Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ab4aa01-ef98-30bd-9264-c7e6d7721b25.roa
File:                     1ab4aa01-ef98-30bd-9264-c7e6d7721b25.roa (raw, json)
Hash identifier:          mMuaKpZHHfKfqZJFsiQEd8I9TDgPbLgPBBAoYFEm2bY=
Subject key identifier:   50:E4:FA:EE:C5:BF:38:A0:50:6B:EA:8F:FD:AB:97:9F:70:69:54:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848C573389F7BBB25D9F9578E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ab4aa01-ef98-30bd-9264-c7e6d7721b25.roa
Signing time:             Tue 04 Feb 2025 13:33:17 +0000
ROA not before:           Tue 04 Feb 2025 13:33:17 +0000
ROA not after:            Mon 05 May 2025 12:33:17 +0000
asID:                     397211
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:73:38:9f:7b:bb:25:d9:f9:57:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  4 13:33:17 2025 GMT
            Not After : May  5 12:33:17 2025 GMT
        Subject: CN=a4984c61-3560-45c9-a1a9-05ad2ebc93dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:99:36:4d:fb:a6:b4:08:08:d3:7c:06:23:af:
                    ad:9b:f0:06:2f:46:e6:47:ec:37:e0:7e:d6:4f:79:
                    3e:93:46:82:11:d9:6d:bf:ac:b6:3f:32:b1:ae:89:
                    82:3e:50:fd:a2:89:b7:11:6e:6a:a3:8f:8c:31:53:
                    71:cc:f8:28:88:d5:0f:5f:0f:61:0a:07:c4:20:e8:
                    c3:9e:01:ca:85:c2:79:31:5e:36:6c:df:69:21:d4:
                    4e:6f:62:78:2e:8e:18:7e:98:8b:49:44:35:77:26:
                    05:5a:66:83:3c:62:8d:a1:ac:f8:a8:6c:68:38:84:
                    e0:8e:ec:d4:a5:ca:cc:3e:66:08:83:fe:15:ec:7f:
                    f9:51:11:d7:47:be:26:93:e5:27:73:16:73:a3:d5:
                    74:64:23:24:cb:c3:45:5d:5d:ef:06:81:1f:55:f3:
                    83:c5:ba:08:1d:a1:65:be:34:de:53:ca:0d:3c:92:
                    6f:db:e8:eb:6e:a5:7e:4a:ff:05:00:b5:fb:77:b8:
                    11:4b:1b:f9:89:dc:fa:48:c0:aa:7d:ed:85:d1:e8:
                    4e:ee:c5:a1:35:13:8b:44:ab:31:c2:8e:15:7b:aa:
                    47:3b:e9:af:f4:3e:56:6d:91:99:58:b5:5a:15:6d:
                    2d:e4:7b:51:4a:b1:d5:7c:ec:83:e9:42:a8:ce:47:
                    05:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E4:FA:EE:C5:BF:38:A0:50:6B:EA:8F:FD:AB:97:9F:70:69:54:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ab4aa01-ef98-30bd-9264-c7e6d7721b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5d:db:58:6c:a2:ef:1c:b4:70:19:c8:a0:b2:67:3e:6e:c4:
         a8:59:28:9c:1a:52:5f:17:60:fc:29:5e:98:63:bb:78:60:02:
         da:25:3a:f2:8e:26:fe:24:7a:45:bd:ab:f3:0a:0a:31:6e:48:
         e3:ea:ea:7f:b3:62:26:30:fd:e7:fd:b3:5c:b7:3a:05:4f:62:
         7c:b6:31:b7:b9:9f:ea:b7:59:8a:0f:57:88:62:7d:5e:48:d1:
         b9:47:a9:91:36:3c:f8:bd:97:ca:d3:b0:15:33:96:0f:e0:e7:
         75:0b:4a:01:eb:db:92:88:86:2e:22:b2:4f:02:dd:5b:c3:b4:
         7e:6d:d3:1c:e5:fa:1a:1a:1f:29:c5:d3:17:a2:c0:d6:46:a9:
         d8:db:e5:2c:67:be:b8:f0:ca:7a:ac:c3:b2:57:4a:1a:e7:04:
         60:74:71:8a:42:8d:49:15:83:8c:91:ba:96:bc:d5:80:27:b1:
         63:01:df:f8:8b:12:50:8e:37:ea:89:e5:1c:36:e9:04:ff:8e:
         cc:79:57:03:58:09:f0:3d:04:51:4b:81:f3:f8:53:25:02:65:
         06:f7:77:a7:9a:16:94:ca:dc:09:ed:9a:75:78:3c:9f:d2:e0:
         7e:4d:f0:46:dc:b2:25:d9:34:df:39:d5:c0:93:d0:48:b4:f4:
         eb:7f:4f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:13 2025 by rpki-client