Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26cac1c1-1aa0-30c5-9ee2-2986df58e6c3.roa
File:                     26cac1c1-1aa0-30c5-9ee2-2986df58e6c3.roa (raw, json)
Hash identifier:          4vPgJD3hD9vpIZIiIRLL5JVumyiBxwfzlTDSYnuUVs0=
Subject key identifier:   65:04:8A:F6:89:04:D4:6C:26:F4:80:29:C2:0A:EF:28:1A:E0:91:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498B99DE3DF0A56D012D502080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26cac1c1-1aa0-30c5-9ee2-2986df58e6c3.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     396565
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:de:3d:f0:a5:6d:01:2d:50:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=317d188d-a818-41c1-880b-78d2a3717344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c8:4c:52:74:d6:8c:da:74:2a:97:bf:b1:54:
                    9c:71:31:b1:07:a3:43:2b:f6:28:a0:c8:ef:db:13:
                    5f:3c:2f:49:0b:4c:54:d9:69:50:26:6d:fb:93:79:
                    b3:81:7f:ce:60:40:61:5f:fa:ed:73:63:6a:64:b8:
                    c6:14:fd:20:31:21:d5:76:f4:3b:f1:cb:e2:b3:4d:
                    49:f4:0d:e6:8d:35:f5:bd:39:41:6e:4b:05:98:10:
                    ae:45:bd:1b:ed:88:d1:d2:56:55:bb:c5:54:02:43:
                    7d:3c:55:fc:f6:49:81:43:03:b7:c3:17:8d:32:96:
                    1b:c1:bc:99:c0:38:68:ba:9e:f2:e5:61:b3:23:44:
                    e0:23:1d:e4:73:3e:63:cd:84:5c:64:97:aa:7b:8f:
                    56:e9:d9:ff:21:50:8b:17:d4:95:a2:ee:3c:81:6c:
                    b5:6a:fa:b9:9d:a5:e6:bc:a3:5c:5e:37:51:3d:c9:
                    33:aa:30:b7:2f:97:6e:ab:a7:ed:03:13:88:cf:e2:
                    0b:32:b3:0a:12:65:74:3d:4c:ff:b0:30:bc:79:82:
                    d1:85:91:e1:77:84:1f:4d:66:f3:e7:a1:cf:c3:74:
                    da:7c:78:21:74:3d:19:54:3a:8c:13:60:aa:f9:69:
                    c7:a3:11:95:7b:7a:fa:26:a9:01:fe:cf:24:a5:da:
                    40:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:04:8A:F6:89:04:D4:6C:26:F4:80:29:C2:0A:EF:28:1A:E0:91:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26cac1c1-1aa0-30c5-9ee2-2986df58e6c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:11:21:2c:94:e2:9d:18:2d:17:ef:4f:16:7a:9e:9f:59:0d:
         f8:65:ea:ef:94:cb:eb:04:42:3b:22:d6:27:70:1b:4e:5a:61:
         4f:59:74:68:f7:07:f7:0f:a0:00:87:54:c9:f4:5d:c0:df:a7:
         6a:1d:62:81:0f:c3:a5:d1:12:9e:56:7a:d0:47:3d:94:f2:98:
         bc:39:d8:ec:d6:4d:dd:c8:99:8a:ed:b2:28:44:72:f0:ef:f2:
         65:e3:37:81:8e:b9:85:e2:2a:c9:2d:9f:02:85:e2:72:86:b9:
         e6:cc:87:9b:8a:12:a0:e8:71:f7:b9:e9:91:a1:f9:fc:82:9f:
         79:29:87:b7:50:4d:43:2d:5f:d3:9c:83:30:48:93:3f:fb:ef:
         f1:d2:3e:a4:6e:2e:01:5d:bc:d1:6d:63:55:05:19:b1:0d:e7:
         d6:20:10:ff:0f:94:8c:b4:b7:cb:4d:e5:3a:53:e6:4a:5b:15:
         1e:ab:ef:c4:f4:f1:99:d0:32:d1:5b:1e:c8:e0:6b:03:b5:41:
         5a:97:e8:10:ad:07:49:b5:2d:ff:bd:d8:c5:09:09:44:ad:41:
         f9:96:e7:65:a1:46:19:73:21:37:bb:20:dc:84:dc:7c:d3:4a:
         84:7f:78:35:8c:4c:57:ff:c4:69:e2:09:6b:67:2f:13:a7:9c:
         41:8e:d0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:29:06 2025 by rpki-client