Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea3c36b9-f93f-30bb-b407-770231fac4c7.roa
File:                     ea3c36b9-f93f-30bb-b407-770231fac4c7.roa (raw, json)
Hash identifier:          ltW/dHA5PxBLUtV4a5eh9OBK4oL4fOWj185t2rdii9A=
Subject key identifier:   E5:5E:8B:99:DC:11:6B:40:3F:EA:93:A1:F9:D7:46:0A:76:DC:E1:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BFEB9D0D31B02F8741E9B400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea3c36b9-f93f-30bb-b407-770231fac4c7.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     396587
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:9d:0d:31:b0:2f:87:41:e9:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=38e235fa-337e-4e83-9613-1c82397288df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8d:f6:38:b9:b3:72:fc:8b:29:ec:d9:00:97:
                    fe:bd:0d:c3:0b:ef:21:26:53:ad:cc:ae:48:2a:09:
                    75:75:eb:e3:ef:ea:ae:18:fb:56:60:b3:37:e4:ab:
                    f3:5d:4e:22:d1:bd:71:34:a2:8d:3b:a4:1d:2d:b1:
                    97:9f:44:f5:2d:f2:cb:ea:6a:68:ef:f0:1b:29:8b:
                    46:cc:87:4d:ea:d5:3b:ea:fa:eb:67:a1:41:4c:9c:
                    89:7b:cd:74:af:25:27:16:26:48:af:26:0a:82:cf:
                    78:2b:cb:22:f4:b0:18:3b:f6:d5:11:85:f0:dd:9e:
                    82:a2:f5:ee:0d:01:b2:fc:a3:1c:50:a9:0a:1c:25:
                    62:cc:e4:98:b4:9c:83:a0:90:c7:76:9c:3f:ca:b7:
                    1f:5a:c7:a9:2d:e7:02:01:8d:68:12:c1:06:d9:3b:
                    75:3e:2f:f3:e0:4d:0d:dd:d4:5d:00:06:98:2a:55:
                    7e:2d:36:ab:db:5c:0d:5c:7f:c8:15:02:d9:d2:f9:
                    9a:aa:0d:ce:d5:97:18:66:37:1b:b2:ff:5e:80:18:
                    c4:70:ed:63:93:17:32:2d:08:b9:5d:0c:4a:45:60:
                    82:3d:ce:11:89:b4:17:fe:dc:33:6c:a5:c3:67:05:
                    17:4a:41:39:3b:89:08:b4:2e:4e:4b:59:5d:d6:9c:
                    ad:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5E:8B:99:DC:11:6B:40:3F:EA:93:A1:F9:D7:46:0A:76:DC:E1:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea3c36b9-f93f-30bb-b407-770231fac4c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:1b:6c:f7:5a:64:74:d2:1f:48:88:2c:bd:47:32:89:b8:ef:
         00:1b:a4:b3:28:86:85:0f:53:68:e9:0d:59:74:1a:db:8a:9c:
         f0:90:8c:bd:49:40:66:73:97:3c:7a:ce:14:49:bc:ea:e4:f5:
         8d:d4:c7:12:e4:a6:de:db:49:f5:53:9c:b4:ca:ea:93:c5:cb:
         60:5d:ca:d8:64:21:e3:00:53:e5:20:0b:7f:c7:67:cc:7b:1a:
         0b:40:dd:37:9f:3c:b1:ec:ed:d6:01:f7:fe:2f:e8:a3:d6:80:
         32:7f:6a:89:64:37:61:73:14:8c:f1:f5:14:e1:1e:c1:1c:f4:
         34:4e:32:70:52:c2:9f:75:3e:3d:50:e1:c0:4f:b4:55:a1:bf:
         6a:70:bd:ef:8b:d0:67:9e:dd:a5:ab:a1:de:f7:ff:a7:15:f1:
         2f:18:1d:6a:23:0e:c9:fb:2e:7f:1a:b4:bf:f9:84:24:57:92:
         11:e2:c9:e8:7d:34:a2:d7:d4:7e:55:c5:e0:48:a7:e6:50:ab:
         37:4c:fc:e0:be:75:dd:09:cc:61:8c:dd:f3:af:f7:bf:15:bd:
         fe:40:24:ff:1f:c6:88:36:7c:03:7b:d3:db:1e:28:a5:8c:23:
         24:eb:c8:e2:a5:a2:60:81:57:fa:f9:c3:b1:f8:14:02:6d:8c:
         11:f0:7d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:56 2025 by rpki-client