Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ed303ab-8b81-3ddd-954b-abd15ac35a51.roa
File:                     0ed303ab-8b81-3ddd-954b-abd15ac35a51.roa (raw, json)
Hash identifier:          yLdmZ/UlhKtZcJKrSl9zOEVD0A0BLEe1kE0zd1eey18=
Subject key identifier:   45:F8:9F:8B:38:AE:A4:A5:C1:84:FC:1E:CD:4D:BC:55:EC:2F:05:4E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498B99DB5F65B8968BA93A4900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ed303ab-8b81-3ddd-954b-abd15ac35a51.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     396569
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:db:5f:65:b8:96:8b:a9:3a:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=e47a0e70-0c9b-4eac-82a3-be1fc9948556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:19:12:eb:10:7e:4b:29:ee:57:3c:aa:04:
                    cc:d0:66:59:00:22:18:4b:74:03:53:1d:c0:59:8c:
                    20:39:09:e6:06:be:1a:69:d9:96:cc:00:c6:fb:ad:
                    b3:25:e2:65:7e:f7:99:41:a0:35:67:73:b6:fc:af:
                    04:18:8d:c0:7c:1a:cc:94:04:ce:7b:db:ec:30:0c:
                    e5:51:65:6b:1f:90:32:a4:ef:61:d4:b4:97:e1:50:
                    e7:f9:7b:b5:0d:42:6d:0b:3b:20:9c:c9:3d:58:f0:
                    79:26:29:2f:ad:c6:ee:43:d6:b8:b4:c4:93:10:a7:
                    0e:bd:3c:be:3c:f5:33:5c:3a:86:4d:46:15:fe:96:
                    02:08:29:aa:c2:65:ac:0d:ec:b1:78:4e:00:21:a6:
                    99:1a:d0:d3:f1:26:b6:52:e8:1c:3c:c0:58:7c:62:
                    58:fc:55:b6:b3:d8:8b:7d:b3:b1:25:74:8f:b3:55:
                    35:6e:b5:d3:89:69:1f:71:ea:ae:20:04:5b:85:3e:
                    37:d9:0e:d6:52:d3:e5:a9:7b:8a:d1:88:14:16:9d:
                    78:81:0b:79:cc:66:f0:bb:66:67:57:77:16:ea:72:
                    89:34:39:85:f6:64:6d:ad:34:d0:f9:b4:f9:49:38:
                    5a:ea:62:f2:a7:fc:30:40:e3:dc:1d:88:1c:bd:94:
                    7c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F8:9F:8B:38:AE:A4:A5:C1:84:FC:1E:CD:4D:BC:55:EC:2F:05:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ed303ab-8b81-3ddd-954b-abd15ac35a51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:8f:8e:e4:a2:3e:8d:92:a9:d9:49:e3:10:af:89:24:3f:a4:
         fb:57:19:13:32:25:68:50:40:f5:74:82:a2:57:a1:27:ae:55:
         db:c7:d5:6b:e9:aa:88:dc:bd:12:d6:93:bd:a6:c5:f5:ca:f4:
         07:1e:b9:7e:b7:b7:72:f5:33:06:4a:32:f1:69:c0:ec:b3:45:
         67:0a:b7:0b:6a:ce:83:b5:cf:26:f6:5f:94:25:05:d1:23:a1:
         6e:3b:1b:49:43:59:0a:ec:d3:99:dd:94:c9:2c:1a:37:09:05:
         6e:87:cb:7c:1c:ff:30:00:f9:6d:5d:95:17:ec:92:94:c2:14:
         1b:55:17:e9:c9:c6:48:8d:3d:15:17:b4:58:d4:b1:a7:69:c8:
         12:6f:a7:2e:ba:d4:ab:42:62:01:0c:00:87:99:52:5a:f8:ba:
         ad:1f:1d:32:f3:6c:e6:c0:db:be:02:e0:ea:d0:02:40:90:bb:
         62:c5:53:f8:ea:7b:94:9c:8f:b0:61:27:b5:3d:31:64:22:72:
         ce:f0:81:6c:8a:c7:9b:23:ca:5b:97:45:43:0a:6e:85:95:8e:
         cd:e7:ec:57:5e:42:48:c8:ee:7b:f6:49:25:36:67:c9:b1:4c:
         d0:df:1e:6f:51:3c:bc:2d:2e:ba:67:3e:c8:23:f8:6a:8d:53:
         d2:75:92:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:12:57 2025 by rpki-client