Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37df9be0-52a6-352a-a3c7-464d6f822e83.roa
File:                     37df9be0-52a6-352a-a3c7-464d6f822e83.roa (raw, json)
Hash identifier:          J+br05WvjWjAd5MEbjgRtbXiB1+zN/dX7s7P/Ay454A=
Subject key identifier:   C3:5C:6B:95:01:9F:4D:EE:EE:54:CD:09:82:07:7A:BB:72:CD:9C:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497AD9C463B50480F16E8B7280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37df9be0-52a6-352a-a3c7-464d6f822e83.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     36621
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:c4:63:b5:04:80:f1:6e:8b:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=8238f71f-3772-4b47-9967-0628c78a720e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:60:76:6e:ff:64:4e:a8:82:8c:5c:7b:4a:41:
                    09:7d:21:2d:62:5a:3f:24:68:13:59:23:e1:fc:ca:
                    f9:1b:00:3c:1b:15:b0:07:a4:13:ff:ea:2e:29:91:
                    5d:99:c9:e0:ae:f7:8b:cd:69:2e:56:41:3a:14:4c:
                    61:dd:85:26:1a:fd:c3:9b:02:d3:84:6c:9e:7b:a4:
                    a2:c0:e8:9f:5d:f2:1e:f3:77:7c:d6:c2:94:7f:58:
                    65:c2:3c:de:59:b8:27:26:f7:7b:37:65:04:dc:24:
                    f9:85:4a:52:8a:e1:fd:47:42:01:eb:68:71:89:98:
                    c0:30:cd:b4:b6:d1:e2:ec:e0:79:df:a9:04:f1:ea:
                    0a:ca:10:d9:fa:f7:7e:4d:d2:82:36:29:79:93:c6:
                    67:76:3b:49:8d:ba:74:62:3c:94:67:ab:49:d4:5f:
                    c9:d8:ca:c4:0a:6b:64:19:18:d4:b6:25:b9:74:59:
                    af:a9:84:95:42:6b:25:ef:53:a6:dc:3d:61:a2:78:
                    6c:34:81:e0:cb:13:7a:49:5d:a7:b3:62:40:0c:c5:
                    fe:6d:98:8d:a3:05:91:db:b4:c6:c6:8d:aa:87:98:
                    b1:95:50:74:86:0e:a6:22:f7:5d:1d:b7:92:e8:c4:
                    ce:77:47:36:60:b9:cb:64:ce:02:b4:f7:4b:1e:90:
                    f4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5C:6B:95:01:9F:4D:EE:EE:54:CD:09:82:07:7A:BB:72:CD:9C:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37df9be0-52a6-352a-a3c7-464d6f822e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7f:46:34:d8:4a:33:f5:eb:40:5e:8b:64:89:57:17:f6:ea:
         77:d2:5d:9d:c7:e5:5f:1b:d3:e7:08:c2:8f:d9:33:c0:f1:48:
         48:92:b9:cc:c7:3f:fd:b6:00:a7:e2:70:76:f7:61:e3:d4:64:
         69:7a:89:cd:c1:d1:ee:73:9b:f0:61:11:a7:db:94:a7:4e:8d:
         f1:b7:34:63:17:71:5d:e0:fa:69:98:45:0c:31:9c:65:c3:d1:
         92:2d:43:c1:64:b2:0a:af:01:b8:f5:0f:7d:1f:99:06:3a:3a:
         45:0b:e1:3b:c4:4c:95:27:86:40:98:fb:69:1f:24:f1:2c:65:
         8f:14:fa:12:a6:79:4d:0f:3a:07:ed:ad:27:03:f8:36:7e:82:
         3f:2d:33:af:97:47:bd:7c:a3:d9:6f:1a:60:aa:0a:58:78:f9:
         23:d0:a8:0b:6c:5b:de:47:cd:17:79:c2:0f:e3:56:4f:03:eb:
         33:e7:26:ae:ea:b7:3c:61:f0:53:00:20:3d:d4:50:e2:be:2f:
         b2:05:0a:72:20:b0:68:9e:db:14:f1:50:88:0f:1f:7c:6b:7f:
         46:36:6a:97:7c:b5:93:4f:dc:e4:37:e4:b5:21:f9:de:87:9f:
         94:6d:a2:50:e9:31:e4:6d:14:81:57:cd:15:d1:72:82:c9:7c:
         40:47:9a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:29 2025 by rpki-client