Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d0ee049-4546-3377-a817-131699dcfbc1.roa
File:                     3d0ee049-4546-3377-a817-131699dcfbc1.roa (raw, json)
Hash identifier:          oFHKUhqNnQBIBzFd7mx8xYWxq/tRn05i2RcgpyU0zY8=
Subject key identifier:   FD:0A:A3:AB:31:69:61:36:5C:C9:C4:88:C1:77:12:ED:F5:31:07:99
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848C573324DDA29AAC87CAC2400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d0ee049-4546-3377-a817-131699dcfbc1.roa
Signing time:             Tue 04 Feb 2025 13:33:14 +0000
ROA not before:           Tue 04 Feb 2025 13:33:14 +0000
ROA not after:            Mon 05 May 2025 12:33:14 +0000
asID:                     396567
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:73:32:4d:da:29:aa:c8:7c:ac:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  4 13:33:14 2025 GMT
            Not After : May  5 12:33:14 2025 GMT
        Subject: CN=9e467e64-6032-4022-96b8-81921ad12ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b5:bf:c2:2d:c3:33:6d:b5:e7:00:e7:52:d5:
                    c4:87:1c:ae:e1:2a:9f:42:a2:40:97:19:48:9b:64:
                    1e:09:ee:8c:63:cc:66:6f:a1:2d:26:34:37:4d:bd:
                    dd:5f:fe:73:2b:2e:b9:97:e5:f5:f8:e3:65:7b:5f:
                    6b:6f:d5:a7:25:30:48:88:33:05:ba:d9:4c:46:45:
                    b2:aa:cf:5b:8e:a6:b9:db:0c:5b:92:21:96:57:66:
                    69:71:0b:64:b5:4b:b0:e6:aa:36:0f:d7:c1:4f:eb:
                    4c:1d:84:29:43:17:df:e0:60:98:c4:dd:39:7e:60:
                    89:71:be:fe:47:42:c7:1c:54:5f:b7:9f:62:37:57:
                    f4:a7:43:93:95:83:94:8c:3f:9b:77:13:c2:f5:74:
                    8b:5c:3b:08:06:4e:ea:47:11:98:d0:e2:d1:f2:dc:
                    bd:58:2e:14:f9:e8:7d:64:0a:2b:bc:40:d2:3d:9f:
                    b4:ec:28:ee:59:f9:b8:8a:eb:ff:a2:49:5b:11:b4:
                    d5:be:50:88:30:a8:1c:13:fc:fb:12:6d:48:17:ba:
                    86:a8:29:c6:29:36:95:c0:96:bc:7e:8e:f7:a5:76:
                    23:c7:44:40:23:09:4b:58:17:8a:82:45:6b:8e:25:
                    6b:89:db:3f:60:9d:da:bd:14:3d:ce:0a:1e:49:25:
                    03:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0A:A3:AB:31:69:61:36:5C:C9:C4:88:C1:77:12:ED:F5:31:07:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d0ee049-4546-3377-a817-131699dcfbc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:78:e2:74:5e:80:0c:17:03:7f:64:34:0a:a7:bd:2b:00:ce:
         e3:18:06:c5:fe:f1:09:ee:9e:00:16:83:9b:57:e7:e4:70:a2:
         45:17:c7:5f:08:7d:e8:72:e0:2d:b4:be:4b:38:3f:58:a1:64:
         46:3d:d7:43:30:aa:3a:07:71:5f:04:84:58:a6:4f:9a:9b:61:
         58:6f:77:1f:ef:bd:e1:28:3b:3d:54:8b:11:0a:82:99:12:ad:
         e4:bc:c6:2c:f1:51:82:57:fd:70:25:50:bd:64:59:4a:11:27:
         da:94:22:47:a2:31:e7:e7:c9:c5:44:a5:ac:a6:bb:00:94:a3:
         fe:31:d8:e9:de:58:95:73:a1:c2:f2:0b:3b:19:9b:24:97:c8:
         42:87:60:09:83:c5:79:d4:2a:64:e4:e3:04:00:c4:fa:9d:c1:
         22:cb:02:5b:ca:71:86:ed:0d:2f:56:0e:d7:c4:7d:46:b2:2e:
         b0:b7:c2:77:79:88:d9:d8:8f:c2:24:49:c5:f0:08:03:3b:95:
         74:1d:81:d6:1f:b2:db:d7:b8:e8:0e:a9:cc:9d:a6:7c:40:6c:
         8b:3b:87:ee:a0:fd:63:e3:e4:02:40:68:91:fd:04:62:f0:a1:
         bf:3f:ca:2d:fb:ca:2e:b2:e5:9b:a4:0c:78:84:6a:b1:06:4a:
         e6:6f:db:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:59 2025 by rpki-client