Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6ac7433-a50a-3311-84ff-aaecad515502.roa
File:                     f6ac7433-a50a-3311-84ff-aaecad515502.roa (raw, json)
Hash identifier:          +g0LdeYM+cGbyjYscQOs8wkhk/ZSMaAgSVk8KBKOmvo=
Subject key identifier:   A0:83:3F:91:DC:0E:28:56:75:D4:46:E9:17:A1:E7:68:75:22:61:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BFEB9AF7348375DFADD0FB40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6ac7433-a50a-3311-84ff-aaecad515502.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     397204
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:9a:f7:34:83:75:df:ad:d0:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=39ffc324-d976-47d8-9697-705d97177276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:01:bc:bb:e2:69:e5:7a:93:5a:4d:b1:64:
                    d9:ae:a6:78:0a:5a:38:c9:50:9e:81:9b:9d:91:d6:
                    63:50:be:4a:79:ee:bf:46:ab:b8:b8:b9:40:48:d7:
                    11:4d:19:c5:11:4f:bd:96:31:04:1d:f1:7d:40:cc:
                    c3:c3:e5:65:df:05:e3:d3:e9:bb:07:b2:87:f8:1a:
                    12:7f:02:5a:bb:4a:26:b2:c7:7a:b5:07:e1:8a:fb:
                    e8:57:a0:77:86:94:8f:16:f4:78:66:a6:0b:1a:9d:
                    95:13:ec:81:d2:c8:21:4b:fa:bb:c1:28:89:91:de:
                    0b:c7:c0:41:0b:86:a3:62:fa:25:9d:c8:2e:26:ab:
                    41:24:a3:87:76:30:d5:c5:fb:33:3a:88:2c:9b:f4:
                    12:47:49:e6:3d:48:d7:22:09:e9:09:11:5d:37:e6:
                    0f:12:9d:51:b7:df:a4:ba:da:8e:e6:51:48:1e:d8:
                    18:a6:49:a9:6e:82:87:5c:25:96:48:f3:89:7d:56:
                    89:f8:bf:40:f9:87:53:cd:2c:f6:48:72:c3:f1:0b:
                    34:4a:0b:8d:d9:21:8e:11:1d:0d:47:99:f5:fd:dc:
                    ad:e8:70:cf:70:34:63:d7:a0:a6:16:98:cb:9a:af:
                    ed:c3:37:85:04:d7:66:68:65:6d:93:6b:2a:61:35:
                    36:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:83:3F:91:DC:0E:28:56:75:D4:46:E9:17:A1:E7:68:75:22:61:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6ac7433-a50a-3311-84ff-aaecad515502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:ad:45:df:02:c0:80:da:0d:48:43:21:1b:ae:05:50:93:16:
         9d:5c:a3:d6:14:00:f9:eb:a0:3e:54:14:36:10:a0:35:20:e0:
         6f:f0:26:24:61:a1:c8:31:1c:28:77:e8:74:ee:83:ec:31:58:
         7e:75:e9:2a:cf:6c:f4:04:cd:0e:a1:af:52:c3:f2:37:9d:d8:
         2d:48:94:7c:a8:91:40:ad:8d:b8:35:10:98:22:02:f5:58:0d:
         01:f4:9a:a7:24:f5:d6:a1:41:c5:ab:fb:1a:5b:db:fc:5c:c1:
         c6:c0:b9:85:84:7d:bb:fe:54:07:4a:07:83:ff:50:de:0b:a5:
         97:e1:c2:ae:0f:84:c4:de:69:b8:0d:1e:26:17:01:a9:df:1a:
         92:86:90:85:05:d6:0f:4b:c7:32:fc:f0:e5:9d:88:e9:cc:02:
         00:9a:15:13:c8:cd:3d:8b:47:c1:3a:72:1c:6d:53:b5:aa:e1:
         2c:f7:e0:68:dd:f6:6d:c7:b5:00:21:c9:e0:74:80:84:d5:13:
         06:04:3b:3c:08:0a:4b:40:92:d4:f9:1f:6f:a9:67:cb:fa:51:
         fb:f9:e9:55:54:1c:95:ad:09:03:88:fa:43:8f:ef:51:70:45:
         e1:6c:74:ce:69:29:e2:8b:25:6f:e4:6a:42:df:cb:b8:eb:38:
         0b:51:d4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:35 2025 by rpki-client