Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35d3712f-9348-39b6-aed2-66a683adc283.roa
File:                     35d3712f-9348-39b6-aed2-66a683adc283.roa (raw, json)
Hash identifier:          ZZKmZFTTKBJMoAp2ByV0Tnd+Az8jpACZPueCjiBi0/w=
Subject key identifier:   54:D1:D3:AC:CC:D6:99:D3:E1:43:B7:5A:A7:9D:BF:A9:64:66:CB:62
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849393E911C2F3CA8F4C2B3C680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35d3712f-9348-39b6-aed2-66a683adc283.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     396560
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:91:1c:2f:3c:a8:f4:c2:b3:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=04faf628-b007-40e0-817f-9922283fb1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:38:d3:41:4f:77:67:d1:41:7a:b1:ee:e9:18:
                    b8:73:c4:e9:b8:2a:d3:21:89:a2:80:d3:a0:44:f7:
                    3e:09:f1:a4:4a:0d:60:21:ae:a2:4f:6c:c0:53:e4:
                    8e:7e:ca:ff:0b:c7:0a:5c:64:04:9e:c5:07:b3:a8:
                    d8:a7:4a:3e:fc:8a:6d:e1:24:44:e0:2b:12:91:e0:
                    a5:9a:d1:5b:3b:41:29:c7:36:90:7b:12:bf:c0:4f:
                    fa:b1:6c:e6:15:f8:3c:18:32:8e:e4:29:47:b3:9b:
                    47:90:c5:79:48:04:7e:03:8d:3a:18:e5:97:2d:a6:
                    2f:a4:48:7b:5f:07:da:d4:e0:68:a3:f8:2f:61:22:
                    a0:4a:82:26:90:ee:36:29:66:5a:a6:5c:22:4d:3a:
                    b2:6a:4e:9f:d2:df:11:59:83:9b:cd:51:20:dc:f4:
                    e7:88:c2:5d:d0:75:ae:d7:ea:59:bb:0f:b6:a8:66:
                    76:35:da:4d:2c:2a:19:46:ce:ec:61:44:17:7f:68:
                    f6:2a:42:a2:35:ef:da:b5:0a:b5:66:14:43:19:7f:
                    5c:74:5c:98:47:bf:8d:d3:16:d3:91:bc:7a:83:1b:
                    f3:9e:06:77:dc:c5:5d:1c:f2:f9:62:b7:ba:3c:96:
                    63:2b:d7:db:c9:f9:f4:aa:39:fc:41:c5:61:ef:97:
                    95:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D1:D3:AC:CC:D6:99:D3:E1:43:B7:5A:A7:9D:BF:A9:64:66:CB:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35d3712f-9348-39b6-aed2-66a683adc283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:52:36:e3:08:8d:8e:f9:cf:2d:07:fc:17:44:bd:29:2f:4f:
         aa:dc:13:90:81:01:35:59:0b:eb:7a:d3:4c:03:f2:ff:9a:3b:
         ba:2f:df:67:14:8e:37:8c:e3:89:82:ee:7c:dd:9a:a2:03:38:
         ba:18:34:b2:71:df:63:a8:2b:55:e0:2f:87:3e:a0:82:8a:cc:
         e7:60:90:07:78:24:42:25:5c:28:29:e7:a6:15:73:7b:05:c4:
         10:62:d6:70:ec:76:72:ec:a4:1d:e9:cf:ec:5a:d5:20:da:c2:
         a7:4a:2f:d2:97:63:9a:f6:88:67:d8:db:3a:5e:35:e1:ce:2c:
         88:f2:d2:3b:8b:72:f4:9a:10:18:93:ce:12:22:07:3d:15:29:
         ae:44:37:26:fb:7c:c0:47:f9:2d:e0:4a:3c:97:4c:12:ca:8a:
         ea:42:be:9a:a1:5e:1f:c3:02:1d:a9:b4:e8:f3:bd:37:82:fa:
         7e:5d:b9:2f:70:91:9b:ff:84:3b:d5:bc:6c:7e:5c:c5:f4:bc:
         d7:89:6f:14:2e:ba:4e:d1:b6:fe:2e:82:f9:f7:92:ca:2d:3a:
         1f:ad:ab:b0:48:1b:37:6f:ca:bd:62:32:71:d2:31:e1:5a:dd:
         bb:07:4f:7a:10:3f:be:9e:9c:97:f6:5c:00:37:d4:e5:a0:6a:
         44:a9:0d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:47 2025 by rpki-client