Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f95efeb0-478b-3005-ad06-ce323f2af52b.roa
File:                     f95efeb0-478b-3005-ad06-ce323f2af52b.roa (raw, json)
Hash identifier:          gSr59w1UufqH0DMjppi0X/N8ybO0IWkNPhMbf9YfVNo=
Subject key identifier:   5C:66:72:F0:E0:5A:22:3B:B7:1D:E8:E1:06:34:C2:2B:94:F6:C1:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858499F24BFA927B5D8223E140AA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f95efeb0-478b-3005-ad06-ce323f2af52b.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     32651
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:bf:a9:27:b5:d8:22:3e:14:0a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=9d29e02b-34f7-4bd5-be6c-da4d3982af98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:9b:02:96:0d:97:ca:a8:33:d1:7c:b5:49:
                    31:e6:90:b6:72:c3:b2:d0:92:ac:b7:a3:f2:04:f8:
                    74:09:32:7d:5b:2d:d6:ee:b8:9d:53:5d:ab:76:35:
                    5c:fb:fd:b0:e8:5a:9e:ca:d5:59:b9:21:2a:27:d3:
                    41:c6:20:02:3c:9c:88:ef:18:32:90:65:0a:68:06:
                    5b:b5:d3:70:53:1e:ac:b0:a7:c5:84:94:73:63:47:
                    a8:e4:2a:69:8d:d7:f8:ba:9c:f5:24:a3:d4:45:8b:
                    8f:38:2b:60:0a:71:10:d0:a0:f9:fe:ff:db:27:77:
                    ba:51:e5:ba:fc:f1:94:04:35:7c:1c:ea:28:d4:9e:
                    a8:16:16:30:8f:27:6f:af:59:cc:49:6a:9f:7b:7a:
                    d7:ce:a5:16:a7:ce:fc:34:cd:2d:46:cd:51:4d:ee:
                    56:9e:df:1e:8a:dd:df:bb:2f:5c:4f:86:a7:47:cd:
                    07:33:c6:46:46:42:ad:32:89:1f:e6:e1:6e:b8:b5:
                    70:bb:70:73:bd:55:1e:81:e4:8f:81:79:67:e3:07:
                    6d:02:4c:3f:f7:80:e2:18:a1:93:aa:a1:d0:1b:86:
                    e6:25:2b:74:f6:65:f3:36:be:a3:b8:2e:b4:60:17:
                    94:d1:38:d1:e1:1f:bf:dc:a1:00:d5:f2:9a:60:d6:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:66:72:F0:E0:5A:22:3B:B7:1D:E8:E1:06:34:C2:2B:94:F6:C1:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f95efeb0-478b-3005-ad06-ce323f2af52b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:39:aa:d6:be:23:79:fe:06:7a:97:65:9a:be:a8:37:9f:3a:
         8d:60:9d:36:05:3e:46:69:12:6c:77:54:6f:d3:3e:86:93:ca:
         75:af:1a:05:0d:67:ef:c0:38:ed:99:dd:a2:7a:7b:e3:79:33:
         84:64:5c:fa:07:21:e0:82:6f:13:76:9d:e3:16:90:dc:b9:97:
         fc:1a:ca:7c:8f:f3:6a:46:9b:79:8f:56:fb:29:31:9f:84:8b:
         ac:e9:9b:15:c4:c7:4b:07:5c:97:1e:61:57:0f:e4:93:57:9e:
         31:40:70:82:4c:94:4f:6c:db:41:dc:ad:a9:fc:d2:d1:87:23:
         65:eb:66:fb:35:ef:f4:0d:ca:1d:4d:ae:89:f3:48:14:b8:c7:
         9f:46:a4:b8:a3:ca:61:35:97:cc:fc:38:22:eb:58:26:f8:a9:
         84:a4:6d:8f:b6:45:6d:06:bc:51:36:00:1e:61:ce:b1:30:13:
         74:1e:11:1e:48:b7:4f:19:bb:88:db:65:5b:53:af:63:b0:98:
         8c:f0:21:fa:95:de:f0:38:6b:e9:91:a3:07:85:02:26:1b:32:
         d8:7b:d5:89:16:02:42:74:f6:15:fa:3a:d2:16:06:af:40:9d:
         cb:4a:d2:2e:4f:9a:4b:df:16:78:dd:28:30:84:41:92:18:35:
         bb:23:67:f3
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJL+pJ7XYIj4UCqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk
OWQyOWUwMmItMzRmNy00YmQ1LWJlNmMtZGE0ZDM5ODJhZjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEmbApYNl8qoM9F8tUkx5pC2csOy0JKst6Py
BPh0CTJ9Wy3W7ridU12rdjVc+/2w6FqeytVZuSEqJ9NBxiACPJyI7xgykGUKaAZb
tdNwUx6ssKfFhJRzY0eo5Cppjdf4upz1JKPURYuPOCtgCnEQ0KD5/v/bJ3e6UeW6
/PGUBDV8HOoo1J6oFhYwjydvr1nMSWqfe3rXzqUWp878NM0tRs1RTe5Wnt8eit3f
uy9cT4anR80HM8ZGRkKtMokf5uFuuLVwu3BzvVUegeSPgXln4wdtAkw/94DiGKGT
qqHQG4bmJSt09mXzNr6juC60YBeU0TjR4R+/3KEA1fKaYNbd+wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFxmcvDgWiI7tx3o4QY0wiuU9sH1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjk1ZWZlYjAtNDc4Yi0z
MDA1LWFkMDYtY2UzMjNmMmFmNTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBSOarWviN5/gZ6l2Wavqg3nzqNYJ02BT5GaRJs
d1Rv0z6Gk8p1rxoFDWfvwDjtmd2ienvjeTOEZFz6ByHggm8Tdp3jFpDcuZf8Gsp8
j/NqRpt5j1b7KTGfhIus6ZsVxMdLB1yXHmFXD+STV54xQHCCTJRPbNtB3K2p/NLR
hyNl62b7Ne/0DcodTa6J80gUuMefRqS4o8phNZfM/Dgi61gm+KmEpG2PtkVtBrxR
NgAeYc6xMBN0HhEeSLdPGbuI22VbU69jsJiM8CH6ld7wOGvpkaMHhQImGzLYe9WJ
FgJCdPYV+jrSFgavQJ3LStIuT5pL3xZ43SgwhEGSGDW7I2fz
-----END CERTIFICATE-----
Generated at Sun May 11 00:59:44 2025 by rpki-client