Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4704152a-3c47-3434-8cfd-d05b571722e0.roa
File:                     4704152a-3c47-3434-8cfd-d05b571722e0.roa (raw, json)
Hash identifier:          O/HwbTRxSm3G3Ihwf66lkl7f/VQhqpX9ZvVMJS5ptH4=
Subject key identifier:   3B:6C:F3:FE:E7:1E:45:0C:4E:9B:90:3E:12:08:39:CC:A6:59:88:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183C41F9B36DF61B836FEFC
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4704152a-3c47-3434-8cfd-d05b571722e0.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396617
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:c4:1f:9b:36:df:61:b8:36:fe:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=5da8417b-13bb-46fe-becb-30801c103ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:c7:a2:b9:c6:f9:a4:11:3b:b0:13:17:3b:
                    b5:f3:4f:d2:9e:da:a7:46:18:2b:26:7e:bb:3d:b1:
                    55:35:49:4e:c3:c2:42:3a:c6:e8:25:c4:ae:fa:5f:
                    c2:b4:02:c3:b9:bf:d5:ef:a8:59:73:cb:c1:68:1c:
                    e5:cc:b0:f6:52:c0:d4:f2:0e:ab:b8:21:fc:dd:9f:
                    45:51:50:f6:79:f0:0f:21:8a:e3:1c:ae:e3:e5:dd:
                    11:2a:d2:26:39:f9:05:0a:d3:73:f8:d9:ea:21:bc:
                    d3:49:71:93:c4:09:f2:ca:f9:56:a9:2d:18:f0:0b:
                    d1:cc:91:31:fd:e8:94:5a:62:a6:b2:f1:49:02:b6:
                    bc:c5:fc:e9:70:63:fa:f0:8f:9c:bd:36:87:a3:3d:
                    87:78:a8:0d:33:27:83:30:65:1a:47:0e:26:14:39:
                    17:4e:79:ee:30:a1:9b:5b:a3:bb:a4:c0:d8:5d:04:
                    18:c7:78:fe:71:66:6f:32:0b:33:fa:be:67:dc:f8:
                    63:df:81:d3:e3:14:b3:cd:38:12:27:25:25:f5:a2:
                    02:e4:64:e7:f8:52:8c:82:e6:8e:ed:de:7e:42:54:
                    d0:50:57:7b:6e:c6:29:ec:08:60:31:8d:4f:10:94:
                    1a:67:d0:92:f4:ff:b8:3a:d1:9b:6b:9a:0e:7c:dd:
                    07:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6C:F3:FE:E7:1E:45:0C:4E:9B:90:3E:12:08:39:CC:A6:59:88:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4704152a-3c47-3434-8cfd-d05b571722e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:86:69:19:03:43:f3:00:e1:99:11:1b:38:9e:d7:50:4f:31:
         ad:d2:79:a8:d5:cd:b6:45:83:24:50:0c:80:dc:23:6f:26:97:
         b7:64:ea:7c:0b:b2:4b:7e:71:3d:af:e4:6b:b8:b1:57:45:d2:
         32:d9:02:94:60:35:a1:d5:f9:62:c0:d9:f5:6c:77:c8:95:11:
         fc:f4:50:4e:b7:a4:c8:51:0b:9e:b9:97:b1:62:19:4d:a7:b6:
         23:d0:79:9b:02:39:d6:3c:5d:22:68:41:fe:93:50:09:f6:b2:
         bf:0e:7f:6f:c3:57:8c:33:c8:25:68:99:ab:6d:b2:b1:72:f5:
         4b:9d:f6:f2:d7:70:b9:ea:99:8a:68:5a:ba:ff:60:83:5e:93:
         8c:bb:2b:be:93:6e:87:19:a5:be:8a:75:5b:ac:23:e7:fd:8e:
         e0:1e:ac:8a:a9:06:47:de:5b:dd:c4:aa:ef:67:49:8f:16:50:
         25:c7:f7:71:9e:7c:55:03:c5:f5:b3:ed:10:89:b9:e9:bd:06:
         a8:92:ce:73:32:7d:58:85:eb:e0:c2:42:dc:a8:cc:67:48:0b:
         7c:07:c0:23:ee:b1:0c:7a:c5:85:22:ba:be:c7:de:66:5c:21:
         52:06:3f:91:d7:a3:96:7b:8b:77:17:3e:83:88:72:13:4a:73:
         e3:55:58:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:30 2025 by rpki-client