Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59823c05-d382-3e6c-95b8-ef0b2af67ea5.roa
File:                     59823c05-d382-3e6c-95b8-ef0b2af67ea5.roa (raw, json)
Hash identifier:          djtBXwn9ZUFJCl1KawJqkxWKhBZwX2x4YiAf6JGPMP0=
Subject key identifier:   EF:21:52:E8:90:58:81:A3:40:FC:BD:FA:3F:3D:23:35:E3:13:9E:1C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498B99E05F4B9B6B574C30E1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59823c05-d382-3e6c-95b8-ef0b2af67ea5.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     396564
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:e0:5f:4b:9b:6b:57:4c:30:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=8927bfa6-642a-4fc1-9635-8e35723c8c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:fd:4c:76:22:f9:3d:1d:f3:ca:34:28:33:
                    d7:ac:88:3e:86:d1:4b:e3:d5:7f:13:47:b1:12:05:
                    c0:74:8f:c4:3e:23:87:7e:36:e6:f1:43:44:46:b6:
                    d5:83:25:d3:7b:59:64:ff:5b:3a:d8:a4:f5:77:c0:
                    8b:f3:2d:1a:f4:87:b2:ab:e4:a1:61:32:49:5f:02:
                    e8:20:3a:b9:7d:af:27:4c:05:65:ba:e4:27:be:aa:
                    af:7b:84:d8:ec:99:f0:9c:4e:d9:f0:d9:82:e1:a1:
                    69:9b:fb:51:d1:20:bc:88:ae:0a:13:91:fb:ea:74:
                    1e:81:fd:b8:44:e8:6a:f7:28:7a:aa:be:ad:87:2a:
                    18:ae:5e:14:0f:4e:c6:6f:89:9a:9a:c1:dd:46:c6:
                    aa:05:28:e2:ae:60:4e:4a:77:a5:94:d5:42:35:d2:
                    2a:bd:99:f3:fc:a8:ab:f1:0a:ac:3b:f9:8e:70:8e:
                    55:a8:4d:91:50:60:50:50:c1:d3:57:88:81:fa:b8:
                    92:1e:63:98:ce:52:92:0b:aa:c1:e6:3e:eb:3d:87:
                    37:f3:31:28:e9:99:72:ae:24:56:98:bb:12:9b:af:
                    e7:3a:00:3b:59:6d:31:80:72:75:2b:9d:d5:d9:6d:
                    b5:84:55:38:7c:ca:0e:ca:b0:a9:c3:61:1e:4f:6c:
                    f8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:21:52:E8:90:58:81:A3:40:FC:BD:FA:3F:3D:23:35:E3:13:9E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59823c05-d382-3e6c-95b8-ef0b2af67ea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:fe:b8:04:43:fa:5c:52:42:71:ae:84:4d:f4:b4:29:5a:f7:
         92:f1:f5:e8:21:c5:76:f4:bf:ca:e5:91:3e:49:18:52:a3:f9:
         e5:67:9a:28:b2:be:3c:7e:a8:19:08:e7:ad:77:65:86:28:f8:
         56:a1:9c:d4:79:c3:1a:b6:e9:88:db:2c:fc:34:9d:80:0e:7e:
         2b:6d:1d:ea:b5:ef:ed:2c:47:b6:83:bd:cb:5d:b5:47:20:cd:
         d3:31:bc:cd:ff:e7:e4:4b:e2:d7:93:ec:a5:60:11:1f:c7:1e:
         07:a5:c7:1e:1b:3b:14:d5:e3:e0:8a:8a:ef:98:71:5d:e6:10:
         a6:27:63:eb:8c:f9:1b:ba:bc:02:e3:ac:b9:a3:56:2f:7f:74:
         f0:d7:f3:95:7c:49:22:88:63:83:1a:f8:16:2d:23:1d:e9:98:
         cf:61:48:c8:bf:7c:c2:30:a3:a9:2a:89:22:5c:fe:b6:46:3a:
         fd:5a:24:21:db:c2:84:ab:d8:03:47:f2:b3:8c:46:39:d3:f5:
         30:b6:49:8b:8b:a1:54:8a:6f:b1:2a:93:8e:53:aa:7e:76:0e:
         1b:22:60:fe:9f:69:b1:0b:90:d9:a0:40:09:c4:d3:b5:b3:7e:
         65:88:b6:e9:8f:a6:a2:d6:88:99:81:f2:e0:d2:7d:ed:a5:ad:
         95:cb:5f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:18:29 2025 by rpki-client