Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a5b00ae-4de8-39e6-89d9-396f2968324d.roa
File:                     3a5b00ae-4de8-39e6-89d9-396f2968324d.roa (raw, json)
Hash identifier:          +DqZINHSvVIgL8squdOD8F9pP08EgVMCCP9Cmk11n/4=
Subject key identifier:   DC:FC:B9:52:2B:A5:CE:58:D0:65:E9:1C:AC:0B:3C:03:A2:36:38:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BA563211777B7509BDBE9680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a5b00ae-4de8-39e6-89d9-396f2968324d.roa
Signing time:             Fri 31 Jan 2025 14:00:51 +0000
ROA not before:           Fri 31 Jan 2025 14:00:51 +0000
ROA not after:            Thu 01 May 2025 13:00:51 +0000
asID:                     396589
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:56:32:11:77:7b:75:09:bd:be:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 31 14:00:51 2025 GMT
            Not After : May  1 13:00:51 2025 GMT
        Subject: CN=5c6cf5fb-6e65-4672-86d6-3e546b068388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bb:2a:79:2d:56:3a:7a:eb:1d:4f:66:ab:08:
                    a1:e2:e0:f5:c8:a7:5e:d7:d9:7c:50:44:3d:ad:ee:
                    37:50:08:18:07:7c:41:14:02:56:cf:4e:60:5d:a6:
                    1e:70:4f:e3:cf:b9:19:eb:fb:44:79:44:f3:34:b9:
                    44:90:97:a7:5a:bd:57:d7:92:4d:85:98:8d:f9:79:
                    a1:cf:7b:f9:36:0b:66:7f:4a:3c:21:25:15:93:d0:
                    35:2f:af:94:a5:b4:1e:06:15:5c:84:a5:e9:b3:45:
                    dc:7c:5a:2c:f0:22:88:65:17:cb:24:6b:2f:ce:77:
                    48:2b:d1:3e:41:cd:1b:95:3e:c8:34:98:2b:e1:cb:
                    32:79:1b:40:61:37:2d:ce:42:68:c2:38:8e:3a:0f:
                    e1:be:59:3f:bc:14:b3:25:27:f6:99:a2:93:34:01:
                    86:a3:12:7e:c4:a6:63:3a:d9:76:36:e4:87:25:5e:
                    65:11:8f:a0:fc:8f:34:3d:de:fc:29:1d:08:7c:33:
                    8a:f5:2e:8a:21:78:8f:96:b1:b2:ee:5d:d4:f2:c3:
                    a2:dc:42:03:89:82:d1:6b:60:29:55:bc:00:91:ef:
                    89:c8:25:a5:0c:bb:67:3c:56:b0:85:e6:fc:fb:e7:
                    60:ac:cf:c5:bb:ec:85:fd:b0:b7:6b:3c:e0:5a:05:
                    83:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FC:B9:52:2B:A5:CE:58:D0:65:E9:1C:AC:0B:3C:03:A2:36:38:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a5b00ae-4de8-39e6-89d9-396f2968324d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:98:c2:d3:5a:cd:e4:01:2b:92:26:b6:67:d4:8c:f7:05:b4:
         c7:b1:36:af:01:a8:3f:33:73:e1:b6:cb:2f:b4:89:8f:56:8b:
         43:8f:23:22:f6:f8:85:39:81:c7:46:60:3d:fe:d7:a9:64:35:
         62:91:40:1e:16:29:1d:36:78:a1:3c:23:4c:b2:3e:81:1d:b6:
         48:5c:59:3f:c0:34:b5:1b:dd:f2:88:40:d4:48:98:eb:fc:69:
         22:8d:23:5c:72:b0:a9:03:09:02:18:bc:31:65:f7:97:63:9c:
         4f:96:2b:3f:a8:34:74:3d:54:eb:98:d4:d5:96:a8:98:02:85:
         10:5c:8e:4f:20:86:b6:c7:7c:97:8e:8e:bd:06:90:fa:a4:57:
         57:40:ab:4c:12:a7:ab:41:22:39:dc:c4:1a:30:a6:26:5b:5e:
         a0:e3:4a:7a:d0:d5:73:37:e2:c5:91:00:5b:be:12:27:fa:5a:
         ff:bc:dc:92:ac:7b:c3:10:27:8d:5c:10:cc:15:0c:53:bc:12:
         1e:f0:4e:e4:6c:dd:9e:2a:8b:7c:08:0f:d6:72:c4:22:9d:87:
         aa:d1:1c:45:a5:1a:0f:7d:66:f4:ee:46:33:a6:04:78:32:12:
         86:56:78:a2:94:3d:26:a8:39:7a:97:4b:34:bf:3d:7e:c7:19:
         4c:6f:17:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:11 2025 by rpki-client