Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a2716d5-48f3-344f-b4cd-81afa10d7d02.roa
File:                     8a2716d5-48f3-344f-b4cd-81afa10d7d02.roa (raw, json)
Hash identifier:          s+ZhBs7qpTB2HN0g8TXIo4lAk8ylH4svTyaoqYEDoJY=
Subject key identifier:   DC:F4:8B:47:FA:0B:50:F3:E0:E5:A2:1E:17:7E:79:4C:71:BB:8C:2A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498B99DE9F82B7356B95920C18
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a2716d5-48f3-344f-b4cd-81afa10d7d02.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     396576
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:de:9f:82:b7:35:6b:95:92:0c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=5b668291-0978-4090-9598-d6bcfefccfa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:63:0b:52:3e:3e:17:54:6b:21:b2:06:9b:07:
                    07:30:3b:48:e0:cc:b2:bc:af:16:56:7c:c5:0a:5a:
                    80:2f:ca:68:33:c5:a0:6b:8c:50:c0:63:cc:c4:f0:
                    4b:a1:e0:68:e0:39:0c:53:09:d3:13:59:10:ca:47:
                    72:e1:96:65:c0:ef:71:ae:32:3f:f1:05:de:ea:f6:
                    e4:1a:d8:21:ef:e2:fa:f2:b2:12:5b:e7:26:0c:c6:
                    11:1e:89:23:68:e6:aa:fb:3f:fb:53:4f:61:7c:cc:
                    e6:0f:7f:84:97:a0:d6:d9:18:28:e4:cd:9c:0b:d2:
                    3e:e5:1b:3f:52:ca:af:0c:5a:fa:d3:e7:32:98:42:
                    d9:51:08:6c:6c:be:8f:17:78:4a:d8:4c:d5:77:08:
                    08:a4:ca:8a:5f:ea:88:1e:45:4f:02:f6:5b:15:b7:
                    95:eb:ec:88:6a:f3:07:48:ba:33:42:e6:c6:33:d9:
                    bb:5f:0a:49:fe:51:14:75:8a:f8:7b:cf:d6:2b:e0:
                    b2:49:cb:1b:3e:57:88:3e:0b:7e:e9:40:29:78:b7:
                    47:d8:04:03:54:49:2c:d5:3d:cb:75:fe:96:87:cb:
                    11:38:8f:ee:fe:b0:50:df:a8:5e:19:f7:45:76:40:
                    36:2b:60:ef:16:df:26:92:78:a0:94:82:fd:49:bf:
                    01:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F4:8B:47:FA:0B:50:F3:E0:E5:A2:1E:17:7E:79:4C:71:BB:8C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a2716d5-48f3-344f-b4cd-81afa10d7d02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:58:cc:1a:0f:9c:42:20:6f:a5:62:ae:b4:bb:f3:f6:e9:4b:
         00:77:01:9f:ec:e2:4e:50:75:84:5e:b1:5f:d9:2f:25:59:c6:
         e7:52:5b:8c:c1:cb:d3:24:0c:b7:cb:b1:85:c7:d0:15:6a:41:
         3e:b1:72:4b:65:08:83:5b:6c:f1:cf:eb:11:b7:e2:36:b8:34:
         56:c2:92:a0:98:81:78:8e:67:68:fd:49:94:b2:c7:bb:c7:54:
         ee:58:a3:97:13:80:23:fb:20:c0:17:dd:ab:c7:92:04:84:ed:
         67:10:3e:95:a1:df:be:a0:65:15:c5:f3:33:08:68:8f:29:33:
         35:a5:09:75:9c:80:17:cf:ae:f6:94:54:54:e2:c1:d1:70:85:
         70:6d:51:ba:bf:66:4f:6a:9c:b6:83:0c:69:65:69:4a:74:b2:
         e7:a7:db:01:cb:99:b3:d8:d6:e9:81:36:9e:e3:42:a5:94:d9:
         52:f1:14:dd:c6:05:8e:5a:1d:2c:a5:64:9f:ab:88:dd:9f:ca:
         24:43:87:92:e6:70:84:0d:5d:ba:22:2f:50:c2:75:87:2b:28:
         b3:27:3f:47:37:3c:98:ae:53:ea:94:0a:5b:8e:f4:42:5b:b6:
         1c:ea:40:14:b9:0e:a6:02:a3:a9:d8:3e:00:fb:9e:ec:94:d3:
         da:01:8a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:39:11 2025 by rpki-client