Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea38efd3-c54d-394e-8da9-cef7ebc77bc1.roa
File:                     ea38efd3-c54d-394e-8da9-cef7ebc77bc1.roa (raw, json)
Hash identifier:          fn5RGXN4Ml7NCtcs0e71y8dyoumK1mUBKCXMTNjmqeY=
Subject key identifier:   D4:4A:0A:84:84:15:BD:6F:11:84:F6:05:0C:4A:71:8D:38:C8:D2:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498B99DBAFA7A7F051D2A1D700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea38efd3-c54d-394e-8da9-cef7ebc77bc1.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     396562
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:db:af:a7:a7:f0:51:d2:a1:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=0b860da4-afde-46b2-b9a9-52a311b8941a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:19:59:09:3d:21:96:52:61:fe:4b:88:ac:17:
                    1b:6b:ca:54:5f:44:fa:7e:5d:d9:24:0b:e8:00:6f:
                    b6:e4:10:91:48:0b:12:5e:9e:9f:b5:5a:ff:18:19:
                    6f:2f:1a:19:c4:13:f8:7b:a2:30:f6:51:b9:ba:6f:
                    a3:06:a1:be:80:9e:84:a5:c1:16:c9:39:50:9b:ba:
                    d1:0f:5f:9f:5f:ee:4d:9a:42:53:23:c3:3e:ad:28:
                    40:3d:58:ee:ab:e0:00:f8:8d:f2:47:50:71:8a:e8:
                    77:01:d9:eb:ef:29:1a:cc:87:4d:cf:47:6f:15:12:
                    7e:c1:48:96:65:03:97:be:88:ed:97:7f:44:be:f5:
                    6e:2d:3a:4c:96:a0:b4:d6:e7:99:7a:68:4f:11:5f:
                    34:81:fd:f0:80:13:b0:16:23:72:ed:79:4f:2b:42:
                    f2:b7:4a:3f:d5:14:bc:e0:e0:00:ac:5c:2e:bb:bd:
                    85:fa:59:19:90:03:17:0e:13:9a:26:03:29:23:d5:
                    bb:af:7a:02:51:ab:80:ef:2d:6f:35:d2:1c:af:1b:
                    e7:ec:2f:9a:0d:83:a0:4a:3f:15:39:ed:e0:38:68:
                    50:3a:96:6b:74:a5:ce:4d:06:8d:5c:f6:c4:53:61:
                    5a:ea:9e:fd:cb:72:62:13:76:2e:a3:92:08:06:a1:
                    f0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4A:0A:84:84:15:BD:6F:11:84:F6:05:0C:4A:71:8D:38:C8:D2:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea38efd3-c54d-394e-8da9-cef7ebc77bc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:3e:6d:90:e6:cd:a5:a7:d2:63:7d:f8:b3:cf:4e:cb:03:18:
         4c:af:49:e2:93:92:5b:3d:87:09:57:93:a4:bb:d0:7f:8c:07:
         91:72:fb:1d:06:48:fa:77:50:df:0e:d2:d4:93:ab:49:43:e2:
         c4:84:3a:0c:bd:c5:39:08:8b:30:4c:20:2d:58:18:00:ac:1e:
         f3:45:16:18:1f:39:92:96:68:8d:3e:2a:27:5b:a9:5e:73:cb:
         1c:44:db:85:d2:21:ca:86:d8:af:fa:3d:a8:31:3d:84:06:3e:
         f4:a3:82:f7:28:ee:41:69:46:61:1e:8e:71:c6:c2:9d:52:75:
         e6:ec:47:45:b3:ba:56:79:de:a9:89:68:aa:2a:86:98:75:34:
         52:66:1a:b7:c4:e4:64:10:8e:d7:5d:e4:08:b6:f4:52:0d:b6:
         86:c3:48:1c:90:54:f3:30:03:4f:63:12:bd:80:eb:c0:bb:98:
         7e:96:97:dc:29:94:9b:c2:76:37:25:2c:a8:93:4b:16:a6:bd:
         c4:c7:e0:4f:aa:fc:2e:36:00:b4:3a:1e:58:9c:a4:29:99:23:
         f2:b5:35:3a:9d:5c:f1:f7:37:ad:8a:61:c8:cf:73:d4:bf:a8:
         25:69:41:c9:22:92:53:55:8a:58:53:6d:7c:91:91:bc:da:20:
         f2:2f:60:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:03 2025 by rpki-client