Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d992524c-c612-37e6-b92e-35135b6dd7d1.roa
File:                     d992524c-c612-37e6-b92e-35135b6dd7d1.roa (raw, json)
Hash identifier:          nOPSqLNmZDI9eqdt5Md4mfy9IMOewR+dGCYWUK9/LWg=
Subject key identifier:   CD:7C:4B:B3:9A:BA:71:21:BF:75:20:63:1C:11:33:FA:31:24:48:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BA563C4326978F3B7C1A7440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d992524c-c612-37e6-b92e-35135b6dd7d1.roa
Signing time:             Fri 31 Jan 2025 14:00:51 +0000
ROA not before:           Fri 31 Jan 2025 14:00:51 +0000
ROA not after:            Thu 01 May 2025 13:00:51 +0000
asID:                     396602
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:56:3c:43:26:97:8f:3b:7c:1a:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 31 14:00:51 2025 GMT
            Not After : May  1 13:00:51 2025 GMT
        Subject: CN=1bf1298f-d57a-41e8-a1bb-f0d019076d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:59:d4:fe:3e:6b:ef:7c:d6:4f:61:1c:35:
                    dc:db:26:89:b7:52:b6:f5:dc:2f:3e:fb:07:6c:08:
                    33:04:84:bc:db:3c:fa:b4:ed:76:28:fb:cf:87:22:
                    f5:25:30:06:e6:78:84:c7:54:1a:31:5b:fe:bd:1a:
                    77:c9:a1:e0:a5:6d:89:76:7b:27:1d:ca:bd:b0:38:
                    0a:1c:a1:4b:da:3d:73:4f:44:d6:46:56:98:81:35:
                    18:75:03:42:2e:d5:c5:6f:ac:9b:f6:64:9e:59:4f:
                    88:f9:40:17:fb:2e:f5:12:37:dd:f3:7d:2c:32:a9:
                    15:55:a8:64:db:82:e9:f0:ee:54:75:d1:18:16:88:
                    e9:5c:fd:a5:e0:44:4a:e3:87:61:42:f0:d9:9d:28:
                    50:83:5c:d7:72:00:09:63:fd:5b:08:9f:2b:8c:d3:
                    15:c9:4a:58:78:2b:b9:fd:ce:84:c0:ba:57:ab:5a:
                    8c:91:4e:e7:e3:31:d3:8c:f8:72:66:62:5b:e1:33:
                    33:da:7b:e4:f8:1d:63:4d:46:aa:53:78:6f:41:1d:
                    20:4f:d9:5c:f9:e6:a9:3c:d2:df:38:68:52:8f:4a:
                    6e:7b:fd:44:3e:04:10:27:4e:9c:3a:09:4f:d1:f9:
                    59:07:87:0c:75:a6:ee:e8:51:21:ef:fb:2b:aa:4e:
                    be:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7C:4B:B3:9A:BA:71:21:BF:75:20:63:1C:11:33:FA:31:24:48:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d992524c-c612-37e6-b92e-35135b6dd7d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2f:8f:b6:4f:df:5d:0a:4d:02:48:c0:1b:f9:79:78:e3:4e:
         6f:ab:21:0f:aa:0b:a8:2d:05:4b:f2:af:57:34:c4:63:9a:66:
         ee:c7:83:7e:48:eb:4b:cc:a9:de:e4:64:1a:0a:da:5a:ca:b8:
         61:27:f6:cf:1c:40:a5:b0:f2:6a:7e:91:dd:5e:70:bb:aa:aa:
         45:59:98:8d:c9:a4:07:59:a7:af:e7:5a:0b:3b:4a:65:97:e6:
         5e:4f:46:f6:d1:4d:f3:3e:66:90:0c:c6:3f:4a:6c:82:6d:7a:
         6f:67:af:24:9e:8d:6a:46:bd:82:4b:03:62:ac:ae:42:85:e4:
         7f:ab:04:72:1e:57:0e:6b:ba:9d:6a:da:31:3d:e8:7b:10:3b:
         d4:84:3f:54:71:86:48:16:d5:78:21:c7:02:0c:17:2b:43:03:
         54:59:a6:91:27:f9:82:59:d8:88:24:92:0d:c4:12:4c:02:b0:
         c9:79:6d:a3:0d:a0:57:6c:79:15:c9:14:39:08:19:96:75:65:
         da:6d:69:88:89:f5:81:18:6c:b3:83:75:41:a9:bf:b0:37:cf:
         84:8a:48:82:cf:44:e9:b6:79:f7:ae:3b:43:7a:00:21:1a:7e:
         fa:b4:48:15:a5:25:3e:4c:09:56:40:f9:83:85:5e:ff:52:d6:
         e2:55:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:02:09 2025 by rpki-client