Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79188d52-06c8-3f9b-94f4-c88040307fea.roa
File:                     79188d52-06c8-3f9b-94f4-c88040307fea.roa (raw, json)
Hash identifier:          vYWi3E3BXWFq9ALIgRpiE/nzDWGoUzVakAqgafDTqgs=
Subject key identifier:   AA:A3:21:A6:03:48:24:AC:32:72:3A:D2:99:39:DB:EF:16:A0:5F:A3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849998F48CEFCA6816F1D9AF3A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79188d52-06c8-3f9b-94f4-c88040307fea.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     396611
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:48:ce:fc:a6:81:6f:1d:9a:f3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=53a26ce9-20b1-408a-81e1-9c67553daf90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:19:27:c6:56:3f:95:c0:c9:fd:77:70:0f:ff:
                    42:cb:e7:65:ae:1d:6c:ad:b4:87:db:f2:c2:c0:3f:
                    03:6b:db:7e:77:3b:c2:8f:f8:e9:9d:5c:2f:62:c2:
                    d9:49:39:ba:87:02:e1:f3:76:1a:29:f7:6a:da:7b:
                    2c:60:2a:2f:c4:f3:8a:e7:a7:cc:94:02:8b:9b:16:
                    3d:fa:3c:ce:e3:27:51:35:2b:f1:f7:40:b8:22:f0:
                    26:f6:fd:7c:fc:23:32:4c:68:c4:6b:97:b0:0e:b5:
                    e1:bd:90:79:d9:88:51:88:74:ce:d6:3a:42:eb:ad:
                    89:60:9b:00:c5:8a:48:84:59:8d:47:6e:58:2a:e8:
                    10:81:aa:54:6d:90:47:8f:d9:f8:13:36:87:ac:a9:
                    c7:15:44:4d:3a:ab:f5:ea:0d:a4:be:25:c7:61:b7:
                    03:be:cf:5f:8c:b9:8a:58:52:d1:2b:77:d0:ca:bf:
                    75:f6:71:c8:4b:6f:dd:51:59:a0:f3:a0:95:a7:69:
                    c1:15:0b:d7:b4:aa:55:e7:1f:c5:fd:4a:ef:83:09:
                    b6:f1:3a:11:f3:4c:67:fa:31:dd:bd:e3:98:99:d1:
                    47:5f:eb:4a:bd:22:91:56:0d:ae:54:5d:68:ed:47:
                    83:38:d8:7a:c7:31:f0:d6:6c:2a:81:7a:6e:ec:aa:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A3:21:A6:03:48:24:AC:32:72:3A:D2:99:39:DB:EF:16:A0:5F:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79188d52-06c8-3f9b-94f4-c88040307fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:38:ed:33:59:cb:39:81:d2:e4:01:18:fa:5e:00:7e:3e:81:
         67:7b:0a:6d:94:f5:c7:9b:15:a8:81:10:be:13:57:29:61:16:
         8b:f5:16:87:d1:71:64:40:15:49:38:dc:78:8c:9c:74:2a:9d:
         4c:7f:9b:23:a2:3d:35:3b:1a:6e:62:f0:97:83:f0:b8:6c:98:
         74:31:02:52:00:a1:e8:1f:80:5d:1b:51:14:67:a8:8d:5f:e9:
         c1:76:1b:42:da:de:1c:60:fb:f4:90:78:3f:fe:fd:85:79:4c:
         97:90:a2:a8:38:50:ee:71:ad:e0:f3:e7:98:5a:ed:87:bf:b9:
         4e:a0:68:40:7c:7b:ff:26:37:f6:24:ba:a7:52:9d:a4:82:cf:
         69:fd:26:3a:07:02:96:04:65:c9:a0:d6:0b:e5:df:5d:a5:31:
         9e:da:99:30:19:d7:92:c1:36:08:6d:04:4f:a1:33:e5:9f:19:
         1b:79:3d:42:e5:0d:ef:80:ba:66:5e:77:8d:b2:34:ce:04:42:
         a5:68:1c:99:83:5e:e3:f9:c4:f7:da:9d:5c:6b:47:89:90:12:
         ac:5c:d9:6e:a1:fd:cd:89:70:b9:63:a3:b2:49:f0:82:94:5f:
         de:e3:46:02:a2:ee:69:34:e0:a9:f6:cc:29:2d:fc:67:cd:15:
         1d:32:95:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:07:00 2025 by rpki-client