Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4466e1a-54be-3933-94d3-7e6e47664b32.roa
File:                     b4466e1a-54be-3933-94d3-7e6e47664b32.roa (raw, json)
Hash identifier:          JRppXAGQitRGahaAQFvnKeiBpT6fpuKyoogy18u/U3k=
Subject key identifier:   87:18:F9:45:EB:3D:13:7C:D1:B2:E2:12:28:F6:6C:64:9A:77:B5:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848AC60CF5A07249DE6A8B85F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4466e1a-54be-3933-94d3-7e6e47664b32.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     36620
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:cf:5a:07:24:9d:e6:a8:b8:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=cfda5ff4-a107-4063-81a9-de07820d6106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e9:39:31:7e:97:46:2e:7e:b9:26:d9:70:ec:
                    2c:72:1c:70:9e:ab:a6:4d:e7:1a:ee:4d:de:51:64:
                    ba:3c:fd:7e:5b:8c:de:45:5f:0e:f1:55:dd:52:aa:
                    50:0e:d0:60:bb:6b:ce:7a:98:15:ae:ca:33:be:01:
                    56:27:c2:bc:28:da:3e:0b:be:08:29:ac:71:43:b3:
                    66:da:a2:cb:91:9e:39:4d:6b:d5:e0:96:e4:fd:05:
                    99:88:fe:f5:b6:8d:69:ce:26:11:42:7b:bc:64:81:
                    57:5a:c9:28:1d:df:ac:19:74:c2:26:8c:9f:c5:fe:
                    dd:e8:1d:31:d4:99:3e:33:0a:bb:57:c1:77:70:4a:
                    21:7b:93:11:ee:5b:30:a8:a8:0f:73:7a:73:30:27:
                    ad:a4:91:09:82:23:25:30:27:de:8c:32:76:f4:e7:
                    e9:18:ff:b5:d4:2f:cc:c0:a7:e1:ee:a7:94:b4:15:
                    5a:e7:1a:72:7a:3f:f7:db:7e:90:c5:23:f8:b6:db:
                    fb:c6:de:e6:d1:40:76:b8:b1:b0:bd:a0:b9:b7:90:
                    5d:96:29:c4:f2:08:4b:5f:de:8c:43:53:c6:da:c1:
                    e2:0b:14:5c:82:25:77:e5:51:7a:45:2f:92:8a:13:
                    f4:66:62:06:db:3c:35:50:d8:34:9b:04:89:6e:16:
                    b3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:18:F9:45:EB:3D:13:7C:D1:B2:E2:12:28:F6:6C:64:9A:77:B5:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4466e1a-54be-3933-94d3-7e6e47664b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c3:42:c1:63:3d:45:a6:96:7f:9f:e7:eb:7b:52:a5:f5:36:
         39:0c:b0:58:2f:32:d9:c3:46:a7:38:45:92:40:ef:44:67:92:
         6f:05:bf:da:4f:8a:da:95:68:d1:ea:de:e3:e5:c1:3e:3f:f6:
         58:f5:47:3e:26:5d:c9:9b:f1:61:a8:e5:d1:1e:a5:42:51:57:
         d5:18:53:38:29:d8:7d:4d:4d:0a:17:77:78:20:d7:1b:0b:25:
         54:24:e0:d9:1d:f3:60:90:dd:89:64:bc:3e:04:4a:39:29:a7:
         cb:d2:40:ae:6c:5c:79:e1:3d:eb:4a:19:06:bb:29:9f:48:9d:
         4a:06:13:59:5b:41:8d:db:ff:e9:70:58:f8:36:f6:6c:2a:3f:
         76:e4:ac:0e:d2:09:c0:06:25:c4:b2:3a:13:74:42:ae:2e:a4:
         a3:00:e3:d6:3c:9c:59:e8:33:45:90:db:14:69:1a:c5:9e:f7:
         42:1d:d9:9e:78:38:54:f3:d9:bc:c3:4e:f4:cc:46:9b:d5:e6:
         1d:38:d1:b9:23:d8:7f:34:08:19:8e:16:8e:e1:45:76:85:19:
         ba:70:6f:07:09:22:a6:7e:3c:02:6b:21:0c:0c:83:e1:b6:16:
         b2:6e:0f:7b:8a:1c:26:19:92:b2:da:2c:7d:aa:97:35:5c:ca:
         4b:cc:a1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:52 2025 by rpki-client