Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e10256d-7beb-3107-b6af-203040419348.roa
File:                     1e10256d-7beb-3107-b6af-203040419348.roa (raw, json)
Hash identifier:          rmCGl+14MesavTmjM0lIjLV94xQ98hN3c0kvRuo3amk=
Subject key identifier:   F1:64:FA:F4:7E:FD:63:EB:D6:97:F6:5D:C6:4D:04:42:FA:60:EE:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497DA460F1771C1A3E5F532980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e10256d-7beb-3107-b6af-203040419348.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     25485
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:60:f1:77:1c:1a:3e:5f:53:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=01545605-0daa-44fb-b21c-a07d239d4dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:36:66:bf:84:59:38:5c:9a:53:3e:15:e4:
                    08:f9:83:6e:11:ce:fa:b2:e1:df:fb:c4:44:2b:59:
                    32:2b:d7:25:0e:d2:4e:8d:ee:94:ad:bc:09:d0:bf:
                    f6:82:bd:db:98:6f:38:2c:7c:92:77:bf:d9:14:19:
                    99:14:aa:98:dd:5e:06:56:6d:95:2d:49:72:7a:4f:
                    ab:30:5d:cb:3f:0c:ea:73:eb:33:7c:c2:20:a2:cd:
                    5f:19:c9:cd:a9:51:ee:d6:14:d9:d9:6a:0b:b1:0c:
                    82:7d:85:ff:c2:60:2d:39:95:7e:59:52:43:24:4c:
                    dd:1d:05:95:70:c7:d7:a4:b2:ed:aa:a2:48:0a:e7:
                    21:b6:94:71:48:79:19:bd:a2:ed:d1:a3:cf:39:3d:
                    5a:51:5d:c3:cb:11:d8:ad:0a:6b:1d:3d:5c:90:68:
                    e5:5c:1c:65:c2:cb:99:7f:b3:97:6a:9d:2f:e1:b3:
                    34:9e:38:ae:ff:f0:a3:9c:ab:aa:e9:af:c9:a2:f8:
                    b8:cb:89:98:2f:d9:94:26:9f:5e:37:0e:90:58:d4:
                    f3:40:b0:14:3e:10:ee:0e:d1:cc:c5:c7:e4:f5:0c:
                    cf:a5:0c:ce:22:57:d6:19:0f:d2:7f:93:e9:ef:85:
                    13:0c:48:7b:4b:4d:ec:4b:e5:5c:25:37:d5:20:d1:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:64:FA:F4:7E:FD:63:EB:D6:97:F6:5D:C6:4D:04:42:FA:60:EE:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e10256d-7beb-3107-b6af-203040419348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:95:cb:34:fb:2b:c8:75:5a:81:6b:cb:6c:1d:f5:b4:5a:54:
         33:64:0c:73:ce:8b:68:16:4f:01:7b:44:af:25:82:c6:0a:3e:
         6b:10:76:44:af:41:00:8a:0d:02:08:01:28:0e:57:81:6b:38:
         68:69:15:e8:61:83:ed:19:32:21:b0:17:b5:08:24:38:8b:e2:
         e8:fd:16:54:7e:87:2e:ad:46:fc:fa:5e:dc:45:a0:00:c4:06:
         fb:68:9b:9e:dd:eb:5e:85:c3:bb:ab:b8:7e:f1:49:f1:e8:59:
         89:ee:95:27:05:70:d4:6e:66:48:ac:c5:9a:00:b8:66:10:2e:
         69:47:5f:66:b8:8a:28:17:2c:41:f1:e7:95:14:3b:84:9f:e6:
         68:a6:3e:88:5d:c5:62:d6:df:35:fb:ee:f8:26:fb:18:51:db:
         7e:f9:71:d0:2e:52:66:7f:b7:85:41:ac:b0:81:03:82:a5:b8:
         50:24:32:75:37:97:3d:48:ce:e9:04:aa:89:3a:24:c0:6c:5b:
         f2:5f:e2:13:f9:28:e4:b1:28:25:65:60:d5:1f:98:4d:5d:ef:
         67:58:70:97:bd:97:36:b5:6f:2b:e6:9d:0f:ae:75:d4:89:7d:
         23:b4:f0:c9:fa:d8:9e:d9:09:a4:79:5f:f0:39:12:4a:2f:47:
         28:0b:13:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:48 2025 by rpki-client