Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/664d95df-9548-35d6-b07a-11d2d6df7962.roa
File:                     664d95df-9548-35d6-b07a-11d2d6df7962.roa (raw, json)
Hash identifier:          qBnyBNUVZvDkzW6znfrh5R/xJt4BQYRguP6Svd/Y8tA=
Subject key identifier:   69:8B:F4:64:9D:44:67:99:7B:B3:A5:72:57:A6:2C:82:DE:81:73:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858499F24BF50CE92D0268289AD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/664d95df-9548-35d6-b07a-11d2d6df7962.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     396549
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:bf:50:ce:92:d0:26:82:89:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=94eaadbe-9c14-4529-9cd8-5bf48bcea0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:52:9d:99:54:a6:e6:07:10:46:fe:7a:f2:
                    7a:54:b8:63:a1:ac:ee:fc:75:3b:7a:db:cd:63:fc:
                    4e:52:81:e0:91:4d:a9:f2:49:f6:6e:a2:02:d9:3a:
                    66:32:9a:a5:59:7b:51:9a:0f:f1:d6:2b:f6:2b:47:
                    08:ca:14:81:a2:58:a7:8b:57:93:1c:ed:06:e4:01:
                    a2:b9:f1:dd:c5:de:4b:22:73:b4:60:88:1e:b2:f2:
                    d9:1d:51:3a:dc:b8:90:62:bd:bf:74:d1:43:b6:d0:
                    9f:68:83:3b:a5:1c:14:ff:6b:13:4b:cc:dc:ac:37:
                    f9:01:14:4f:78:98:da:a1:78:cb:02:ee:8e:e8:9d:
                    50:21:37:66:90:91:d2:bc:9c:e8:98:03:1d:b7:8f:
                    8a:db:38:1e:bc:ff:4d:7a:14:3c:ac:74:2e:87:2a:
                    fc:bb:d9:c4:01:eb:63:0d:8c:19:e9:a4:4d:01:27:
                    ca:6c:18:50:48:f6:fe:22:93:06:f6:5e:6b:99:e7:
                    34:a9:24:9e:f4:64:cf:97:fe:48:4d:e1:1c:46:55:
                    bd:c8:ec:bd:af:9d:d0:bc:9a:3a:f4:1b:fc:50:57:
                    9d:8e:15:7b:d0:37:02:42:4c:9b:18:db:66:29:5a:
                    30:02:b8:27:f9:c2:47:d0:da:68:90:4a:ab:17:60:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8B:F4:64:9D:44:67:99:7B:B3:A5:72:57:A6:2C:82:DE:81:73:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/664d95df-9548-35d6-b07a-11d2d6df7962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:ce:f1:4a:47:49:62:82:e4:4b:4d:90:0e:2d:7b:10:ad:55:
         cb:0c:47:ac:48:d1:d2:e7:85:27:5c:9b:b2:d0:a8:ff:b8:e8:
         b7:77:e6:ab:95:da:8a:41:bd:2e:79:56:25:9b:b6:01:fd:80:
         4e:d7:67:b7:af:37:de:58:f4:6e:8d:09:8a:f1:5b:c2:0a:8d:
         f1:21:be:25:56:7c:f4:3f:02:c5:1d:57:59:7f:43:e7:87:3b:
         56:e1:3e:5a:d7:76:f6:ca:70:ae:a8:93:42:22:4e:1e:8b:d3:
         99:17:70:73:75:dc:c1:d0:99:0e:ad:0b:e0:57:a3:02:ad:b6:
         d1:03:ba:81:34:6a:a3:fd:95:69:43:a1:cb:b7:08:51:ef:e9:
         9d:25:54:41:70:8c:c4:34:27:e5:7f:93:53:ef:e3:aa:73:ac:
         82:2e:75:e4:44:4a:6f:b6:6f:56:ad:06:32:31:f0:bd:de:e6:
         e0:1e:16:6f:d3:c2:22:6a:4c:c8:d4:95:34:6d:98:7c:8d:16:
         c0:78:e7:97:35:1e:24:86:94:a2:15:72:09:89:25:7b:2d:1d:
         b3:0d:70:77:7c:ca:46:fb:26:75:48:96:d0:f0:3f:44:96:d0:
         41:a0:b1:3c:ae:a1:f1:9f:d7:85:63:15:ce:b5:8c:8d:ac:8e:
         0f:34:e8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:43:02 2025 by rpki-client