Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc45f007-47d6-3a70-9c07-00ec2b37f8aa.roa
File:                     cc45f007-47d6-3a70-9c07-00ec2b37f8aa.roa (raw, json)
Hash identifier:          jCDmKVdASFpSNqO3ESXtMJS483Adyodd5jLjHGt6Z8g=
Subject key identifier:   66:37:52:F3:E4:89:09:E7:A5:D3:0A:3E:8E:A8:30:98:D6:E9:FC:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849998F47FCABF689F56B88D180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc45f007-47d6-3a70-9c07-00ec2b37f8aa.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     397206
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:47:fc:ab:f6:89:f5:6b:88:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=e54c35aa-1cc0-4a1c-9d52-6e3bc4d2081b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1c:69:1e:8d:da:e0:ef:6a:85:77:cd:1b:1d:
                    64:73:d1:6f:d8:3e:41:c3:04:ec:a0:b7:c8:c7:7a:
                    43:a5:fa:dc:a0:4a:46:9e:bc:57:97:2c:f5:8b:85:
                    9a:0c:95:66:24:66:6a:fe:b8:07:38:e4:0b:da:79:
                    38:52:36:20:cf:34:35:75:d4:ca:34:1a:85:02:cb:
                    c5:2c:f1:3b:13:95:3d:9c:3a:3b:19:ca:97:15:57:
                    b3:08:52:f2:a3:ba:b3:b7:48:22:11:24:df:7a:59:
                    80:86:f2:b1:3f:da:61:99:46:68:1c:88:46:ea:a0:
                    2c:bb:c2:1d:4d:47:24:65:3e:ce:f9:7c:b2:5b:fc:
                    b3:62:bd:ea:8c:c7:3f:c3:e9:70:35:35:0c:32:1e:
                    52:ac:a0:1c:42:7e:02:c2:a5:b8:65:58:f0:a9:64:
                    b5:15:90:48:56:95:16:30:7b:24:99:5b:98:99:02:
                    b4:b3:6e:67:6c:8c:61:b8:9a:cb:37:9a:70:3a:5a:
                    01:ba:fa:b0:fb:44:e0:97:7f:d0:7b:2f:c0:71:0d:
                    17:07:24:44:64:59:a7:0f:52:53:88:d3:83:1f:00:
                    15:ee:ca:c2:f2:14:fd:03:bf:6e:29:5e:c4:46:9e:
                    be:22:31:8c:9c:87:76:2f:62:d3:b3:7d:fa:b9:6f:
                    9f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:37:52:F3:E4:89:09:E7:A5:D3:0A:3E:8E:A8:30:98:D6:E9:FC:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc45f007-47d6-3a70-9c07-00ec2b37f8aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:3c:4d:6a:02:b9:e3:84:b7:8e:17:50:a4:e3:eb:62:a4:0c:
         6b:8e:72:e6:17:92:3e:d7:12:a7:52:07:29:a9:91:c3:b9:f1:
         95:bf:c4:6d:40:42:45:ab:23:53:bd:69:9a:95:fc:d9:89:12:
         d6:be:30:f4:52:3a:dd:8b:4c:2f:e5:1b:25:d2:36:c4:96:3b:
         3f:bc:fc:01:a6:3c:36:f6:b8:7a:2a:bc:a2:8d:c3:8b:c9:55:
         93:4c:6b:5b:5f:c1:33:b5:86:56:e1:bf:64:c0:c2:b3:fb:51:
         19:6d:a8:6a:ca:2d:4a:08:a6:a6:2e:2e:19:32:de:b3:80:73:
         3c:01:6c:98:7d:ef:7a:8f:ec:d2:7f:ea:07:ba:e3:f4:18:fa:
         53:43:11:91:05:8d:75:81:5d:ab:b7:d6:9c:f0:c9:0d:16:ce:
         41:18:07:4c:33:41:04:f8:3c:17:36:6e:10:3c:ee:19:fe:8b:
         62:44:10:e0:d6:2e:17:d3:10:c0:8b:82:63:f3:e4:15:29:2a:
         98:a0:d8:6e:47:e4:f4:cf:a0:26:14:12:8e:93:ec:0e:9b:ea:
         f8:d9:75:48:87:5d:28:0d:ef:dc:53:b2:2b:e8:c0:55:84:7c:
         54:75:29:c7:ef:69:13:66:a7:a3:dc:7c:20:fd:f6:8b:33:02:
         67:5f:3b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:12:22 2025 by rpki-client