Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9090b9c-6100-3c8e-ab8c-f14cc9b2e488.roa
File:                     b9090b9c-6100-3c8e-ab8c-f14cc9b2e488.roa (raw, json)
Hash identifier:          beYS1XuYcP467cebmIFoIhxQJW9yua5u9uNW76TjHII=
Subject key identifier:   8C:2A:FA:D9:2F:34:4C:D5:2D:34:2B:6B:F3:40:8B:CD:A7:FD:44:39
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849998F4552253A60233ACD6660
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9090b9c-6100-3c8e-ab8c-f14cc9b2e488.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     397211
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:45:52:25:3a:60:23:3a:cd:66:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=5b6fd5f3-26d2-4393-87ed-58c99436eb36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:be:a9:9f:5b:00:97:1a:86:fa:cb:fe:cd:
                    d8:95:cf:f9:2d:42:c6:bd:32:d5:69:d6:19:49:06:
                    b2:7e:a7:9d:c6:21:1e:81:4b:63:22:99:56:86:6a:
                    87:fa:54:c7:1c:c1:7a:36:b9:f4:5f:44:f3:21:87:
                    3e:55:2b:8c:75:a9:d3:93:1a:a3:99:55:f6:e0:eb:
                    ca:de:86:bc:e8:78:ee:10:b7:62:f5:82:85:90:11:
                    c9:11:43:15:fd:c1:63:31:55:1d:27:3b:7f:19:89:
                    c7:2a:ad:37:68:b4:08:43:7e:5f:bd:e7:d5:e9:58:
                    f7:d6:ff:e2:92:61:45:62:b9:d5:37:dc:7e:b4:ab:
                    30:94:53:19:08:85:20:e5:e3:dd:f3:db:04:95:53:
                    8b:92:fa:4b:11:d7:13:eb:d1:0c:3e:36:2e:fa:ee:
                    10:16:f0:69:09:d2:46:46:16:72:df:fa:4c:e9:24:
                    60:2a:fd:e3:e4:49:b2:7c:f8:3b:31:00:65:80:13:
                    68:af:68:21:51:ba:27:72:a3:f3:51:f7:7a:67:a8:
                    47:d9:23:c1:c0:89:b4:47:bb:1e:ea:45:e7:38:fb:
                    86:10:75:89:3d:f0:3a:c6:a3:39:42:15:3f:0a:3a:
                    57:42:be:e7:c3:a2:c5:3d:99:03:a5:41:f7:ba:80:
                    52:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2A:FA:D9:2F:34:4C:D5:2D:34:2B:6B:F3:40:8B:CD:A7:FD:44:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9090b9c-6100-3c8e-ab8c-f14cc9b2e488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:97:b1:31:06:6c:ad:a6:80:89:00:d7:78:03:78:8c:15:7d:
         ec:40:62:48:ad:ce:89:05:47:4e:20:67:d4:8b:fc:c7:79:37:
         a6:b5:52:a4:bb:3a:15:e1:ed:3b:17:6f:43:14:d0:30:fd:8e:
         ec:18:3c:54:dd:ca:7e:95:da:4a:0c:ff:93:fe:98:28:ac:09:
         75:04:1c:a3:cc:1a:c3:5d:e3:05:e2:d5:b8:ff:88:f3:68:36:
         96:a4:20:46:15:03:1e:89:d4:ce:2f:4b:5b:90:a9:92:6c:7b:
         3f:82:c3:f6:c2:25:d4:e6:2b:d0:58:8b:5d:96:78:85:0d:9d:
         f1:27:f8:f3:13:f1:20:94:75:9e:ad:55:85:e4:c7:61:90:4a:
         ce:ed:d0:b0:11:8e:19:c6:ca:16:e8:1f:56:31:ae:8f:0d:e1:
         90:ee:bb:2a:a4:b7:64:e1:5e:d5:a8:9c:4f:74:2c:03:0a:e3:
         cb:3b:d7:2d:d8:63:17:61:12:7a:72:b3:24:15:b8:04:15:d8:
         8f:4b:c7:05:c5:1c:e4:75:a1:a5:17:cc:91:2c:10:f9:81:b4:
         a8:12:d6:fe:9a:e3:01:6b:cb:55:a4:f3:92:17:ee:75:89:01:
         b8:93:2a:8e:8f:87:a3:ff:44:3c:ec:a1:dd:64:76:8b:5f:f7:
         72:6a:bb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:06:58 2025 by rpki-client