Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53105dde-78ae-3e20-a801-39cc5b96d94f.roa
File:                     53105dde-78ae-3e20-a801-39cc5b96d94f.roa (raw, json)
Hash identifier:          a3XxmEl1zvyCSkB2obxstatvpUlZxwPgtXWQXVW/6iA=
Subject key identifier:   8C:BD:B3:41:A6:69:A5:5B:60:5C:6C:3E:4C:57:B8:A7:A5:68:42:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C3668B0D52FDEC5637C900E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53105dde-78ae-3e20-a801-39cc5b96d94f.roa
Signing time:             Tue 06 May 2025 12:43:04 +0000
ROA not before:           Tue 06 May 2025 12:43:04 +0000
ROA not after:            Mon 04 Aug 2025 12:43:04 +0000
asID:                     397193
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:66:8b:0d:52:fd:ec:56:37:c9:00:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  6 12:43:04 2025 GMT
            Not After : Aug  4 12:43:04 2025 GMT
        Subject: CN=a651372a-b38a-448b-8cd9-d62de7e0ec89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1d:db:1d:0e:66:c7:9c:93:30:70:4c:0c:6f:
                    2c:23:f9:02:1d:ee:75:cd:c4:35:f5:fe:f1:ee:ae:
                    5e:78:50:5c:98:1c:64:c9:b7:24:ef:f5:03:db:bf:
                    0f:3c:1e:3f:e9:ff:6d:f5:64:aa:4a:94:4a:ed:e4:
                    73:28:17:d4:3d:d8:b1:fa:36:7f:23:0f:9f:e1:88:
                    a6:9a:5c:c1:58:96:ff:aa:5e:5b:4a:18:48:54:8f:
                    c8:14:6f:d3:ee:b1:0a:48:87:50:bb:2c:b8:c3:25:
                    c3:13:89:34:5f:b1:14:34:de:ab:bc:64:33:3e:7e:
                    db:fa:41:ae:55:74:d6:9e:1d:70:d9:e8:35:6f:b2:
                    05:79:23:7c:58:cb:5f:f8:2f:4c:ae:e6:e6:59:9e:
                    c9:e4:68:34:d8:35:cd:6a:85:f2:09:91:9c:47:b2:
                    38:26:27:a4:1d:31:d3:fe:84:f9:4b:47:b7:58:66:
                    98:2d:7f:75:17:9f:9c:d0:0a:c4:8a:fc:c0:df:1a:
                    d5:81:3a:48:a5:36:de:bb:37:c5:89:62:98:4e:d2:
                    dc:b9:b0:4d:0b:99:2f:da:a0:c6:8d:cb:c9:c3:a8:
                    bb:49:e3:c7:99:e8:ce:4a:a6:ee:8b:e6:33:00:64:
                    6b:40:3e:fd:0b:51:b3:e8:a7:a2:26:1f:f3:50:52:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BD:B3:41:A6:69:A5:5B:60:5C:6C:3E:4C:57:B8:A7:A5:68:42:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53105dde-78ae-3e20-a801-39cc5b96d94f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:0b:03:2d:e8:6a:0b:04:cb:02:86:28:a6:f2:54:1d:ca:9d:
         88:cf:64:f5:c9:0f:fa:fe:43:e1:d8:9b:76:15:84:e0:d2:5c:
         10:a1:6b:76:73:08:fc:ef:42:92:2e:38:1c:3b:9b:e1:9a:86:
         d2:16:00:95:b4:d7:0d:5b:77:9b:60:39:e2:52:ac:bd:e5:64:
         5b:2a:36:33:4e:f9:ec:56:79:1f:9f:fb:09:10:f4:4c:88:5b:
         79:d7:4a:d7:7d:1e:69:cd:82:af:bb:99:38:2b:e4:c5:ed:c7:
         c3:3b:10:86:8f:6f:ea:bb:37:9d:69:b4:7b:c6:ae:54:f8:96:
         75:ee:fb:4f:3a:88:41:62:97:f1:35:94:32:a0:c0:e6:60:01:
         b9:6f:94:44:3a:d4:6c:32:9c:4d:23:2e:91:4e:1f:e5:a0:3a:
         5d:6a:9b:10:be:c0:ba:cb:8f:6c:21:ed:7e:44:d2:f8:06:24:
         36:42:a1:90:cf:43:c8:a6:55:25:a9:1e:0e:7d:31:e6:93:25:
         74:39:a6:f4:ef:55:6f:40:96:0a:52:41:c1:15:4e:fe:85:7e:
         39:f0:99:4e:3a:26:9b:70:02:71:a3:fb:81:0e:f2:47:38:5c:
         64:71:33:0f:2b:0f:de:a7:c2:7f:9d:cb:be:4a:e9:2e:f9:a9:
         81:5c:f1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:58:23 2025 by rpki-client