Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a1200d2-98f2-31b1-b724-a16c0d988f1e.roa
File:                     0a1200d2-98f2-31b1-b724-a16c0d988f1e.roa (raw, json)
Hash identifier:          LY3uN2jnWuXoQbO1wOkEckVW8L/6XbtK0h/TZN26MYE=
Subject key identifier:   D6:21:C4:96:40:66:04:B4:73:B4:57:9D:66:73:77:63:65:65:FE:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848AC60C87C883C3916DF95A400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a1200d2-98f2-31b1-b724-a16c0d988f1e.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     396617
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:c8:7c:88:3c:39:16:df:95:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=bd7317d2-e4b1-45e1-a065-cf38466563a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:09:31:ac:76:a6:06:a4:81:5f:c1:03:5c:1d:
                    25:43:d9:6f:ed:b6:49:4e:53:96:55:9f:79:74:69:
                    5b:d6:b9:53:75:6f:a0:ec:05:d9:29:6f:4d:0d:e1:
                    87:1c:ed:07:df:32:f7:86:e2:8a:e3:98:da:40:a8:
                    e2:e7:d0:50:c7:16:74:37:ae:09:5b:a7:96:74:83:
                    71:3e:e4:7e:4f:48:9c:8b:6e:2a:e5:0a:e6:fe:b7:
                    ec:99:48:6c:b8:d2:cc:84:aa:22:d2:c4:d6:76:17:
                    80:99:90:3e:b3:d2:19:d0:fc:70:fb:79:83:f8:75:
                    32:4f:02:f1:1e:e1:bd:8b:84:49:79:a2:cb:96:da:
                    c6:fc:dd:e9:86:30:94:88:dd:42:5a:6e:2b:4c:61:
                    7f:14:4f:82:09:45:30:f7:9c:7f:eb:96:12:b0:54:
                    8e:de:ce:34:62:ce:dd:65:5d:44:f8:f9:4b:ba:73:
                    59:e7:ed:76:46:1c:84:62:ff:b5:a7:43:27:af:e0:
                    57:b0:66:c3:6f:a7:e7:07:89:64:34:3a:79:26:f5:
                    c2:8a:fd:1a:82:43:0d:ea:24:a9:7c:af:6b:d0:89:
                    db:b2:83:e3:f0:b6:d0:a6:91:6d:0a:16:c1:13:ec:
                    4c:1c:8a:76:8a:f1:6b:a3:38:19:23:19:3d:dd:85:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:21:C4:96:40:66:04:B4:73:B4:57:9D:66:73:77:63:65:65:FE:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a1200d2-98f2-31b1-b724-a16c0d988f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ff:0e:f4:1d:70:d9:25:d9:33:09:bf:b3:44:98:14:14:d8:
         e1:fd:be:38:d7:90:28:9a:bb:a2:99:0c:bb:41:8b:9a:cf:11:
         11:6d:4d:72:80:3a:cc:b5:09:d4:72:7f:f3:77:cc:a3:a7:e6:
         5f:22:7c:85:65:65:00:72:3f:d9:55:aa:54:76:dd:a7:78:d6:
         96:f5:a3:1b:f0:ae:1a:bb:99:cd:d9:86:8c:5b:19:0f:63:c5:
         b7:0a:00:05:90:28:0c:27:0e:02:4b:ac:fc:c1:e4:5d:70:9f:
         b8:4d:9c:5e:2f:34:57:c7:87:c6:99:b3:64:64:2c:29:f9:88:
         24:2e:b4:e1:25:97:b0:32:7f:74:f2:2e:61:e9:de:60:17:a9:
         61:37:e5:9d:65:58:27:17:16:07:31:55:42:ba:2b:9c:d3:fe:
         90:c2:30:aa:f5:28:37:f7:7c:72:0f:ba:23:0f:4e:d7:9b:6c:
         7f:f5:62:16:78:99:db:fe:01:de:7a:38:d8:72:0b:46:2d:82:
         1a:da:cb:3a:f4:c6:56:53:52:aa:ab:1f:5d:12:07:08:2d:6a:
         b8:43:c8:7d:8a:b1:b0:dd:f0:54:9b:4d:95:83:47:63:00:6f:
         e7:18:b5:5d:4b:b8:a0:df:ee:ae:0a:1d:51:7e:65:2e:6a:a4:
         a4:99:7f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:31 2025 by rpki-client