Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/066d0aff-f202-323c-8f31-f9f7ecb6ee42.roa
File:                     066d0aff-f202-323c-8f31-f9f7ecb6ee42.roa (raw, json)
Hash identifier:          wT4GoWAaIzm6Cn/QRj71MHFf8GmFQ8ZeFTLbkQXQAXY=
Subject key identifier:   F1:EB:16:3C:83:40:D3:AA:27:48:DA:AD:8D:01:CE:3A:DA:FD:B0:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848AC60CD8ED32493971E8669C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/066d0aff-f202-323c-8f31-f9f7ecb6ee42.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     396577
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:cd:8e:d3:24:93:97:1e:86:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=624e90a1-64a6-4912-9250-6ff0818a579b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ba:69:83:9c:67:66:0e:af:83:4c:ec:39:15:
                    d4:a6:d0:ea:89:c0:07:6f:88:99:79:2d:bc:ec:e9:
                    e5:21:0a:52:46:4a:c1:59:2d:72:d3:7d:86:99:6c:
                    85:b3:e8:e2:fe:08:18:bd:e4:b6:d4:00:7b:15:67:
                    cb:b3:63:f0:36:99:f6:54:88:42:fa:34:db:3d:df:
                    46:9c:a3:2c:09:f0:1c:52:07:d9:42:5d:57:13:85:
                    4a:33:c7:9d:f2:64:9b:27:a1:45:5f:4a:d7:a4:db:
                    96:8a:98:19:c1:41:3e:bd:0a:58:f2:f6:7d:a4:98:
                    a8:ea:aa:3d:ea:b5:ab:f4:6c:51:f9:df:a0:85:69:
                    89:1d:11:6b:f8:25:75:e3:03:6c:f0:bf:1f:77:01:
                    06:4e:e7:c9:b2:78:5f:37:3e:66:5c:0a:82:3c:19:
                    87:4f:01:b4:ab:c5:c8:a3:d2:b6:19:d6:5f:54:64:
                    3d:4e:54:16:38:67:79:5f:96:de:23:0e:a2:ad:22:
                    3a:15:12:33:05:66:e6:5e:48:01:fb:e8:48:d5:7d:
                    18:f3:e5:92:92:94:dc:6a:6b:6c:09:2e:03:12:5f:
                    f1:ad:09:18:59:74:2a:51:d5:0e:2d:3e:cc:d0:a8:
                    59:b8:19:f4:e4:e4:af:db:80:58:65:c6:37:ec:dd:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EB:16:3C:83:40:D3:AA:27:48:DA:AD:8D:01:CE:3A:DA:FD:B0:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/066d0aff-f202-323c-8f31-f9f7ecb6ee42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:7b:88:59:8e:10:56:3f:d9:b3:4c:9e:db:28:eb:09:d0:31:
         eb:f7:d5:a7:2e:30:b5:f4:2d:11:fa:e6:91:89:fa:ea:ff:dd:
         82:06:b4:60:ea:74:54:d5:c3:bc:49:7d:61:02:b6:e3:e0:ab:
         02:1a:ac:b9:48:6d:8d:f5:b4:f4:37:40:32:a7:4e:1c:8c:5b:
         3b:23:b3:26:6d:9b:28:39:be:9c:0f:9b:94:06:c0:95:89:31:
         e2:9f:6c:56:31:a2:a4:a7:40:9f:2d:22:c7:dd:a6:2f:fe:bf:
         15:47:67:c2:09:b8:a3:60:81:76:8e:21:d7:41:53:07:a4:c2:
         a9:a1:6a:c3:16:76:b8:88:69:17:63:47:41:7e:4b:c1:1a:64:
         1d:d1:1b:01:95:95:af:f1:2d:7a:05:22:41:2c:e2:c9:ac:9b:
         25:9f:a5:72:51:83:58:f8:ae:23:1a:04:b7:59:73:be:66:13:
         3e:45:a3:6d:22:e5:c9:83:5e:15:d9:40:4f:b5:d2:9b:32:b3:
         d9:84:fa:60:cc:c3:5d:1b:a3:04:e6:eb:e7:73:85:25:d4:09:
         c9:21:3e:57:26:ff:ac:a3:98:46:92:a3:3e:d4:04:17:c6:69:
         76:fb:c4:bc:39:ca:5a:74:c3:ad:26:05:b7:4b:23:96:01:3e:
         af:61:63:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:28 2025 by rpki-client