Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55a9675f-d6f0-3218-8c8d-f2dd8089026f.roa
File:                     55a9675f-d6f0-3218-8c8d-f2dd8089026f.roa (raw, json)
Hash identifier:          IJQcM1QphCk2zUvQQ1SwT2f5oKqQlmRh86KzT++qGgk=
Subject key identifier:   46:64:DE:B9:30:07:58:12:DE:52:D4:16:9A:EA:97:EF:92:2F:D7:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339DF101F771E8C16DB5BA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55a9675f-d6f0-3218-8c8d-f2dd8089026f.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     396563
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:df:10:1f:77:1e:8c:16:db:5b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=32036bf8-6cad-4f81-9845-a9f48acdeb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8a:ba:e8:48:05:1c:5e:d0:3e:14:a3:a2:df:
                    40:cf:e4:83:b0:99:a4:d0:85:be:a3:ac:a1:78:69:
                    3c:bf:42:d8:3d:3b:83:24:67:b7:c1:c9:b5:57:a3:
                    b3:aa:f2:ab:23:18:78:78:04:0f:2a:2b:01:3a:d7:
                    64:66:95:f9:75:a2:d8:ad:a8:d0:a3:68:79:49:bd:
                    eb:59:0e:f8:f9:41:98:11:21:ce:ad:98:42:95:04:
                    f8:9e:8b:a7:50:ed:56:06:09:b4:72:70:a0:98:38:
                    c2:42:7e:97:cf:30:7e:51:7a:0e:70:d1:f1:56:5b:
                    00:3f:e9:99:71:e1:8f:d7:bd:48:1e:80:f1:d5:4e:
                    09:55:5c:41:0f:e0:a3:5f:4c:a9:b9:57:71:34:45:
                    19:94:f7:71:40:4b:e2:41:fa:7f:e5:17:b5:74:fb:
                    d6:49:cf:88:9a:aa:62:08:19:e1:34:7b:65:2c:e9:
                    2d:73:dd:6d:b2:ac:78:48:df:78:2a:c5:e2:43:9c:
                    45:65:b9:93:61:c8:ec:65:31:01:a9:64:6a:e9:af:
                    55:3d:a6:71:a1:7c:e1:52:6e:dc:07:32:ae:80:b7:
                    50:6d:14:24:53:e4:05:ef:75:86:7b:d0:5b:c8:51:
                    15:35:01:56:b3:bb:b6:f0:93:eb:cc:60:0b:8e:69:
                    c1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:64:DE:B9:30:07:58:12:DE:52:D4:16:9A:EA:97:EF:92:2F:D7:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55a9675f-d6f0-3218-8c8d-f2dd8089026f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:10:66:fb:34:48:ad:2d:27:0b:b0:a2:8e:43:92:d7:e1:33:
         71:fb:02:ae:67:6a:ee:3a:79:65:07:79:9d:69:bc:f8:bb:31:
         ed:e3:cb:72:60:45:37:58:63:4c:0e:02:5b:74:22:84:d5:b6:
         81:18:c8:6b:dd:d4:5a:fc:d4:80:1b:12:c8:6d:95:a7:57:9e:
         1b:f9:cc:12:8a:3e:bd:43:b4:19:27:a4:2a:cb:38:65:c7:35:
         de:45:57:a4:3d:65:35:01:0c:f2:8d:fd:7c:4d:c2:a8:e0:b6:
         68:10:fd:a5:b1:a5:43:5b:d2:b0:b0:2a:4f:15:c8:a4:55:fd:
         be:a7:06:2c:e0:62:d8:84:ed:cd:93:70:d5:cd:5e:9e:8d:c8:
         5e:ae:5f:86:ae:c6:5d:16:fc:9c:23:fa:fb:6d:98:6d:4d:de:
         f7:bf:7b:a6:b8:fb:93:51:54:30:47:57:94:77:3f:af:b6:1e:
         45:f6:ca:65:02:60:67:d4:ad:03:9c:a3:81:cb:16:e0:32:f6:
         d4:48:a3:79:cf:41:9e:45:b2:0f:5a:29:68:ae:90:3a:d4:b2:
         3b:e4:4d:12:2e:4a:ce:13:1e:5e:87:b0:cb:fc:78:cc:97:9e:
         ac:0a:61:17:ad:b1:49:36:39:51:fe:5c:e2:f0:df:16:bd:74:
         84:f4:0f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:16:02 2025 by rpki-client