Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5837b5d1-17c3-3470-b901-56882c64552d.roa
File:                     5837b5d1-17c3-3470-b901-56882c64552d.roa (raw, json)
Hash identifier:          KdlGems2y1Sgdh09sYsIQR5+TTQjLrZr4vIWfcktc/g=
Subject key identifier:   13:DD:C4:2B:2D:0F:72:AF:14:5B:85:A1:2F:D0:40:7B:4A:F9:C6:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BFEB9C685ECD53FA7AD9B140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5837b5d1-17c3-3470-b901-56882c64552d.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     396574
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:9c:68:5e:cd:53:fa:7a:d9:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=55323635-8d36-4831-b87b-b81c62f2f54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:42:67:ef:e9:f5:f2:bb:5f:9f:56:55:ce:f6:
                    65:12:31:b2:f0:c3:9b:19:04:dc:ca:7d:f8:16:b9:
                    54:d9:a4:7e:7e:3c:04:97:ed:06:7b:83:ff:0a:ef:
                    1d:53:81:1a:ea:ef:62:a1:39:9b:fd:ba:72:e8:01:
                    51:bd:00:b6:5e:d8:97:88:e4:3f:4a:b5:b6:c7:f4:
                    e8:53:91:9b:8c:d8:2a:3e:3a:05:3e:f4:1b:8f:35:
                    08:d8:47:83:3c:f8:b3:ae:a4:4a:d1:5c:f7:69:9d:
                    18:e0:87:3d:a1:27:94:db:6f:18:c3:d8:aa:af:16:
                    68:69:66:5f:19:ab:98:7c:05:4f:6a:a8:a9:f6:64:
                    69:78:1c:bb:64:4b:4b:4b:56:6f:20:a7:02:2f:fd:
                    f5:df:a4:7f:d7:50:23:bc:d1:3d:a5:b6:ce:b1:a1:
                    8b:12:6d:5c:85:75:de:a6:57:35:8a:1d:4e:08:6c:
                    52:1d:70:fc:17:6f:83:96:2c:63:d9:33:aa:78:c0:
                    18:44:35:22:c5:4c:e9:78:29:57:49:b0:82:0e:bd:
                    79:32:f2:92:16:82:8d:96:37:12:ee:57:a9:58:eb:
                    2a:82:e8:99:6d:8c:50:f4:db:43:37:f1:a5:33:91:
                    f3:c5:ca:26:ab:a3:01:95:ee:54:22:cd:85:06:9d:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DD:C4:2B:2D:0F:72:AF:14:5B:85:A1:2F:D0:40:7B:4A:F9:C6:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5837b5d1-17c3-3470-b901-56882c64552d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:9c:dc:f2:15:93:9e:c2:12:7c:45:ce:68:cf:b9:c4:77:4d:
         07:22:8f:44:98:ab:d7:07:9c:31:91:fe:c6:2c:bf:77:5a:0a:
         c2:02:18:b4:66:ae:b9:14:a0:05:fd:84:f2:25:d8:70:34:b2:
         2e:63:88:85:0d:15:71:6d:80:ae:52:fa:c7:f3:90:be:6f:e1:
         ab:02:1f:69:00:68:b4:86:21:dd:e4:08:0c:09:14:48:b6:e3:
         e7:ce:32:f0:a7:3c:a6:40:c4:26:83:ba:53:be:a6:8d:5c:a8:
         50:b2:e3:a8:dd:e7:f4:03:11:02:7c:93:c2:be:1f:9f:01:44:
         1d:0f:d3:ad:db:9f:29:67:15:72:a1:52:b0:e8:e5:8f:00:d2:
         ed:74:c2:1c:88:59:e8:31:35:25:3b:ed:c2:ec:fa:4d:ba:e9:
         c6:0d:fc:8b:89:1b:69:9b:9a:4e:1c:5a:43:b5:1c:26:ac:0b:
         fc:c3:2b:f0:38:e8:e8:3d:d9:f1:84:72:97:7c:d6:16:4b:c9:
         b2:87:90:46:be:09:fd:be:4a:c9:05:ee:fe:3d:04:1e:77:ae:
         e7:de:c0:95:48:ab:f6:19:f7:2f:67:10:7f:a4:61:7b:3e:58:
         00:1c:bb:dd:19:4a:ee:27:09:f9:93:68:d8:91:ff:4c:9b:42:
         1b:84:19:c2
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi/65xoXs1T+nrZsUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
NTUzMjM2MzUtOGQzNi00ODMxLWI4N2ItYjgxYzYyZjJmNTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0Jn7+n18rtfn1ZVzvZlEjGy8MObGQTcyn34
FrlU2aR+fjwEl+0Ge4P/Cu8dU4Ea6u9ioTmb/bpy6AFRvQC2XtiXiOQ/SrW2x/To
U5GbjNgqPjoFPvQbjzUI2EeDPPizrqRK0Vz3aZ0Y4Ic9oSeU228Yw9iqrxZoaWZf
GauYfAVPaqip9mRpeBy7ZEtLS1ZvIKcCL/3136R/11AjvNE9pbbOsaGLEm1chXXe
plc1ih1OCGxSHXD8F2+Dlixj2TOqeMAYRDUixUzpeClXSbCCDr15MvKSFoKNljcS
7lepWOsqguiZbYxQ9NtDN/GlM5Hzxcomq6MBle5UIs2FBp122QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBPdxCstD3KvFFuFoS/QQHtK+cYxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTgzN2I1ZDEtMTdjMy0z
NDcwLWI5MDEtNTY4ODJjNjQ1NTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAWnNzyFZOewhJ8Rc5oz7nEd00HIo9EmKvXB5wx
kf7GLL93WgrCAhi0Zq65FKAF/YTyJdhwNLIuY4iFDRVxbYCuUvrH85C+b+GrAh9p
AGi0hiHd5AgMCRRItuPnzjLwpzymQMQmg7pTvqaNXKhQsuOo3ef0AxECfJPCvh+f
AUQdD9Ot258pZxVyoVKw6OWPANLtdMIciFnoMTUlO+3C7PpNuunGDfyLiRtpm5pO
HFpDtRwmrAv8wyvwOOjoPdnxhHKXfNYWS8myh5BGvgn9vkrJBe7+PQQed67n3sCV
SKv2GfcvZxB/pGF7PlgAHLvdGUruJwn5k2jYkf9Mm0IbhBnC
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:24:48 2025 by rpki-client