Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b94b228-71a1-3fba-8eca-9578d46a11dd.roa
File:                     3b94b228-71a1-3fba-8eca-9578d46a11dd.roa (raw, json)
Hash identifier:          MtZJEyLJWQs+DddsXpMlPpyHqHnvXtcmjIHa6khl0tw=
Subject key identifier:   43:DA:BA:5B:5E:42:E9:ED:C1:BD:35:F0:CE:FE:F6:28:6F:33:5E:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183E2095962A8A7DF35B1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b94b228-71a1-3fba-8eca-9578d46a11dd.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     36624
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:e2:09:59:62:a8:a7:df:35:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=b581275f-395e-4c24-997a-8e00f6a40be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:24:8f:a0:4c:fd:84:39:79:18:60:f4:2d:42:
                    7c:b9:95:00:1b:22:fd:16:03:97:c5:57:ff:83:99:
                    87:54:14:bc:2a:be:90:b2:26:9b:91:f4:73:66:46:
                    b8:79:22:2d:f6:77:51:e2:81:d2:fd:34:56:da:9f:
                    9e:3c:0a:c3:4d:82:9f:5b:a2:67:6e:cd:5c:38:1c:
                    b5:10:9f:26:d2:96:4a:05:81:78:18:01:44:52:56:
                    5d:f8:2e:b8:c9:d1:4a:1d:ad:c0:3a:e1:72:46:38:
                    33:8f:58:9f:9b:8d:4a:f3:bb:a8:2f:75:d7:d3:75:
                    69:c4:50:76:a2:a8:8b:8b:94:7b:21:ce:e9:53:26:
                    48:e9:50:15:c5:27:15:b1:1a:3e:9d:28:f6:87:01:
                    1c:a7:63:8c:b8:8a:65:ff:6c:63:90:ec:49:30:71:
                    84:ba:f6:7a:9c:a7:a7:68:15:84:e6:21:a3:af:6e:
                    c8:f0:af:fd:7f:2d:bc:e7:3e:59:08:bf:e3:d0:12:
                    be:4e:6c:1b:c8:58:43:ae:c6:9b:e5:68:eb:c6:73:
                    c6:6a:4f:34:67:d6:9a:8c:0a:6d:67:ae:c5:89:30:
                    93:52:a2:c6:93:f3:71:49:ce:b9:a0:3b:60:68:6a:
                    b0:9a:b3:80:a4:5d:26:c7:00:ef:05:34:cb:07:80:
                    fe:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DA:BA:5B:5E:42:E9:ED:C1:BD:35:F0:CE:FE:F6:28:6F:33:5E:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b94b228-71a1-3fba-8eca-9578d46a11dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:1c:07:89:62:6f:08:96:63:d6:50:51:61:51:6d:8a:80:69:
         ff:18:e6:bd:fa:b5:1c:98:42:34:f8:08:cc:31:14:b1:13:5f:
         27:be:7d:50:04:74:9c:23:5a:85:d7:f7:75:86:46:c5:b9:a1:
         10:e6:52:f1:92:50:ce:a4:f6:95:bd:7d:54:58:db:73:44:2e:
         06:d4:da:0c:c6:df:ba:b6:06:2b:16:19:ff:63:d1:c5:c2:5b:
         4a:02:9c:90:f6:37:e8:52:f7:53:0c:4d:0f:0f:34:99:d0:97:
         eb:b8:f4:ac:b5:10:14:bc:99:69:49:73:b1:26:fb:ba:04:fb:
         ac:46:dc:70:42:f6:8f:71:56:61:94:cd:bd:e1:39:94:e7:f9:
         b5:ba:7a:dd:87:9a:ae:4a:e3:3a:df:1e:a1:7c:7f:65:45:13:
         37:67:2e:cd:88:39:7c:51:a0:de:19:93:8f:2f:8f:be:f4:c5:
         9c:93:b3:37:9f:61:46:cb:0e:e7:b3:26:d6:42:1f:e2:6c:8d:
         9e:e8:30:68:bf:00:03:8b:40:a0:49:95:ea:1b:86:b9:90:10:
         65:23:d0:db:59:df:44:3a:27:29:52:a4:a7:d2:fa:50:06:45:
         07:0c:bc:2e:e4:7f:ef:5d:4f:25:39:ea:1d:0c:a2:a5:9f:2b:
         f1:32:9d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:52 2025 by rpki-client