Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c993ce6-e9d5-3ac7-921f-9040c454ed68.roa
File:                     7c993ce6-e9d5-3ac7-921f-9040c454ed68.roa (raw, json)
Hash identifier:          cxwLbc1HAt5oay4qExIqKdhhJ1j4aAP8sCe7Jch+i3w=
Subject key identifier:   1F:EE:2C:05:23:05:D0:23:2E:7C:E0:D1:57:F9:35:76:42:31:3D:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BFEB99AFC78551D781DB9F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c993ce6-e9d5-3ac7-921f-9040c454ed68.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     22547
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:99:af:c7:85:51:d7:81:db:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=6e8055ac-f2a8-49e9-b4c9-57db951cdee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d4:1a:ac:16:de:32:77:4c:7b:85:8f:f4:c1:
                    fc:d1:e2:d5:09:2b:31:52:91:e3:1e:50:49:a3:83:
                    fc:4a:77:76:c6:46:c6:69:be:3b:6c:ab:0f:3f:d2:
                    57:2a:4d:bd:64:eb:12:08:4b:02:17:8d:ea:3d:a1:
                    31:a6:87:96:07:3f:c6:d7:50:be:ad:47:ee:42:42:
                    32:42:1f:96:07:ba:50:58:fa:3b:f5:3f:46:a8:02:
                    24:e4:5d:fc:bc:e1:c4:d8:03:90:49:de:67:4d:3b:
                    84:13:79:da:f6:90:f1:d9:64:02:8c:70:5a:ef:20:
                    70:b9:e7:08:95:25:fb:a9:8c:01:7e:d9:5c:7d:f9:
                    f1:d4:db:77:da:53:03:94:41:65:da:62:87:92:fd:
                    fb:20:c3:05:25:4a:81:90:66:91:be:d1:35:ae:1f:
                    b8:b8:97:c5:f7:d4:c1:7a:8b:49:4b:4c:32:f7:4f:
                    0a:b9:ed:a6:78:2f:42:65:c4:cf:e6:08:fd:57:72:
                    19:f8:77:90:ef:b6:d9:c2:34:57:ea:f9:f8:c1:74:
                    1a:a8:b5:46:52:61:c5:eb:79:be:27:fe:98:f5:10:
                    69:41:f5:b5:b4:c7:bb:ac:4b:85:f1:d3:a1:ee:14:
                    b6:78:3e:17:e2:66:8b:5d:07:d1:9d:14:d9:59:b3:
                    a9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EE:2C:05:23:05:D0:23:2E:7C:E0:D1:57:F9:35:76:42:31:3D:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c993ce6-e9d5-3ac7-921f-9040c454ed68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:47:e8:f4:b1:ea:62:ca:94:4e:80:01:fc:78:4b:ed:f7:c0:
         0c:aa:35:db:ed:05:70:ff:ba:fd:b7:4b:1b:ce:87:a7:28:51:
         1d:b0:03:6b:e8:e0:0d:47:9f:1f:6a:29:7c:2d:e0:1f:35:ca:
         4e:9e:46:43:2c:ee:dc:4d:31:fb:93:37:39:6b:69:80:3d:9d:
         e4:2f:a7:d2:a9:38:f3:6d:97:51:48:11:c5:37:79:f3:81:95:
         f8:4f:4d:ca:bb:c9:87:95:c6:67:fc:57:8e:1a:62:48:67:5a:
         09:8f:be:af:c1:01:e1:b1:39:f3:67:65:a2:21:a6:6c:9d:f8:
         21:52:3c:6d:38:49:47:e6:37:a0:b5:e0:a5:4b:7f:95:d1:b6:
         50:6f:c2:e8:08:b7:37:4c:7b:a8:a0:dc:a0:b3:04:8e:08:59:
         15:b5:25:43:d6:d9:d0:d4:82:51:3b:a1:6d:f1:5c:0d:f4:4a:
         bd:0a:04:53:c0:b7:32:9b:52:e5:54:27:4e:ac:40:60:da:8a:
         62:ae:6c:97:f9:61:a0:df:2c:8c:3b:1f:36:c1:9f:a5:4b:0e:
         91:74:b5:58:f2:c2:95:46:8e:de:7e:90:c9:df:9b:09:94:fd:
         23:60:f8:e5:09:2a:6e:67:41:64:32:52:c9:d7:35:b8:a0:c7:
         94:80:ca:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:38 2025 by rpki-client