Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8b7285b-0c4e-3170-b233-aa5ff189aa71.roa
File:                     c8b7285b-0c4e-3170-b233-aa5ff189aa71.roa (raw, json)
Hash identifier:          REillYoYaEngi8nsaw15Gg+krg8arYsd4hZIIWWfIL4=
Subject key identifier:   B1:41:29:73:1B:8A:34:5B:B5:88:E8:76:C1:0A:D1:7F:3B:AB:0C:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BFEB9C0A0C2FAEF45393B580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8b7285b-0c4e-3170-b233-aa5ff189aa71.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     396577
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:9c:0a:0c:2f:ae:f4:53:93:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=6f57db54-5810-4e44-8fa6-351d90f4fbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:9d:5b:03:0c:8a:b3:a3:f9:60:99:6c:3d:
                    0b:68:f7:da:b3:b7:7d:9a:a3:08:06:13:23:62:0d:
                    4d:2f:f0:a6:2a:3a:a4:17:75:65:79:00:b4:27:7b:
                    31:c3:9c:ba:35:4d:9f:af:a5:1b:65:78:36:b6:45:
                    f2:e1:37:be:8e:5e:47:b8:50:8c:ef:1e:c2:76:1a:
                    e7:1d:a9:eb:61:56:2a:a5:87:8d:d9:2c:6d:e9:59:
                    be:20:a1:0b:b2:d0:5f:9a:75:2f:a7:eb:b2:0d:71:
                    90:ac:6f:3d:d5:a8:02:f8:48:3f:7a:2f:bb:e4:59:
                    c3:22:fd:60:f3:53:13:59:a1:25:d9:35:ac:b2:75:
                    53:64:ab:57:12:63:02:46:73:7a:4e:26:a6:7d:74:
                    a6:03:15:fc:9f:05:e8:64:af:fe:08:60:0e:0e:f0:
                    c7:56:99:f2:05:bf:02:32:86:be:46:4c:5a:d3:4d:
                    b7:d9:ea:78:10:fd:44:54:8a:bf:05:54:2d:f7:fd:
                    9c:98:10:0c:81:d7:aa:18:d1:01:0b:f8:9c:eb:8f:
                    48:a1:76:94:94:69:6d:f1:54:b4:8d:79:a6:13:fd:
                    e1:41:ae:a5:d6:b2:98:1c:d1:df:a5:ab:20:05:db:
                    6f:19:86:cf:2b:c6:4c:11:32:48:39:91:9c:1e:67:
                    0f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:41:29:73:1B:8A:34:5B:B5:88:E8:76:C1:0A:D1:7F:3B:AB:0C:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8b7285b-0c4e-3170-b233-aa5ff189aa71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:3b:cb:df:d5:fb:8d:c3:24:4e:a5:ec:04:f6:46:5b:05:8b:
         2e:3b:39:ad:f1:bb:70:a2:dd:98:bd:a4:c0:14:a3:12:0b:8c:
         68:88:19:d8:1f:53:ac:98:36:de:b0:26:3f:2c:9d:3d:6c:13:
         b2:5b:fc:0a:97:ff:18:62:ff:dc:e9:a5:50:25:7a:05:15:1c:
         26:1d:1d:93:f6:51:ae:69:34:d4:95:86:41:b4:ab:e5:f4:6e:
         51:31:f8:96:67:32:ce:7f:5b:3b:1a:31:95:64:b3:57:e4:9c:
         bd:25:a1:8c:7e:39:e9:22:3e:de:10:15:1c:ad:c2:99:ca:34:
         c2:f0:7a:0a:df:bc:93:40:e4:c3:60:6c:41:c2:2e:87:21:67:
         6d:f2:bb:41:e4:e3:bf:10:e3:59:23:a9:db:15:98:b1:99:13:
         3d:c2:9f:a8:2f:8d:c3:41:7f:e6:94:fb:5c:17:12:5e:0d:b4:
         73:44:6f:69:be:9a:0c:60:fd:22:fb:e1:5e:7c:01:ba:88:26:
         96:d1:07:5b:c2:1f:0a:c0:c7:2e:b5:14:a5:b2:b9:aa:bb:30:
         d3:34:f1:ee:65:59:56:d7:a8:15:e4:e6:a6:95:67:2a:ae:e0:
         36:ee:83:7f:f4:e1:60:c7:e8:40:21:3c:52:60:fc:df:1d:44:
         c5:58:45:e7
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi/65wKDC+u9FOTtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
NmY1N2RiNTQtNTgxMC00ZTQ0LThmYTYtMzUxZDkwZjRmYmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4KdWwMMirOj+WCZbD0LaPfas7d9mqMIBhMj
Yg1NL/CmKjqkF3VleQC0J3sxw5y6NU2fr6UbZXg2tkXy4Te+jl5HuFCM7x7Cdhrn
HanrYVYqpYeN2Sxt6Vm+IKELstBfmnUvp+uyDXGQrG891agC+Eg/ei+75FnDIv1g
81MTWaEl2TWssnVTZKtXEmMCRnN6TiamfXSmAxX8nwXoZK/+CGAODvDHVpnyBb8C
Moa+Rkxa00232ep4EP1EVIq/BVQt9/2cmBAMgdeqGNEBC/ic649IoXaUlGlt8VS0
jXmmE/3hQa6l1rKYHNHfpasgBdtvGYbPK8ZMETJIOZGcHmcPMQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLFBKXMbijRbtYjodsEK0X87qwyxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzhiNzI4NWItMGM0ZS0z
MTcwLWIyMzMtYWE1ZmYxODlhYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB+O8vf1fuNwyROpewE9kZbBYsuOzmt8btwot2Y
vaTAFKMSC4xoiBnYH1OsmDbesCY/LJ09bBOyW/wKl/8YYv/c6aVQJXoFFRwmHR2T
9lGuaTTUlYZBtKvl9G5RMfiWZzLOf1s7GjGVZLNX5Jy9JaGMfjnpIj7eEBUcrcKZ
yjTC8HoK37yTQOTDYGxBwi6HIWdt8rtB5OO/EONZI6nbFZixmRM9wp+oL43DQX/m
lPtcFxJeDbRzRG9pvpoMYP0i++FefAG6iCaW0Qdbwh8KwMcutRSlsrmquzDTNPHu
ZVlW16gV5OamlWcqruA27oN/9OFgx+hAITxSYPzfHUTFWEXn
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:47 2025 by rpki-client