Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/475936e2-d108-3d61-a990-8bc00c0ec48f.roa
File:                     475936e2-d108-3d61-a990-8bc00c0ec48f.roa (raw, json)
Hash identifier:          9inNO8zu0L4ouInFs+cch7GNvZn+FxamzcSebz231zs=
Subject key identifier:   7E:DB:10:54:F0:59:05:55:9E:9D:C2:CA:73:14:1B:61:0B:03:D5:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BFEB9C40D3A3184C022CC300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/475936e2-d108-3d61-a990-8bc00c0ec48f.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     396579
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:9c:40:d3:a3:18:4c:02:2c:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=7e5e8b81-d3b5-493a-9bad-3fa6a7da5943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d0:64:e4:f8:cb:04:68:dc:98:ee:24:28:30:
                    70:42:a5:68:e9:eb:84:dc:27:16:5f:22:d0:17:da:
                    49:67:3e:fc:ba:e3:1d:b6:39:ec:de:19:f6:1e:0f:
                    10:d5:86:01:b0:08:17:59:86:46:0f:01:25:d0:c7:
                    b6:fc:cf:f3:06:17:85:b2:7d:b3:98:78:4e:f4:6d:
                    1c:ad:65:f7:e5:81:18:2e:f4:44:cf:69:a4:74:6d:
                    96:60:8a:6e:ce:d4:9e:7c:ab:5b:7d:e1:46:a8:67:
                    91:52:e0:aa:34:7b:d4:55:66:49:f7:0f:87:19:7a:
                    22:c8:c3:c9:f1:5d:74:bd:b9:fb:25:c8:83:d8:d4:
                    31:62:cd:08:3a:8a:56:0d:24:d2:a4:40:37:41:d2:
                    de:d2:02:f4:9f:ad:62:48:c7:2a:c7:ce:fc:da:01:
                    67:ee:ee:84:45:0f:37:be:a5:bf:2e:3b:7c:3e:ec:
                    b0:f7:d3:18:66:7e:43:46:c6:13:8d:d3:ef:4c:5e:
                    2b:2a:44:82:2a:b3:5c:0c:d5:d3:b1:41:f6:2e:e0:
                    78:07:72:ab:d7:c4:f8:42:cc:bc:63:f8:4b:8c:2e:
                    ae:14:5e:dc:04:07:08:22:ca:1e:6b:bb:b6:ea:1f:
                    e4:35:4f:9f:30:94:32:cc:31:07:47:90:e9:84:55:
                    13:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DB:10:54:F0:59:05:55:9E:9D:C2:CA:73:14:1B:61:0B:03:D5:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/475936e2-d108-3d61-a990-8bc00c0ec48f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:bd:67:0f:98:b6:fd:89:ae:ae:cc:52:6f:52:f1:02:38:37:
         34:29:a1:bc:0a:8e:14:9a:15:62:a8:c4:d0:1e:a8:2d:d1:8b:
         54:49:8e:60:d3:02:32:eb:c7:94:3f:bf:c9:1d:34:ba:9f:a8:
         99:f9:4d:7c:3f:52:98:d8:23:4a:95:d1:99:bb:52:62:07:8c:
         b0:1b:79:38:c7:c8:42:a5:d5:d8:54:da:15:8a:29:87:e7:6b:
         da:d1:bc:29:08:54:12:72:d9:b8:63:05:f1:b4:6b:7d:e0:47:
         cb:a7:a8:53:35:45:18:c3:34:85:cc:e8:30:b9:b4:c4:83:33:
         a4:ea:7c:64:8b:31:2d:c4:d6:29:0b:4f:39:d9:73:c3:f4:6d:
         c6:46:b3:c2:05:e3:9d:73:75:d8:eb:3e:8f:07:a2:cc:d3:90:
         f2:23:ff:48:d5:be:37:a0:a7:9b:25:8c:ff:db:69:3a:f8:1b:
         4b:86:96:66:25:10:84:74:1d:37:0d:94:dc:b0:3a:d7:f8:9f:
         7f:40:0c:54:2b:db:12:60:56:fd:2c:c6:82:a6:60:46:0b:53:
         18:1d:f1:de:a5:b4:b1:41:e7:ff:83:61:56:95:18:f3:82:5d:
         4e:9b:3e:82:c0:2f:f2:3f:bc:8a:21:32:ef:27:39:95:f0:00:
         b7:21:9b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:21 2025 by rpki-client