Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e01bbdd9-cc72-3488-8d2e-1ba5e1e505be.roa
File:                     e01bbdd9-cc72-3488-8d2e-1ba5e1e505be.roa (raw, json)
Hash identifier:          DhrTYq4kBLnSsNUPZU3qkk2anOZUjMRkQNdrNAwpAE8=
Subject key identifier:   75:FE:B9:BB:9A:67:EE:F9:5D:5C:3C:17:63:9C:0C:4E:80:22:0C:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BFEB9E37529DFD4639A4A7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e01bbdd9-cc72-3488-8d2e-1ba5e1e505be.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     396614
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:9e:37:52:9d:fd:46:39:a4:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=daea416d-957c-4614-93fe-62f9c7063ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:5d:d4:61:43:b6:fd:c3:6a:8c:e5:7a:30:
                    8d:9a:b7:03:a3:ad:2e:8d:3f:3a:8e:6b:d8:34:f8:
                    a2:1f:97:36:cf:01:d2:10:5d:fe:01:b7:19:2a:64:
                    e9:20:b0:c8:b1:fc:2f:e2:17:ef:67:2e:7c:2f:f1:
                    67:b4:d2:7f:43:df:90:6c:76:a4:78:45:12:e0:9e:
                    0e:80:d1:cd:25:1e:e6:f3:e0:37:36:df:38:b5:0a:
                    6a:fb:f6:13:cb:7f:17:f5:4d:f9:3a:fd:73:44:98:
                    e9:8a:82:16:2b:8e:16:6d:bc:88:8b:93:ed:fa:6a:
                    e2:2d:33:55:82:1c:88:aa:a2:b9:b3:a8:bf:ae:4f:
                    e1:b2:f5:39:a1:d2:9b:f6:55:63:12:f6:40:6b:ff:
                    f9:56:14:a1:28:29:52:40:b0:01:fa:ec:c2:eb:af:
                    cd:20:a1:d2:55:f7:e4:95:75:25:4c:d0:97:b3:95:
                    d8:69:20:fc:5f:3e:1e:73:8e:64:35:1f:21:f1:08:
                    d0:be:7f:01:4d:72:88:e8:4d:61:4a:ab:f2:76:1c:
                    15:37:a2:15:ba:6d:43:36:7b:1b:f5:a2:17:75:ba:
                    dd:0b:10:d8:94:18:d9:4e:82:52:46:9a:3b:9b:85:
                    a3:7f:9c:b6:35:07:ce:35:59:09:5e:e7:00:23:db:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FE:B9:BB:9A:67:EE:F9:5D:5C:3C:17:63:9C:0C:4E:80:22:0C:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e01bbdd9-cc72-3488-8d2e-1ba5e1e505be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:6d:88:6f:0f:d1:ed:44:d5:00:d4:14:f9:9e:87:5b:c3:ec:
         5b:fb:a3:11:89:2b:7f:21:9b:82:0b:74:e3:2a:71:b4:88:30:
         0f:75:9b:fa:f2:4e:bb:3e:7f:3d:d1:5c:e3:8f:de:54:28:ab:
         a6:97:5c:cf:1b:e2:b2:20:04:92:29:eb:83:57:91:9e:53:10:
         c9:86:14:4d:ab:0b:61:ef:a8:9c:aa:75:93:c6:f6:d5:8f:bd:
         df:28:90:a1:db:49:10:ca:0a:b1:0b:0e:45:72:de:3e:29:f2:
         68:11:dd:0d:22:2d:c1:5b:8f:9b:f2:f6:9d:97:d1:3d:b2:d3:
         c6:5f:83:b5:48:1d:f6:76:6b:4e:b5:c7:a5:72:5b:2d:6a:d0:
         f8:2d:07:f8:85:c4:c7:2e:1f:05:46:66:60:f2:45:6a:af:77:
         24:74:dc:d1:a4:97:b6:e4:1c:21:8a:3d:55:3e:cd:56:a7:a3:
         3a:2d:a0:2d:a3:93:52:51:02:d9:e3:17:61:b9:2c:42:82:83:
         86:bf:47:4d:df:e8:69:f3:ba:2a:96:ef:65:30:bd:f6:3a:fa:
         2a:6c:66:d6:c8:58:27:87:e3:66:a2:d8:fb:36:9c:35:c4:05:
         27:a7:75:82:b2:1a:d1:cf:38:fe:f2:9a:19:9d:26:05:36:c1:
         24:45:48:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:53 2025 by rpki-client