Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa
File:                     a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa (raw, json)
Hash identifier:          TvvGPfq9pI7oxzvo2m7eMdbm0CuA9lVeEpgc8irNyvk=
Subject key identifier:   2F:97:77:B7:B5:61:1A:32:19:3C:C6:A6:29:94:AA:BE:0C:A6:2E:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858499F24BFB7473F1D8822AC3C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     396563
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:bf:b7:47:3f:1d:88:22:ac:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=43ae381f-3af5-4980-be1e-935c35904d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f7:c0:89:5f:8f:e8:1f:96:c9:52:ef:49:4e:
                    30:e7:30:4d:1d:d3:92:1e:a3:c1:7e:e4:18:66:8c:
                    20:87:75:47:20:d4:c6:3d:75:a2:f4:b8:66:90:37:
                    bb:37:d9:57:71:b1:36:ea:b9:1b:47:6a:8c:ce:aa:
                    f2:36:b7:37:d7:20:ff:88:da:68:a3:a2:e7:ca:cb:
                    6c:1e:5a:0a:21:99:1c:6f:91:91:e4:48:fb:da:44:
                    8c:cd:c2:f2:bc:f3:45:f4:c3:3c:50:9c:c5:70:5a:
                    ac:7d:56:ce:5d:ca:90:f2:63:57:b3:16:59:f8:b9:
                    8f:44:91:28:35:c1:72:13:73:a7:75:8a:d0:de:87:
                    db:87:11:e7:fe:1c:66:47:42:2d:21:44:93:46:ae:
                    cf:e3:9a:72:dd:ae:73:51:e2:31:6d:3f:71:dc:5b:
                    39:2a:6a:44:ea:f7:de:b4:b7:a3:b0:1d:f5:9c:29:
                    aa:34:ce:ca:cb:a8:48:61:26:c9:b0:d4:92:4e:7c:
                    6d:15:d9:42:6c:46:d6:d9:31:f4:3c:fe:fd:07:e0:
                    48:83:f6:4d:af:11:9c:62:4e:a5:41:e0:b1:60:f5:
                    8a:84:7f:fe:81:3a:d1:c7:92:90:d5:f7:a5:ee:d8:
                    fb:08:99:27:f5:b9:b8:5d:35:6b:4d:d9:27:bd:d9:
                    35:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:97:77:B7:B5:61:1A:32:19:3C:C6:A6:29:94:AA:BE:0C:A6:2E:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:e7:4a:1a:2f:3e:6d:5a:18:84:13:7a:5a:99:b5:82:3a:61:
         57:27:7f:26:0d:e9:a5:af:2b:c7:d4:b0:75:5a:dd:6f:40:a9:
         2e:b7:ac:0b:c1:c9:3f:41:15:79:e8:82:60:0d:03:f7:a1:7e:
         96:ae:3b:c3:44:c6:0a:a7:f0:fc:c9:de:fb:22:9c:ab:78:11:
         7d:d8:aa:ad:d4:b8:c0:e1:57:7c:89:c7:0a:f0:37:95:8a:05:
         9c:c2:89:41:a1:2c:cb:f8:80:c8:b1:ae:42:11:3a:71:3b:88:
         e1:e0:cb:6d:d7:7d:9a:2f:b9:5d:16:7b:07:28:9f:34:13:81:
         45:ed:5c:32:cb:41:d3:cd:43:7c:be:4e:3c:bb:3f:79:c4:1f:
         67:39:34:9c:74:42:57:d9:2b:72:ff:cf:4a:fb:ab:12:be:4d:
         dd:fa:9c:47:95:88:85:06:88:7b:a4:a7:4b:81:b0:ff:57:4d:
         4f:56:93:a7:be:f0:a2:da:70:aa:92:4c:80:76:3a:9e:cd:cd:
         49:d4:b1:e3:bd:61:d2:dd:df:fe:3c:90:f0:99:e8:56:b9:95:
         ab:bd:e9:c0:49:d8:62:21:15:28:63:68:07:23:59:4a:62:de:
         b7:72:68:80:a0:4f:86:8e:40:c3:4d:57:87:36:0f:93:f0:c9:
         fe:59:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:31:57 2025 by rpki-client