Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40116de0-9ea5-3ce9-8529-cdcfaa871c57.roa
File:                     40116de0-9ea5-3ce9-8529-cdcfaa871c57.roa (raw, json)
Hash identifier:          nGDsZjvCOT28dkwcMakyncTXuKcCRGjgo5hU+UDTXHg=
Subject key identifier:   00:14:F8:6D:5C:2F:CE:D6:1B:B0:66:F3:A0:7A:1C:A2:10:81:D0:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BFEB9E25F76B18B52779ADA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40116de0-9ea5-3ce9-8529-cdcfaa871c57.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     396570
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:9e:25:f7:6b:18:b5:27:79:ad:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=97abb760-6d65-4a42-b9ff-b40b5123676a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5c:b4:d6:79:63:51:12:e9:0e:bb:9c:ff:b0:
                    ab:42:2a:63:8d:07:f9:5b:98:8f:29:99:f7:c0:ff:
                    04:75:34:dd:84:63:77:24:32:76:4b:d8:c8:8f:23:
                    d1:3d:52:cc:be:13:c5:03:e8:48:6c:ee:c7:c1:8c:
                    e1:17:1e:56:cb:0f:e4:4c:85:c8:df:1a:16:09:41:
                    60:97:31:4c:da:98:69:b6:18:d2:47:a2:e7:09:84:
                    7b:90:9f:7b:41:0c:30:f1:f6:37:ba:ed:f5:c8:0f:
                    ea:33:b3:24:e8:5a:48:b0:de:1d:2f:ea:c3:07:df:
                    0d:7e:f7:b6:85:6d:3d:b3:72:91:41:49:59:46:64:
                    27:9c:c1:85:61:17:f9:92:de:c6:0e:2e:47:e8:af:
                    31:49:fc:9e:a2:2d:f7:e7:34:27:a2:73:6a:15:6f:
                    c3:5c:37:ac:6b:3d:44:0b:ce:8d:51:b2:c7:c6:30:
                    e4:7f:b6:b2:b4:53:3b:5b:8a:1e:7f:e3:eb:10:9a:
                    c9:a1:9f:16:18:26:0e:b5:dc:32:78:4a:6c:74:c1:
                    96:22:cc:64:3c:22:dc:6c:25:9b:1f:93:16:10:ff:
                    41:c3:a6:53:29:2a:b4:ac:a9:b4:33:8b:cc:35:e8:
                    d8:4c:af:9c:c7:c5:9c:2f:de:02:c4:c2:0a:8f:0e:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:14:F8:6D:5C:2F:CE:D6:1B:B0:66:F3:A0:7A:1C:A2:10:81:D0:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40116de0-9ea5-3ce9-8529-cdcfaa871c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a8:9c:1e:1f:b9:02:e0:d2:ca:be:d2:88:18:6f:fb:1f:95:
         e6:64:71:93:64:37:a8:e1:74:ba:d2:9c:8c:c3:95:b6:21:d8:
         77:78:e6:e7:7a:94:68:d4:20:e6:5c:46:8a:c2:12:91:f2:02:
         d4:27:7c:c3:b4:2f:ea:c3:d3:d0:85:60:1d:39:b7:2f:c1:3d:
         f6:d5:2c:4b:cc:0e:64:c1:8f:75:bd:52:41:a7:c6:b9:f0:65:
         51:80:da:77:99:42:5d:d3:99:3b:6f:d7:ce:41:ef:e4:e8:b2:
         a8:49:5b:90:95:69:5f:99:40:75:4f:16:44:5e:bc:5b:6d:e0:
         db:13:09:82:22:a1:79:7d:57:ef:87:32:ce:93:c3:f2:b0:9d:
         24:f8:94:c9:e8:13:b5:6f:61:05:e5:56:9e:67:cb:c0:b8:bf:
         db:78:b6:6d:a4:5a:d8:17:54:69:68:70:7f:a7:9a:f9:d1:01:
         95:44:67:c9:f0:87:e9:7b:ec:02:77:0d:cf:67:fd:6e:7e:8a:
         54:a6:73:49:60:54:b9:d9:65:78:24:68:96:44:87:4b:7c:bd:
         5a:05:53:a9:e4:79:18:1a:78:a8:5d:55:3f:c1:74:b3:c8:5d:
         0d:b6:c4:22:e3:f0:24:b9:f3:77:3c:92:2c:ff:ba:8d:53:26:
         07:0f:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:25 2025 by rpki-client