Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bf2379f-8d19-3606-b954-eaf409304b5c.roa
File:                     2bf2379f-8d19-3606-b954-eaf409304b5c.roa (raw, json)
Hash identifier:          TpNT5KmLmXuVCIMg0Lj+7owy6ghFxwiG6DdZO/zucb4=
Subject key identifier:   75:DA:A3:A4:9C:3B:60:26:0D:DB:86:34:B7:40:F0:00:E9:E6:9D:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849244E939359B1E5C8C6B0D3A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bf2379f-8d19-3606-b954-eaf409304b5c.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     397200
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:93:93:59:b1:e5:c8:c6:b0:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=0f8436f2-ae4d-4cdd-b256-9db413024b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d8:51:02:f8:cd:8d:22:39:4f:1c:bd:08:ce:
                    cd:35:ba:7e:c2:a2:0c:e0:50:c3:72:98:6e:0a:8b:
                    ea:0a:30:2d:d5:70:36:69:a9:dd:4d:af:36:cd:1d:
                    1c:de:70:6c:eb:93:45:52:c9:92:84:e5:45:ad:cf:
                    d4:26:3b:bf:3d:6c:e7:e9:b8:93:40:7d:70:77:fa:
                    9a:d4:ea:87:be:fe:52:db:da:3b:da:56:fd:69:11:
                    a5:dc:6f:f4:ac:94:48:08:fa:95:92:99:50:fa:10:
                    d7:5a:2a:73:f8:55:4f:79:f8:af:ed:da:0d:46:78:
                    ef:f4:eb:9d:9b:85:14:89:82:62:ef:7e:e2:8e:22:
                    a2:b0:f0:31:3f:6f:3d:c0:73:1c:f3:10:30:1e:7b:
                    3e:87:5c:25:2e:25:7e:1a:f4:61:51:34:8c:06:ef:
                    c4:2d:11:77:7f:e4:17:ac:5a:55:a6:44:20:9a:56:
                    82:6e:fe:7c:d4:69:d1:c7:0d:ca:33:bb:5e:7d:65:
                    2c:e1:e9:bd:54:5b:aa:54:b8:53:14:39:fd:93:91:
                    03:ca:3c:b8:6f:d0:bd:17:52:c0:fe:7c:aa:19:26:
                    52:75:1f:06:25:f1:b0:fb:3a:37:de:be:4d:5b:38:
                    dd:44:c0:79:b8:7c:8b:6b:76:cb:49:e0:fb:3c:7a:
                    17:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DA:A3:A4:9C:3B:60:26:0D:DB:86:34:B7:40:F0:00:E9:E6:9D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bf2379f-8d19-3606-b954-eaf409304b5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:70:66:3f:0b:6c:0e:19:1f:d4:7b:f2:dc:ec:dd:32:2d:7c:
         fd:9b:75:10:92:4b:45:a7:4a:33:ce:0d:d5:c2:a4:53:f0:89:
         aa:37:66:86:a6:76:e3:6d:6d:fd:99:d4:af:27:81:e9:92:8a:
         40:ea:02:2f:35:c0:42:e7:8a:5e:16:33:56:98:a3:1c:eb:9b:
         ca:86:50:61:15:2a:c6:8c:6f:7e:b8:d2:dc:85:be:9a:ff:3f:
         23:a8:09:ea:78:9c:d8:4d:8b:3a:de:88:dd:66:fe:b7:ec:c2:
         da:22:6c:5a:97:56:ff:7e:22:63:e3:60:98:39:12:35:05:21:
         f3:18:a6:c8:11:18:88:d4:71:db:4f:1b:d8:90:7f:55:34:01:
         7d:33:df:3f:12:29:09:16:28:ee:c1:b5:9e:be:72:09:10:82:
         a2:86:0b:1a:f8:7a:34:8a:05:34:9e:ad:ad:18:1e:14:f4:07:
         24:8c:b2:5b:8b:16:25:98:dd:53:d2:c5:be:40:3c:85:1e:14:
         ef:25:33:9a:49:43:09:9c:75:8b:40:a5:9c:c2:41:4c:84:2b:
         11:ac:41:b9:82:cc:d8:9f:ae:d3:e9:2a:c4:9a:c4:6d:76:2b:
         7b:ec:9f:f5:38:7a:05:11:e4:f3:08:57:7a:21:36:7d:9b:95:
         87:1b:48:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:16 2025 by rpki-client