Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c5690bb-f50e-3dd5-b5d5-32e702c4fcac.roa
File:                     2c5690bb-f50e-3dd5-b5d5-32e702c4fcac.roa (raw, json)
Hash identifier:          dsMbwCOUHLiacmKDjhtvKkKowju8ZMDne+8VqYbHW+4=
Subject key identifier:   FB:D9:4E:CA:17:FB:16:37:CA:D6:9A:43:9F:3C:44:85:71:E2:01:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496FAF042A9CA7B8B607F2A600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c5690bb-f50e-3dd5-b5d5-32e702c4fcac.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     396592
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:04:2a:9c:a7:b8:b6:07:f2:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=43e1c92d-2559-41ca-b86a-6f6bc8c0eff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f2:ae:aa:a8:d9:9c:43:1a:6c:3f:8f:83:0a:
                    1f:9d:70:7f:7e:6e:0b:c5:0a:89:59:e5:8c:52:cb:
                    2c:6b:18:d1:3a:86:41:11:17:c8:25:bc:4c:e8:0c:
                    55:8e:5d:5d:55:b9:34:c8:04:1f:88:16:2b:79:4a:
                    63:09:ff:55:d0:67:00:54:12:07:1b:4a:b4:63:44:
                    5f:58:18:64:7c:da:46:ad:cb:10:eb:5a:6c:c2:b0:
                    01:c2:a2:0f:48:e6:3d:38:57:90:e6:d1:ba:ac:03:
                    8c:45:3d:f4:fa:fa:7e:f8:b2:48:77:1d:06:de:23:
                    8d:14:7e:48:78:08:b2:4c:b7:7d:6d:f3:57:67:30:
                    50:ae:5c:aa:03:eb:d3:78:1b:12:f0:91:6a:28:44:
                    e9:36:db:05:6f:be:92:89:29:60:9a:ea:2e:99:46:
                    90:bd:ac:2e:0c:1c:f6:9c:5c:3d:c2:ad:b9:90:17:
                    13:08:fc:c7:c8:e0:cf:16:e9:f3:1d:27:62:21:76:
                    65:cf:f0:4f:ab:d9:fd:36:ed:2c:a2:73:6c:e0:08:
                    ed:ff:df:51:39:02:7c:ea:a4:1c:43:17:ce:b7:85:
                    83:5b:78:b4:6f:76:a2:ea:a8:06:81:24:03:e7:0e:
                    c4:8d:a6:18:83:69:c5:f8:53:24:a8:a0:dd:fe:19:
                    81:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D9:4E:CA:17:FB:16:37:CA:D6:9A:43:9F:3C:44:85:71:E2:01:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c5690bb-f50e-3dd5-b5d5-32e702c4fcac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ba:5f:ff:e0:8f:b3:c5:26:af:54:bd:cb:d7:88:00:c6:fa:
         96:1c:96:70:0c:ef:eb:b1:6f:d7:67:84:af:d3:f0:23:d7:77:
         0a:ee:ef:55:82:4d:96:44:74:5f:60:cc:7b:26:2f:05:5a:ed:
         3a:69:98:13:7b:d0:87:37:76:d4:50:61:db:3b:93:b4:99:1f:
         96:12:8c:9d:8b:41:2a:36:18:07:28:43:1f:41:dd:6f:88:dd:
         2f:e0:f0:d6:7c:6c:03:3d:a4:9d:dc:7f:af:e0:c3:0b:d5:07:
         9a:ef:23:a6:c2:4b:19:2a:6f:5c:c7:50:a3:c4:9d:a3:95:a9:
         7c:3b:00:29:03:9a:21:e1:f1:4c:73:a2:c9:83:d0:12:e1:3b:
         20:95:4f:ca:63:97:de:0f:6c:9a:a9:c4:d3:dc:d0:ed:1b:5f:
         5a:21:12:71:63:1d:d7:ee:c2:69:8e:49:fd:94:34:02:2f:36:
         d0:47:03:1e:19:2e:de:7b:74:cb:a4:b7:ad:8b:22:00:07:bf:
         dc:70:7e:61:07:d8:84:21:59:0a:b6:8d:5e:69:25:08:3f:1a:
         e9:1f:72:09:68:6b:24:08:94:5c:0e:11:4b:3e:df:1b:93:5b:
         de:1c:86:c5:e8:bb:8a:ac:8f:2b:6e:64:bb:82:57:a0:79:c5:
         70:9f:df:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:08:13 2025 by rpki-client