Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10c9931e-5525-3a21-b16b-e79ee4edaeff.roa
File:                     10c9931e-5525-3a21-b16b-e79ee4edaeff.roa (raw, json)
Hash identifier:          MMEa6O9UaSPSg87JeklaZ2Jfl7kFqK6vKS9U/EKStu0=
Subject key identifier:   52:49:2C:ED:3B:DF:EC:0E:CB:81:64:94:27:3E:39:E4:D6:E8:CC:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848AC60CEA0A10744F414C64280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10c9931e-5525-3a21-b16b-e79ee4edaeff.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     396582
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:ce:a0:a1:07:44:f4:14:c6:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=6ce3a5a9-5b81-410e-9923-cb14f8c1428d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:5d:23:63:fc:30:c4:fd:d7:90:4c:00:72:
                    15:a3:0d:12:8b:50:58:c7:4f:61:71:6f:d4:55:1e:
                    f9:10:2f:9d:2a:f8:cc:ae:90:75:75:1c:a2:a4:2a:
                    34:cc:96:f0:01:52:5a:fb:92:8e:25:a2:4e:48:bf:
                    91:9a:00:eb:a9:9c:f7:91:c8:e9:99:92:f5:59:e6:
                    68:04:e5:2c:03:82:e1:ab:09:b0:d6:0a:18:ed:3e:
                    eb:cd:74:71:a2:79:23:8e:c7:cc:71:47:4b:90:b3:
                    9f:76:78:ef:e0:b1:2e:51:61:b3:04:c6:e6:2e:99:
                    a2:2b:16:ff:b6:9a:2e:8a:4f:8d:a1:af:7c:da:8b:
                    9a:0a:70:cd:23:fc:22:02:0e:4f:5b:cb:36:6a:7e:
                    a4:02:7d:b9:14:b0:98:c7:94:15:1d:1d:2e:76:7d:
                    18:af:b9:68:c7:24:2d:08:b9:a2:1d:14:a0:c1:ee:
                    e0:e6:d9:b0:7e:dd:a0:07:87:af:d6:02:25:bf:37:
                    2c:01:bc:2c:6e:6e:82:8e:84:2e:7c:f0:b4:41:40:
                    bf:6c:67:3a:04:eb:be:0f:e9:16:ad:37:11:2b:fc:
                    a7:16:92:41:f5:f5:67:f9:88:35:77:2f:72:e7:7c:
                    88:ef:00:39:16:cd:09:57:2e:fc:2d:39:d3:c3:c6:
                    16:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:49:2C:ED:3B:DF:EC:0E:CB:81:64:94:27:3E:39:E4:D6:E8:CC:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10c9931e-5525-3a21-b16b-e79ee4edaeff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:53:c2:ed:17:08:45:ca:1f:b3:24:72:79:e1:3b:1d:0c:f9:
         96:96:45:0f:31:9e:8a:56:65:57:8a:dd:2a:60:75:bb:c1:18:
         78:11:f8:7e:70:e2:3c:c2:51:e5:7f:36:a2:33:37:e0:bd:e2:
         fd:9b:69:7b:e3:1a:d7:ba:0a:51:c6:71:92:e1:c8:5e:e5:9e:
         27:39:b7:84:5a:ab:4c:88:d0:d2:b7:f1:0c:9b:8b:6f:8d:2b:
         5c:ff:f7:2b:d0:c5:82:ce:99:57:fa:d0:1c:3d:08:b9:07:dc:
         d3:da:22:ef:c8:88:90:f8:38:4a:6d:7f:b4:f5:26:6f:62:d4:
         16:86:95:4c:3b:ab:f8:56:b6:18:c7:b1:cf:3b:47:e1:54:4c:
         76:ae:62:a4:dd:45:21:43:48:c7:0e:a5:b0:be:cb:c2:07:4d:
         85:17:ac:9c:a2:1d:96:ce:79:b0:c4:7d:f4:e9:3f:c2:f0:56:
         ba:10:d2:70:09:13:eb:6b:6c:51:ee:f8:5b:65:ed:90:e2:bf:
         a0:a2:af:cc:ed:10:1d:7f:f1:65:07:c9:37:03:31:c3:11:f7:
         ca:60:6e:de:dd:b7:e2:2b:04:17:cb:de:6e:aa:33:cc:45:45:
         81:9f:dd:58:f2:ea:a7:17:b3:d2:00:49:cc:a8:df:19:e5:3f:
         56:ab:31:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:23 2025 by rpki-client