Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0522cb3-8de5-32fc-9d1b-4d24e991ed36.roa
File:                     a0522cb3-8de5-32fc-9d1b-4d24e991ed36.roa (raw, json)
Hash identifier:          Un9z3nLCsAwaxpBHDRRBlHAMA9wYJ42ETbR8mICkkL4=
Subject key identifier:   52:26:02:AD:47:FB:C2:ED:8F:EF:35:CA:FC:A4:20:50:7E:6C:2C:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849998F4533CA2581BBF9B46BE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0522cb3-8de5-32fc-9d1b-4d24e991ed36.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     36616
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:45:33:ca:25:81:bb:f9:b4:6b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=f86234e0-6a38-480b-800f-971d52f4a363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9a:85:04:3e:1e:c9:3d:ad:93:b8:15:a5:a4:
                    e2:46:91:1c:1b:e8:dc:67:99:27:c8:28:d8:b1:70:
                    fa:68:4e:db:b2:0e:5e:aa:a2:f3:08:11:04:42:e6:
                    b9:f2:14:88:d8:a5:13:6b:d0:53:2b:f6:01:b3:0a:
                    45:c8:0e:24:22:3d:a9:22:6b:9e:c6:a2:36:8c:a9:
                    ca:1e:9c:48:0d:50:f4:04:26:44:2f:62:e7:4f:39:
                    63:b7:3d:09:fa:30:cb:9b:08:4a:b7:c5:6d:4d:23:
                    f9:c1:2e:14:3c:1a:12:82:41:0e:f8:d8:46:95:81:
                    c3:6c:f9:64:e9:eb:82:d1:84:3e:08:db:e2:a5:d4:
                    d2:aa:24:2e:34:4c:1c:9c:bb:c2:9a:cb:d4:d5:41:
                    6c:11:4f:eb:0d:db:ab:80:0c:cb:ec:45:8a:fc:74:
                    94:c1:48:89:03:8c:bd:39:91:a0:91:23:8e:3c:eb:
                    37:e3:59:d0:e6:f0:68:92:5c:b6:ee:42:49:be:7a:
                    90:80:ab:e1:29:3f:4d:31:6a:e3:32:a2:75:98:07:
                    d1:37:cd:e7:df:94:3e:24:d7:d5:3b:d5:a9:4c:cb:
                    47:93:20:d8:2b:2a:83:45:8c:11:69:4f:5e:4e:cf:
                    fe:88:3f:f5:05:08:25:1f:24:6a:56:97:18:f7:4b:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:26:02:AD:47:FB:C2:ED:8F:EF:35:CA:FC:A4:20:50:7E:6C:2C:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0522cb3-8de5-32fc-9d1b-4d24e991ed36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:d0:12:e1:ca:c1:52:4e:d6:ea:36:76:4f:ac:24:26:54:8d:
         4c:8d:97:64:2e:59:e2:95:2f:39:e2:c1:02:93:e4:9d:1e:3b:
         ca:10:24:99:b6:7d:ed:87:af:e6:e0:1a:7c:16:64:37:93:e9:
         29:5f:f1:d9:e1:4c:8a:8a:e1:c1:1d:33:ec:f7:d4:73:28:6f:
         dc:ef:4e:74:a6:b7:80:e5:b8:e5:13:fc:f9:45:79:93:57:d6:
         6e:9c:d7:ba:0d:30:e2:27:49:b1:f7:a7:71:55:c5:80:dc:06:
         5b:27:33:c2:8f:28:cd:d8:8f:a3:f5:4e:e3:20:2e:b8:4c:44:
         8f:63:4c:5e:c0:dd:76:21:60:4b:a1:04:ac:26:b1:c1:17:71:
         b0:f5:d4:02:33:13:d9:a2:ce:a4:c9:6a:cb:1b:b7:23:0c:6f:
         63:79:f1:f7:c8:a8:91:dd:99:75:a7:1c:60:6c:37:ef:82:d3:
         86:69:e8:9e:3a:b1:f5:91:00:71:78:fb:84:ee:c7:0b:7f:5e:
         21:56:b1:de:1f:8b:64:a4:06:47:c6:d1:23:dd:12:03:0c:5e:
         47:63:79:e3:41:d6:ca:98:1e:36:ac:fb:df:91:67:36:a0:59:
         72:03:1b:6f:15:37:ac:fb:c2:f9:96:6e:5e:e3:72:d7:5a:c0:
         88:a7:5d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:26:49 2025 by rpki-client