Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23f15fc5-0ecc-32ca-9c51-95c8102b1fb7.roa
File:                     23f15fc5-0ecc-32ca-9c51-95c8102b1fb7.roa (raw, json)
Hash identifier:          7wSYh2I2vS3L8fQSU/9R+GbsOA5304ohJDGo1/3BRnQ=
Subject key identifier:   46:B8:38:55:E1:C5:E2:5F:30:92:A5:5D:74:5D:39:26:DE:E2:7E:DF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848C57336AA021464C2142BEC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23f15fc5-0ecc-32ca-9c51-95c8102b1fb7.roa
Signing time:             Tue 04 Feb 2025 13:33:16 +0000
ROA not before:           Tue 04 Feb 2025 13:33:16 +0000
ROA not after:            Mon 05 May 2025 12:33:16 +0000
asID:                     396614
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:73:36:aa:02:14:64:c2:14:2b:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  4 13:33:16 2025 GMT
            Not After : May  5 12:33:16 2025 GMT
        Subject: CN=04529bc4-a303-4dcf-a7f0-e9dd3ea3ce2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7d:d2:fe:05:c5:02:c1:43:d5:14:c5:7f:28:
                    c9:6c:78:2f:46:8b:ca:83:ae:d3:18:32:46:aa:ad:
                    20:14:ed:b8:02:b6:a7:d1:42:d3:db:56:71:d6:4d:
                    96:a1:86:71:29:b2:03:68:83:0d:b4:02:81:5b:4c:
                    19:d9:47:88:ce:cd:c2:b6:43:11:ff:54:f6:e8:ff:
                    12:92:ed:78:7b:ed:d2:60:a2:20:15:74:ec:c7:9d:
                    93:6e:7c:3d:c0:5a:7a:2a:61:a2:b9:ac:ee:b4:29:
                    a6:1c:b8:b9:7e:90:ca:2a:ea:1d:84:b7:be:32:03:
                    9d:a4:bf:d8:12:a6:fa:95:b2:62:8a:cf:54:53:d0:
                    89:bb:2d:2f:e5:0c:91:23:ce:51:2d:d3:2d:b9:61:
                    98:1c:0a:a3:bb:1d:cf:ef:74:0d:5d:3d:09:93:43:
                    3c:eb:5d:2f:a2:38:84:19:83:95:48:e7:f3:f7:18:
                    c3:46:17:a5:71:18:8b:11:b6:bb:13:1f:4d:ed:a5:
                    57:4a:0f:51:d1:a0:5d:7b:ff:35:df:10:49:75:2f:
                    d6:d8:74:86:98:6f:02:6b:53:42:8d:aa:34:7a:53:
                    54:a1:60:8d:1a:5e:36:38:54:e1:f7:e2:23:d6:b8:
                    88:80:cf:8c:21:9e:7d:bc:a0:78:9c:e9:88:92:34:
                    f9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B8:38:55:E1:C5:E2:5F:30:92:A5:5D:74:5D:39:26:DE:E2:7E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23f15fc5-0ecc-32ca-9c51-95c8102b1fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:2d:dc:e7:da:62:24:74:2f:3d:92:98:cf:9b:a1:ec:cd:0f:
         1a:5b:4a:91:c9:4f:c0:e1:3e:1c:0e:99:80:7c:66:43:d6:61:
         d9:64:ec:c4:e8:8c:d5:3f:32:e4:1b:71:22:50:45:79:c7:25:
         e4:91:c5:33:39:4e:12:7a:29:9c:92:73:d4:bb:4e:ab:00:66:
         9e:41:10:74:8f:88:14:38:b2:b2:aa:09:37:d9:ce:2a:6f:80:
         65:c2:d1:70:32:4c:7e:2b:70:40:c9:38:0b:c2:f5:37:38:1c:
         3b:71:05:2a:e3:58:58:5c:4c:4a:bc:6b:9c:a5:c1:b4:99:e0:
         db:29:25:62:52:fa:d3:0c:d2:07:af:ed:0f:53:f8:6f:8a:61:
         bd:7e:87:3e:ef:1c:a3:36:6d:86:5b:b4:bd:74:a5:77:0b:c1:
         2a:f6:ad:4b:29:15:e5:3e:15:2e:7e:94:19:d0:80:10:f4:a8:
         8c:7a:9b:a7:6f:75:5d:34:da:12:e0:84:2a:cc:85:f3:2a:8c:
         20:b5:66:54:c0:28:27:57:0d:59:9e:d5:71:c2:b8:f2:e0:13:
         e6:b5:2f:78:97:32:00:88:fe:f1:25:0f:f5:46:2c:2e:14:8b:
         8e:f3:b3:5f:c2:f7:53:f9:33:3f:27:61:3c:f7:ee:64:d9:cb:
         1b:37:b9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:46 2025 by rpki-client