Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62212970-2469-3a81-8eef-70f91a2c427c.roa
File:                     62212970-2469-3a81-8eef-70f91a2c427c.roa (raw, json)
Hash identifier:          /lAaA564G8LLus90H+av4g/wVfFM/sld0bcP8zNAeFg=
Subject key identifier:   9A:04:95:FD:09:6D:53:D3:27:EE:1F:76:AE:45:4B:95:B3:6E:6D:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BFEB9A0346A97C4670393B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62212970-2469-3a81-8eef-70f91a2c427c.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     211369
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:9a:03:46:a9:7c:46:70:39:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=bbf55aae-61c1-42ac-b618-dc968f7ccd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:62:22:a6:d1:12:76:d9:3c:0b:41:1e:57:1b:
                    d9:6e:cc:3f:0e:e8:23:9a:28:15:a6:3a:f1:fa:71:
                    79:58:4f:dd:c7:04:24:4f:4c:3c:85:30:53:02:21:
                    f1:51:08:41:90:3e:1b:2b:cb:5a:76:2a:96:c9:d3:
                    ea:bf:54:75:ce:27:2b:03:8a:8c:75:24:3a:ae:09:
                    e5:ea:90:13:fd:fa:13:82:a3:4e:62:b0:0c:ca:91:
                    6e:7b:d7:4f:3b:44:6d:d0:9c:30:ae:c8:33:4f:5c:
                    6d:fc:3b:04:d6:6c:34:ab:83:13:e7:3f:95:21:17:
                    d5:4a:46:35:6f:49:a5:34:51:46:ed:72:d5:ad:1d:
                    38:64:40:11:4f:7c:61:e1:32:00:19:65:05:12:16:
                    c0:d8:c7:cd:4b:da:c5:9f:fd:c5:57:4f:0a:b2:93:
                    3f:c9:c2:60:85:2c:87:eb:0b:f1:6c:22:05:13:a4:
                    73:96:8d:d8:5d:a1:b1:c7:f4:87:4d:d5:87:ad:5e:
                    ba:58:70:cb:c1:9a:12:6c:d9:9f:3a:64:28:32:ba:
                    7c:4a:63:58:f8:02:82:b4:74:bb:29:32:96:32:cd:
                    8e:1b:db:c4:34:24:42:2e:53:0c:dc:86:fa:4e:3a:
                    f0:6d:14:95:94:83:cc:ed:09:51:d6:bf:3b:b6:ca:
                    3b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:04:95:FD:09:6D:53:D3:27:EE:1F:76:AE:45:4B:95:B3:6E:6D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62212970-2469-3a81-8eef-70f91a2c427c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:e1:b5:f5:a5:b8:e9:ca:17:b1:d8:b8:43:fc:ad:12:2e:5c:
         75:a6:62:ef:7e:8f:e9:00:ae:47:29:af:5e:54:c8:ba:6e:3f:
         c3:e2:fe:fb:f3:14:6f:67:76:70:5f:65:ee:a7:87:2e:30:38:
         e2:39:87:fa:62:e3:c3:f6:7a:a3:62:3b:3b:fd:47:01:59:07:
         15:38:70:2d:bf:c9:10:32:5a:50:79:3c:ea:53:d7:13:82:d7:
         f5:56:1b:da:8d:1f:dc:3f:f4:93:55:89:c2:9e:35:67:e0:4e:
         bf:fd:a9:2f:e2:ec:5f:23:e0:6a:f8:f7:fc:c7:d6:e7:9c:d4:
         2f:bd:07:2d:3b:1b:2f:5d:1c:b6:9c:1a:fc:93:b3:2b:70:d5:
         0a:0b:69:e1:8e:c3:3d:f0:b0:d3:9c:48:44:b2:56:9b:d8:13:
         02:b6:cc:bc:04:e7:c6:9c:de:b1:d2:0b:1d:c4:b8:90:2f:c9:
         0c:b9:e3:51:87:21:85:41:1c:ad:42:be:53:63:d5:46:85:c4:
         e2:f6:52:a6:50:ed:83:71:ba:64:ac:5a:cb:b9:54:72:2b:56:
         00:2d:83:84:18:b1:e0:e1:13:71:06:0c:7e:06:61:42:83:66:
         8b:4e:74:02:69:51:8c:39:b5:1a:f1:da:73:3d:83:82:0a:76:
         8a:1b:48:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:48 2025 by rpki-client