Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da930c84-a9fc-33cf-b885-0856300cd6e0.roa
File:                     da930c84-a9fc-33cf-b885-0856300cd6e0.roa (raw, json)
Hash identifier:          EhksxcIxvfVxAdORz+xxgHXCg/IfEj0m0rLx4uEozYQ=
Subject key identifier:   DE:E3:62:D2:E8:93:1F:AE:7C:46:3B:4A:D3:14:50:03:AA:75:23:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BFEB98E507D0AAAB20ADFA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da930c84-a9fc-33cf-b885-0856300cd6e0.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     397196
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:98:e5:07:d0:aa:ab:20:ad:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=807f5ca6-ea19-468c-913b-981c8836994d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:8b:bb:dd:e1:c2:8c:a9:d7:d9:c8:6c:d1:
                    3f:e4:cf:2e:bd:52:43:21:ed:17:85:ed:e6:ce:54:
                    32:16:fd:d6:7d:b8:d3:47:2b:14:c8:dc:26:72:13:
                    38:dc:a6:57:69:72:79:f0:e1:ef:3e:bd:28:4d:11:
                    35:03:9a:bc:f9:1a:1c:dc:e7:b8:03:08:b5:d6:57:
                    8c:bf:48:8d:06:68:83:95:66:04:78:8e:32:88:c3:
                    d0:c2:e1:71:04:61:e8:a0:f4:df:e4:7d:51:04:cb:
                    03:fb:bd:26:e1:f1:9b:d9:e4:fd:19:4d:b2:95:03:
                    f8:62:52:dd:29:29:e5:92:f0:e6:bb:88:54:6a:e9:
                    f7:81:f9:b6:3b:9e:96:01:b6:38:e7:17:70:ee:13:
                    0c:8d:0d:95:d1:c9:5a:7f:fa:3e:c1:68:75:c0:39:
                    48:14:da:b1:ad:ec:ed:df:e8:86:88:2b:2d:39:ac:
                    b6:41:bd:fc:88:fb:63:9f:b5:17:2b:36:b8:55:ed:
                    39:34:3e:0d:71:1c:3f:2d:e9:13:b4:20:76:46:e7:
                    e1:a6:63:45:8f:2e:27:7b:a1:5e:6f:b6:c6:11:69:
                    b7:c0:69:2c:72:04:df:4e:2d:99:74:a3:ca:62:88:
                    76:41:4d:00:17:ef:ac:67:c7:a2:29:ff:ab:49:a7:
                    1a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E3:62:D2:E8:93:1F:AE:7C:46:3B:4A:D3:14:50:03:AA:75:23:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da930c84-a9fc-33cf-b885-0856300cd6e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:81:b7:d6:1f:dc:75:db:94:d2:c9:c1:a0:8b:1d:0e:6f:0f:
         b3:db:dc:9f:e0:5b:d6:2c:1b:75:7a:f9:a3:45:0a:75:d7:fd:
         a7:9b:ec:1e:b4:88:3d:89:73:28:74:27:fd:b9:65:95:ad:96:
         bd:78:38:d7:4e:5e:bc:6a:25:2b:aa:63:2d:2a:24:f8:2c:7b:
         1c:9a:72:f4:8d:8a:e0:2d:b0:a9:5f:95:ef:4d:ee:a2:25:fe:
         3b:e6:02:5b:2b:89:38:f7:e5:ab:fb:3f:1b:2f:2f:e9:e9:04:
         82:4c:a5:27:05:c0:dd:8b:d2:4e:43:36:14:30:4f:3f:bf:1a:
         fa:b1:99:30:25:99:c6:26:81:a6:e5:87:9c:b6:8a:dc:a5:90:
         68:b4:36:c7:f6:f6:12:cc:ff:9e:01:d2:c0:f1:12:fb:ff:6a:
         31:5e:15:b2:3e:7e:92:06:95:86:e4:df:e1:33:50:2f:e3:33:
         37:03:f3:23:cc:08:b4:35:4e:8c:a8:98:d1:b3:a8:21:96:90:
         70:31:47:ea:9b:ed:7b:b2:a3:ef:86:3d:1d:e2:2e:bc:15:56:
         64:b3:45:1d:07:a7:45:c1:ec:e2:24:1b:94:6c:6f:d3:4b:09:
         19:cf:89:b4:1c:17:31:b6:83:f7:57:ac:39:1b:51:30:f2:a5:
         4b:9f:86:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:01 2025 by rpki-client