Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9947e74a-2b88-301d-83ab-739dec8863da.roa
File:                     9947e74a-2b88-301d-83ab-739dec8863da.roa (raw, json)
Hash identifier:          ZJ2OwCD5Xrmcxc7+w8QGZ6eEH94ugRCX1LwSaoHPPVs=
Subject key identifier:   8A:27:8E:4A:B1:68:0D:D0:DF:C4:53:73:B6:6D:FC:63:1C:60:00:0B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BA56386C5A1FF053D9F4CD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9947e74a-2b88-301d-83ab-739dec8863da.roa
Signing time:             Fri 31 Jan 2025 14:00:51 +0000
ROA not before:           Fri 31 Jan 2025 14:00:51 +0000
ROA not after:            Thu 01 May 2025 13:00:51 +0000
asID:                     396593
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:56:38:6c:5a:1f:f0:53:d9:f4:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 31 14:00:51 2025 GMT
            Not After : May  1 13:00:51 2025 GMT
        Subject: CN=8d274449-1f52-440a-913c-cfc810427e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:54:1d:62:ac:66:e6:89:86:b5:8e:ee:d4:1c:
                    8a:43:74:b0:45:af:ad:12:cb:80:ed:ef:77:e9:9f:
                    87:44:56:69:ce:69:ad:dd:28:12:76:cc:b5:a2:87:
                    84:72:e1:b7:eb:82:69:bb:e8:a2:7e:b3:4d:98:0a:
                    33:9d:13:d4:a8:f4:64:c2:8f:6c:57:76:3f:f5:d1:
                    57:29:6f:80:71:e8:71:e1:8f:30:b9:32:c2:37:2c:
                    cb:4e:25:c5:17:15:42:43:1f:41:ff:56:87:f3:9c:
                    ea:67:5d:1e:ff:29:aa:54:10:6d:b4:66:d5:af:fa:
                    94:ec:ca:91:65:46:51:30:44:43:cc:75:60:d0:63:
                    83:67:0b:59:38:a8:9e:07:11:94:94:4e:9d:5c:19:
                    3f:5b:0a:15:c2:d9:8c:ed:cc:24:31:e8:9d:e7:90:
                    1a:c4:99:dc:d9:ea:75:c0:89:18:1b:f2:50:b2:fd:
                    45:5f:71:37:84:e0:39:ec:26:3b:29:42:4b:e9:8f:
                    19:4f:5b:d4:3c:96:85:bc:4e:73:1a:67:01:a4:6f:
                    23:ef:4e:b4:58:65:cd:9c:69:f0:4d:84:d2:cf:6d:
                    c0:32:b2:e2:f6:04:5c:21:86:2a:7e:f8:6f:06:5c:
                    30:53:7c:c0:67:78:12:ac:c7:be:ee:a1:5e:af:81:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:27:8E:4A:B1:68:0D:D0:DF:C4:53:73:B6:6D:FC:63:1C:60:00:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9947e74a-2b88-301d-83ab-739dec8863da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d8:8b:eb:ac:b6:25:86:56:95:c8:0b:9b:02:e7:45:4e:63:
         c4:55:f8:cc:84:56:71:d8:a7:06:d2:f1:86:16:67:9f:07:40:
         a8:f4:49:07:30:a8:06:46:89:3d:7e:d9:5e:b2:5a:1e:8a:fa:
         5a:57:74:f7:c4:58:98:aa:2d:3a:86:36:a9:1d:ae:3a:57:42:
         00:6b:fb:e9:e2:f6:a9:13:1c:0f:74:7d:c0:b5:03:eb:6b:29:
         14:34:40:31:7b:34:08:9d:35:40:d9:99:e7:94:3f:e8:dc:c9:
         90:d3:65:56:76:0c:80:bf:b9:d7:ef:e7:62:8b:82:bc:a9:b4:
         84:4b:ab:3e:a7:e7:8d:e7:8e:10:03:c7:1b:b4:9a:ac:39:17:
         d5:38:2f:9f:9a:e2:3e:12:1f:f4:50:e1:ff:b9:96:f2:c6:55:
         02:63:ec:44:9e:20:d7:f6:01:79:7b:42:c4:2b:74:8a:bf:c4:
         36:3a:7c:38:72:21:ac:06:61:be:b6:3f:9b:b3:0f:e3:50:ac:
         ca:97:5a:95:b6:3d:9d:44:eb:c3:ad:60:2c:54:25:ff:1a:31:
         6b:ed:4f:86:4f:d5:d3:8f:09:d6:27:07:51:91:e8:55:c5:c8:
         1a:58:6a:5b:a2:6d:ff:e1:35:0d:c1:da:b7:8d:19:68:1f:3d:
         80:59:78:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:22 2025 by rpki-client