Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/139331fd-3e86-3346-8ceb-e14c6cae128f.roa
File:                     139331fd-3e86-3346-8ceb-e14c6cae128f.roa (raw, json)
Hash identifier:          C1p+eqEjp2mnNwPSKykCEDtUAunu+opC2ILFB2zAG/Q=
Subject key identifier:   15:2C:FE:F8:7F:7D:82:7F:2F:CB:B1:CD:6E:1D:69:2C:00:55:A4:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F4B7C6816E772240DC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/139331fd-3e86-3346-8ceb-e14c6cae128f.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     397195
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f4:b7:c6:81:6e:77:22:40:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=69e63418-62ab-4468-8944-bbc27eca2d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:92:c0:e0:e8:8c:6d:96:23:92:98:54:5f:b8:
                    30:fa:4e:ac:be:3a:03:a8:7b:e1:af:b9:92:ab:2c:
                    e8:0a:ac:34:1e:0c:df:6a:2f:34:5e:bc:b7:80:48:
                    15:ac:08:f5:0c:86:2a:ec:4a:d3:0f:f5:02:8e:5b:
                    7c:e2:ee:fc:03:6a:c1:0b:ea:df:33:fc:4e:5a:f3:
                    c7:b7:2d:1f:3e:d4:5f:fc:b2:4d:b9:29:87:ae:db:
                    b4:1b:07:2d:2f:75:50:f1:99:5e:9d:70:7a:14:20:
                    3d:3d:b9:7d:ad:f6:32:be:20:2e:74:58:d1:30:39:
                    10:4a:ff:3c:8e:7d:bc:19:cb:2c:3a:19:33:ac:50:
                    f7:5e:b7:14:db:d7:3f:2d:41:d7:cd:ea:ea:71:c2:
                    d9:fa:95:a2:34:56:42:9a:d5:16:63:41:bd:87:55:
                    3a:58:25:76:c8:ae:3f:c2:3d:27:c3:52:1b:ec:f0:
                    76:14:c4:47:89:dd:38:35:ea:14:a2:2b:a1:4a:04:
                    c8:0e:0e:3c:d0:f1:b4:a7:cf:31:88:44:fa:f8:1b:
                    d3:97:a3:37:fe:86:5d:60:62:9c:52:35:83:97:2b:
                    6a:0f:92:bf:e9:ab:d5:5f:6e:b3:94:f2:bc:a0:23:
                    25:4a:78:ba:e9:fe:dc:98:b5:be:5a:6b:9e:11:5c:
                    17:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2C:FE:F8:7F:7D:82:7F:2F:CB:B1:CD:6E:1D:69:2C:00:55:A4:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/139331fd-3e86-3346-8ceb-e14c6cae128f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:90:14:e1:55:a6:ad:46:3e:b3:26:e2:41:fc:5b:09:46:5f:
         da:69:49:78:45:72:74:3b:9b:93:63:2c:a3:aa:ca:b2:3d:fa:
         a5:ea:95:55:4d:18:0c:9d:39:49:51:01:24:e8:cc:81:c7:14:
         ae:9f:db:00:74:9c:02:10:32:5e:3b:c4:80:49:65:8a:cc:30:
         d4:67:58:35:71:60:1a:19:fc:bd:22:2d:14:39:5c:b0:df:db:
         b5:5d:49:5a:58:7f:c0:1d:b0:fc:91:a7:63:23:2a:9f:9a:21:
         1e:d4:32:21:a7:73:a1:ef:35:48:f6:5a:da:16:aa:80:f3:89:
         a1:e1:9d:bb:2d:d2:4a:69:82:5f:e0:93:c6:b6:a9:15:31:bc:
         14:e4:89:05:0f:07:9e:34:b6:53:f1:df:cc:19:1e:60:93:ea:
         ea:96:d3:90:86:3b:12:bd:04:59:77:12:af:5c:4f:19:7d:f7:
         a5:7e:18:de:d1:45:0b:bc:e7:07:83:4b:21:86:94:22:44:33:
         d5:02:67:e1:78:eb:77:17:d0:ea:51:30:79:ce:97:ea:81:48:
         91:37:cc:17:e9:4b:9b:fe:69:01:12:6a:51:eb:e2:73:45:a5:
         16:1c:71:56:01:d4:06:36:b2:6b:bf:65:99:85:af:85:4f:6c:
         8f:6c:60:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:17 2025 by rpki-client