Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b05d6f6-cdbb-3145-9108-50c4624b178b.roa
File:                     6b05d6f6-cdbb-3145-9108-50c4624b178b.roa (raw, json)
Hash identifier:          jeuJkuBM5v1ncKKapleyUEORvvieXb9ho47ey5kXnp8=
Subject key identifier:   B8:AB:1E:76:F0:A5:AA:6A:9B:2D:20:9B:EA:DC:DE:E4:16:DB:30:6E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BA563BC113E1AA5D98052A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b05d6f6-cdbb-3145-9108-50c4624b178b.roa
Signing time:             Fri 31 Jan 2025 14:00:51 +0000
ROA not before:           Fri 31 Jan 2025 14:00:51 +0000
ROA not after:            Thu 01 May 2025 13:00:51 +0000
asID:                     396597
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:56:3b:c1:13:e1:aa:5d:98:05:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 31 14:00:51 2025 GMT
            Not After : May  1 13:00:51 2025 GMT
        Subject: CN=3c7c11c6-2694-4908-8ec5-bb644ee26a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:00:28:14:3e:63:4e:eb:23:3a:10:8e:b6:09:
                    e2:01:c6:09:0f:dd:92:ea:49:55:9a:6f:e1:75:62:
                    95:82:fc:1b:c7:63:fa:52:2d:0a:9d:8a:65:9d:59:
                    42:ea:5c:e8:1d:16:3e:44:23:bb:75:22:1a:63:37:
                    ee:61:54:de:30:95:82:d9:a4:81:5b:de:86:8f:62:
                    a7:c1:f3:bf:a0:27:e0:7b:83:55:72:4e:3b:56:af:
                    61:75:d1:b9:7d:9c:73:00:97:97:63:6d:7a:e8:41:
                    0b:aa:92:33:3e:c4:ed:46:9f:2d:3f:d5:86:7b:7f:
                    cc:f1:ca:af:d6:15:51:71:3c:6f:55:b6:b4:9b:2e:
                    28:01:92:ac:97:36:52:dd:8a:53:58:7a:64:1c:e5:
                    2e:82:a2:25:fa:d1:d1:27:2b:c9:2e:05:2d:01:51:
                    fd:1c:f4:c4:45:8a:fb:d7:3d:06:48:8c:6a:5f:22:
                    bd:05:94:a9:79:ef:44:85:49:88:d6:11:5a:32:1c:
                    2e:51:db:9a:de:4c:c6:46:b1:59:63:42:9c:4a:24:
                    51:81:90:fe:2c:2b:8a:43:2b:41:ea:1a:65:20:7f:
                    c5:30:94:a3:05:72:fa:b8:3e:b2:94:51:55:46:e2:
                    d1:1e:ca:be:a6:52:ac:6e:f0:a8:b5:7a:ca:73:5b:
                    c8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AB:1E:76:F0:A5:AA:6A:9B:2D:20:9B:EA:DC:DE:E4:16:DB:30:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b05d6f6-cdbb-3145-9108-50c4624b178b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:1f:06:68:46:ae:ca:af:ba:3e:44:bf:06:00:e6:98:b1:d3:
         23:7f:26:12:80:43:99:a6:c6:93:90:db:fc:8c:1d:20:f8:e0:
         22:1a:8f:91:f2:eb:81:8d:06:c3:8c:07:42:c1:18:22:2a:7f:
         ab:4d:af:6e:bb:1e:6e:51:df:a7:95:34:50:a4:0b:10:f0:64:
         66:74:8f:fb:6b:8d:2a:c4:b2:f6:69:e3:f9:15:5e:50:c9:91:
         05:11:38:8c:7e:2d:a0:3b:fb:05:a0:f3:ab:af:61:0c:7e:3b:
         88:d6:75:a7:d0:60:7a:7a:ec:6c:cb:9c:43:41:5b:a1:86:79:
         f0:b6:28:4d:23:ac:64:0c:19:c5:5b:b8:b0:4f:ad:b4:70:92:
         71:89:be:ef:5c:01:39:d3:22:37:85:49:ef:c5:4d:39:ac:90:
         66:e0:a3:9e:27:43:bc:eb:fd:26:62:20:96:61:b6:d6:09:8d:
         3d:43:22:96:1c:10:b6:be:48:be:88:6e:38:92:1a:86:f1:3b:
         97:0e:df:11:7d:c8:8a:e2:2c:ec:dd:08:74:bd:dc:19:d2:e6:
         b3:b7:9a:08:4f:6a:ea:83:33:91:db:51:f0:0d:41:69:4e:67:
         ad:c1:ea:50:fc:00:b0:21:1d:62:d5:26:63:40:31:23:5c:03:
         39:57:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:43 2025 by rpki-client