Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7970454c-a82b-39d6-bf49-cb7b6d55e87d.roa
File:                     7970454c-a82b-39d6-bf49-cb7b6d55e87d.roa (raw, json)
Hash identifier:          JaoK4h7aqv7BQu4c+JP4Jj44HbncOk9rdYMwWECIejk=
Subject key identifier:   E7:6E:D5:5C:50:FD:FD:15:77:4C:89:2D:03:B9:E0:2E:31:7F:DF:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498B99E2458F97750DA6BB8060
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7970454c-a82b-39d6-bf49-cb7b6d55e87d.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     396581
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:e2:45:8f:97:75:0d:a6:bb:80:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=84cda944-1a31-4c14-a1aa-890fb790088e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:75:4e:2b:19:fe:54:9b:f9:99:75:36:ae:52:
                    28:1c:77:4f:5a:4a:69:3e:96:c4:a4:e6:19:33:3b:
                    e3:23:3b:f6:a1:fe:78:0a:96:23:57:8c:b5:5b:79:
                    30:18:84:86:b6:12:2c:d7:f2:43:8d:66:a1:c0:fa:
                    05:bf:2d:bf:09:c3:fe:77:a7:2c:4a:ba:f0:06:5a:
                    c2:f4:db:2b:74:9e:db:99:26:ef:6e:a1:d1:11:8d:
                    9b:08:41:9a:db:12:ed:40:b1:ae:1f:99:5a:5f:e9:
                    c9:91:67:90:6b:0d:8e:c2:8b:1f:90:06:7b:95:e0:
                    33:fd:45:e6:6e:8b:37:7e:b9:e1:ca:53:31:08:9b:
                    44:ae:49:7f:ac:a7:44:03:70:98:e2:61:0e:22:fd:
                    dc:b0:13:dd:29:9f:31:98:62:44:cc:3b:7e:1a:85:
                    1c:2d:4d:47:da:33:d1:35:55:5b:e6:54:c4:45:da:
                    58:32:26:49:53:61:29:f6:46:1a:bb:fa:49:7b:5b:
                    87:31:b6:4e:52:4b:69:a1:d2:71:e2:2f:e3:da:2c:
                    e3:c7:44:b0:b7:26:73:21:a3:e7:7d:db:5b:bb:83:
                    6b:a8:d1:86:38:c5:e1:fb:c6:b5:de:de:00:c2:41:
                    80:6e:90:fb:cf:c3:a8:52:14:c3:08:88:97:5b:d9:
                    83:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6E:D5:5C:50:FD:FD:15:77:4C:89:2D:03:B9:E0:2E:31:7F:DF:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7970454c-a82b-39d6-bf49-cb7b6d55e87d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ae:8d:49:44:cf:8e:42:6f:e3:9c:da:20:75:6d:6c:0e:a8:
         57:04:69:4f:9c:ca:80:5b:82:a4:53:99:3c:67:8c:c3:14:37:
         54:41:0a:a2:46:0f:f9:a0:5c:f8:b7:a7:51:2e:ef:0d:06:04:
         20:7b:35:27:71:a0:93:6a:fa:57:f2:a0:95:eb:0e:69:6c:3d:
         34:87:32:1a:6a:cf:99:77:a8:b6:a6:0b:78:d3:7f:7f:63:c6:
         b8:a1:07:9b:1a:53:36:18:4b:d9:50:b2:f8:57:0d:28:dc:94:
         a0:59:f1:a3:5c:0e:0e:92:d5:65:d9:c0:24:84:76:62:f0:2c:
         8a:90:a5:00:38:e3:cd:bd:06:b0:6d:ef:3c:ed:16:7c:44:c6:
         63:c1:e1:73:7b:50:fc:ca:42:ee:24:65:0d:c0:12:54:4e:79:
         9f:76:5c:e8:25:6e:60:21:25:5a:59:9e:93:d1:96:4f:7a:ee:
         5f:7c:3a:b6:9e:31:09:d1:4f:ed:06:ea:df:15:74:f3:dc:65:
         30:88:71:66:c0:10:a9:28:f4:58:8d:31:f9:88:83:a7:0f:f6:
         28:2b:48:d6:28:dd:17:24:92:aa:88:98:5e:dd:76:25:a9:ea:
         b6:86:6b:86:09:e9:c5:ee:04:3b:0d:0b:48:9b:a4:79:d2:db:
         61:c8:fe:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:09:39 2025 by rpki-client