Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/049a910b-d13c-33dd-af5f-c0ea707e7da3.roa
File:                     049a910b-d13c-33dd-af5f-c0ea707e7da3.roa (raw, json)
Hash identifier:          vtn5DruiOFtd6jEhtYCiGXIY/lksSGUgE+Aqpj/noHI=
Subject key identifier:   7A:EE:7E:18:67:91:C9:BA:BE:A2:D2:90:05:78:63:2D:A9:24:DA:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BFEB9B5E37362AF96237A880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/049a910b-d13c-33dd-af5f-c0ea707e7da3.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     396593
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:9b:5e:37:36:2a:f9:62:37:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=75ade6c9-c713-4618-9835-84240e14ba53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:28:51:4d:2b:da:5d:48:ec:07:36:4f:da:d5:
                    70:e6:50:5f:30:ba:71:e9:19:e9:ab:45:38:70:98:
                    e2:85:70:93:da:db:8e:49:9f:e6:af:d2:e3:27:23:
                    ea:53:bb:80:a0:fe:1d:c6:85:6d:54:41:8c:05:b5:
                    66:35:54:1b:77:a4:a1:b9:6c:2c:ca:96:0d:bc:38:
                    96:0d:a2:25:a0:12:39:da:82:32:fc:c8:e1:20:f0:
                    3e:75:6a:83:14:18:22:cc:b4:26:df:95:c4:64:23:
                    11:2d:45:58:49:65:03:19:3f:16:c7:d5:c3:6a:7e:
                    76:87:03:0a:03:cc:39:1c:88:97:73:c5:12:13:04:
                    14:4a:9d:e9:e5:16:f7:59:40:c1:b3:58:0d:21:bd:
                    2f:ac:b2:59:49:b0:0d:19:7d:fc:b0:e7:45:bc:67:
                    6d:8c:93:19:34:af:b3:cd:3e:50:cf:f3:d0:d1:f2:
                    2f:4f:08:b2:4f:4d:b2:57:cd:2e:84:05:a8:03:c5:
                    73:bd:2c:f0:64:a2:5c:80:c5:8a:40:53:fb:c7:c6:
                    40:2c:17:0c:a7:20:fe:c6:f4:01:f5:61:cf:45:e4:
                    0a:b8:56:98:1f:c8:a6:65:45:d2:10:fd:72:ac:b7:
                    0c:ff:bb:dc:c6:ea:82:94:c2:97:99:d3:0a:0c:74:
                    68:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EE:7E:18:67:91:C9:BA:BE:A2:D2:90:05:78:63:2D:A9:24:DA:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/049a910b-d13c-33dd-af5f-c0ea707e7da3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:88:d4:29:14:06:73:9e:23:11:50:4a:ca:f6:b5:15:a6:ec:
         75:25:37:bb:12:ea:41:59:e5:10:b0:93:a6:ee:81:33:09:6c:
         cc:90:11:c6:17:71:e3:c6:81:6c:9f:6e:f8:73:f1:8a:43:11:
         8b:92:f3:e2:bc:19:40:28:2b:98:ff:16:33:08:68:33:c3:13:
         52:3d:83:41:1d:c0:f5:a9:b0:37:ec:cb:c4:4b:73:74:f1:cd:
         36:a1:f3:9d:3b:8b:07:1e:0c:87:9d:f8:ad:4a:2e:f0:40:5e:
         8d:8b:c9:d0:07:4f:8d:be:ad:06:92:2c:0a:c4:1a:a4:d1:1b:
         b8:f9:3c:3c:ed:f1:18:c8:43:ae:ed:cf:22:bb:1f:ce:90:8d:
         01:6e:bd:84:b7:db:52:c8:cf:8f:33:59:5c:4f:f2:f9:87:44:
         e2:e7:ca:f0:c0:96:ef:e1:ae:1e:45:e3:c1:6e:b5:98:3e:f8:
         f6:1a:6f:ce:f1:2b:74:98:e2:7d:93:21:b6:d8:7d:9e:78:dd:
         dd:d1:f8:e5:44:e3:17:95:17:93:f2:55:f7:5f:e4:ac:b0:84:
         39:6e:4a:64:b0:8f:fa:c9:f1:1b:b7:5d:dc:39:b4:2c:34:1f:
         ce:ef:99:dd:a3:e3:bf:40:c7:48:ab:24:66:a4:7b:ba:56:ad:
         a7:2b:e6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:21 2025 by rpki-client