Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9f9d9c-5c27-3f0d-84f5-ea969a3797df.roa
File:                     0b9f9d9c-5c27-3f0d-84f5-ea969a3797df.roa (raw, json)
Hash identifier:          M/Ve+TArDlwnnd4pn0qyfWHx+g7k5FnKih9maoaines=
Subject key identifier:   4F:89:F3:1E:79:2C:C6:E6:F7:D5:8C:ED:77:5C:FB:B0:B3:F0:39:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BFEB985C6607874505DF1760
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9f9d9c-5c27-3f0d-84f5-ea969a3797df.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     396572
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:98:5c:66:07:87:45:05:df:17:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=e3fc7954-5713-4093-bc50-e41a9e9bbe0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:14:d3:9a:2f:15:f2:e0:11:de:39:50:50:
                    78:ec:4b:05:8b:7b:07:af:47:9e:ec:7b:9e:8c:9d:
                    e2:d7:f0:3d:0f:21:b8:0f:33:d2:73:71:5c:aa:d9:
                    0b:48:17:6d:62:a1:b0:cd:66:70:45:40:41:62:30:
                    28:fd:6a:96:ba:ee:ba:c9:44:11:d1:5f:25:cf:7b:
                    97:18:e9:0d:28:29:a1:b2:08:45:02:b0:33:85:bd:
                    5b:bf:3f:5b:cf:ff:51:ff:04:67:91:1c:bc:b3:05:
                    76:a5:ad:30:ba:8a:36:16:47:27:46:cc:ed:ce:bc:
                    72:52:77:00:86:53:07:23:e8:4b:b4:3b:17:78:f2:
                    d4:b9:11:ed:51:48:fe:36:71:45:af:57:80:98:9f:
                    46:ed:fb:26:b6:52:52:41:07:f1:f9:68:7c:51:f8:
                    09:69:4e:0b:76:23:a7:d8:1a:74:de:53:69:96:ca:
                    85:8d:2a:df:98:4f:4c:75:6f:76:c3:e3:37:2c:fa:
                    18:c2:cf:74:57:9c:eb:ae:a6:97:4f:ca:f4:f3:cf:
                    32:5d:a2:79:06:3a:29:0a:e3:0b:c4:ea:b7:a6:3b:
                    54:0a:80:36:ee:db:97:2d:26:10:47:7c:ea:11:90:
                    4c:6c:cb:36:d9:35:f3:05:42:a9:db:1e:c2:c7:3e:
                    5a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:89:F3:1E:79:2C:C6:E6:F7:D5:8C:ED:77:5C:FB:B0:B3:F0:39:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9f9d9c-5c27-3f0d-84f5-ea969a3797df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:a9:d6:47:51:85:8b:d4:9b:a5:85:77:25:1b:bf:db:8e:4e:
         8b:a4:28:f8:58:bd:3a:ed:74:97:e8:23:d4:07:5a:37:05:2e:
         78:14:db:0d:ee:db:ef:82:9d:bd:76:0f:c1:9f:c5:37:36:49:
         73:39:79:54:42:ed:26:d6:82:cf:8e:72:bb:91:c3:bb:5d:06:
         ae:40:71:39:bd:e9:98:e3:b0:cd:7f:1b:bd:32:1b:e4:10:79:
         37:39:19:d8:47:96:94:f5:62:b8:07:28:71:ac:45:35:45:25:
         6f:8a:47:97:d3:6b:4b:64:61:2f:4e:35:77:67:5b:8c:ae:f5:
         ab:fa:bb:df:80:2a:e7:80:ea:b3:65:14:3a:7e:79:a5:2d:9b:
         e2:28:c6:28:6e:09:13:d1:cc:59:b2:1c:2b:50:d3:5e:1d:69:
         74:78:9a:ae:2f:d6:9d:50:d5:8b:82:f9:00:05:77:87:51:03:
         f6:33:bc:f8:fb:d4:19:29:27:92:c7:69:ed:c2:af:b6:48:07:
         64:94:29:5f:07:d8:5b:c2:7f:3b:93:a7:3b:62:0a:0c:90:53:
         05:6c:03:86:83:81:86:29:10:9c:07:98:2c:eb:af:b2:88:05:
         ce:14:b7:26:09:af:75:b2:1b:f6:d0:e2:9f:a8:50:13:82:9f:
         f0:55:02:47
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi/65hcZgeHRQXfF2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
ZTNmYzc5NTQtNTcxMy00MDkzLWJjNTAtZTQxYTllOWJiZTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy8U05ovFfLgEd45UFB47EsFi3sHr0ee7Hue
jJ3i1/A9DyG4DzPSc3FcqtkLSBdtYqGwzWZwRUBBYjAo/WqWuu66yUQR0V8lz3uX
GOkNKCmhsghFArAzhb1bvz9bz/9R/wRnkRy8swV2pa0wuoo2FkcnRsztzrxyUncA
hlMHI+hLtDsXePLUuRHtUUj+NnFFr1eAmJ9G7fsmtlJSQQfx+Wh8UfgJaU4LdiOn
2Bp03lNplsqFjSrfmE9MdW92w+M3LPoYws90V5zrrqaXT8r0888yXaJ5BjopCuML
xOq3pjtUCoA27tuXLSYQR3zqEZBMbMs22TXzBUKp2x7Cxz5awQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFE+J8x55LMbm99WM7Xdc+7Cz8DmMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI5ZjlkOWMtNWMyNy0z
ZjBkLTg0ZjUtZWE5NjlhMzc5N2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCLqdZHUYWL1JulhXclG7/bjk6LpCj4WL067XSX
6CPUB1o3BS54FNsN7tvvgp29dg/Bn8U3NklzOXlUQu0m1oLPjnK7kcO7XQauQHE5
vemY47DNfxu9MhvkEHk3ORnYR5aU9WK4ByhxrEU1RSVvikeX02tLZGEvTjV3Z1uM
rvWr+rvfgCrngOqzZRQ6fnmlLZviKMYobgkT0cxZshwrUNNeHWl0eJquL9adUNWL
gvkABXeHUQP2M7z4+9QZKSeSx2ntwq+2SAdklClfB9hbwn87k6c7YgoMkFMFbAOG
g4GGKRCcB5gs66+yiAXOFLcmCa91shv20OKfqFATgp/wVQJH
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:04 2025 by rpki-client