07:3c:b2:64:f4:c9:b8:87:7e:97:f3:d6:
         98:09:cc:d5:c1:5d:0c:3c:49:86:6e:68:9f:26:a9:a5:ff:28:
         6c:97:3f:58:8e:7d:a4:9c:94:35:92:3f:c9:7f:54:25:d7:d4:
         83:ce:4f:f8:20:2a:35:71:e2:11:c8:51:da:10:04:e1:20:97:
         7c:5e:30:6f:ea:cb:f3:be:97:26:f1:13:5f:5b:fa:a5:a8:44:
         61:cf:df:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:22:37 2025 by rpki-client