Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53a5157d-9464-3dfd-a71f-54b2996fe3fa.roa
File:                     53a5157d-9464-3dfd-a71f-54b2996fe3fa.roa (raw, json)
Hash identifier:          I9ttydqfYqiEXl/Ke5RpcfhHZvRgGfDgq3je+LQ73I4=
Subject key identifier:   55:07:F9:2A:9C:DA:CA:4C:19:C4:C2:91:F7:32:EC:D5:2B:28:76:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584929E3D7538DD9E8DDE966D900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53a5157d-9464-3dfd-a71f-54b2996fe3fa.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     396564
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:d7:53:8d:d9:e8:dd:e9:66:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=87bebe1f-a90f-4fe6-b243-bfee4f33faa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bc:af:13:f6:f7:b5:10:7a:41:ad:73:96:c5:
                    b3:b1:e4:7b:52:c4:d1:78:72:66:a2:8c:dc:ce:10:
                    bb:2b:a5:07:a8:78:ef:73:a2:b9:bd:ab:7f:f2:27:
                    3d:b0:de:b6:e9:0a:10:73:f8:dc:1d:51:e2:41:91:
                    d8:bd:37:2e:55:9a:2b:f6:aa:2a:23:4d:c0:10:c1:
                    e7:3f:ef:c8:52:fb:18:52:d4:24:4d:22:36:60:e9:
                    d7:43:f3:bd:c2:34:eb:ce:70:cb:b2:31:4b:04:4e:
                    a1:e9:a4:3e:6f:dd:af:41:d4:84:09:88:21:52:e1:
                    83:7d:6b:56:a2:ac:34:85:c7:2b:13:ad:27:f7:31:
                    9a:cb:3d:1a:9d:58:21:72:00:41:36:c3:3d:b8:fd:
                    54:04:96:fe:18:10:6b:93:64:a4:54:f8:a3:a7:e7:
                    0d:a6:63:30:0f:ed:d6:20:8e:80:cd:5c:98:ae:a5:
                    e2:b4:a9:f2:33:dc:00:de:2f:26:9d:3c:44:4a:9b:
                    76:6f:9b:88:fc:7c:c1:df:3a:1a:91:23:1b:76:30:
                    05:cd:d9:df:4d:bb:e7:8a:f2:1a:ce:62:e1:68:3b:
                    da:00:30:7a:a8:32:88:7e:44:6d:01:19:0f:dc:cf:
                    db:e3:72:17:9b:3c:b5:d0:e1:61:38:72:cd:f9:32:
                    6f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:07:F9:2A:9C:DA:CA:4C:19:C4:C2:91:F7:32:EC:D5:2B:28:76:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53a5157d-9464-3dfd-a71f-54b2996fe3fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ac:53:ba:bd:30:d4:b7:57:22:a4:22:14:59:4b:5a:7b:ab:
         a3:e6:c8:05:69:6f:a3:fc:04:a4:2e:2e:75:da:de:54:16:e5:
         fa:52:a9:73:29:b1:a7:8f:d2:ba:0f:a5:d2:da:82:06:9e:75:
         c0:86:3e:fa:af:e4:18:71:74:4b:1a:7d:ac:b9:0c:49:0e:06:
         6e:91:27:60:f4:5a:df:17:bb:c0:7a:2d:9a:f4:27:dd:a4:99:
         32:a2:f8:23:00:dd:62:6f:df:df:5e:de:09:7e:38:ad:a5:22:
         df:96:dc:da:03:39:b7:9d:32:79:91:47:63:9b:26:91:5b:4d:
         ca:a7:2e:b1:3c:22:69:d3:a1:e2:95:9c:b2:20:00:6f:2d:20:
         1b:d7:d8:ba:c8:b2:75:95:bc:7d:2c:44:0a:ca:9a:4f:4b:c7:
         1c:d7:01:9c:9c:dd:6e:4b:05:13:32:2c:e4:65:60:7e:38:9b:
         20:c7:ff:ef:d2:30:eb:a7:7a:ff:77:2f:95:d7:23:4e:69:6d:
         de:6d:ec:79:32:fc:82:21:09:bd:ae:5f:ad:c2:7e:21:77:c9:
         20:f7:81:a0:b0:23:81:90:f6:b9:db:7f:e9:49:80:d8:0a:48:
         a3:fe:69:47:80:64:1b:c3:d0:fc:1f:80:71:27:6e:a5:c6:bb:
         5a:2e:e6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:07 2025 by rpki-client