Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69a64220-97e1-30c1-bd1c-514f61b6047b.roa
File:                     69a64220-97e1-30c1-bd1c-514f61b6047b.roa (raw, json)
Hash identifier:          /5/oGTpKV8p9EPaNVQTEvET7XO7uXXtD+4+40REeWW4=
Subject key identifier:   BA:DE:C3:F1:29:75:18:AD:27:AA:42:DB:AF:F5:F8:D8:23:91:D3:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584940398471E8781F83F3B92080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69a64220-97e1-30c1-bd1c-514f61b6047b.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     396565
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:84:71:e8:78:1f:83:f3:b9:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=44f39f96-b2c7-4e0c-82f6-ee5f8db88110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:51:a5:89:5f:a8:29:de:25:28:ae:9e:34:
                    bc:0b:15:eb:8c:e0:52:ec:6d:bc:a0:78:a9:1c:82:
                    64:d3:92:a2:2f:b7:a6:26:3d:a0:66:0e:b1:ff:ae:
                    05:80:cc:27:c4:21:0c:88:01:d9:e5:75:81:8d:c9:
                    e9:e7:e8:49:42:bc:be:97:24:37:9c:6c:3f:8c:78:
                    c8:57:46:09:fa:86:34:48:ca:da:9a:fc:84:20:1f:
                    89:fd:6b:91:93:e3:ea:94:a9:e3:67:43:a7:7d:59:
                    96:0b:86:43:0c:45:07:2e:55:7d:6f:b4:5f:14:a1:
                    00:10:96:77:59:17:3e:cd:e5:d5:7c:d0:f3:a4:2f:
                    4f:81:1d:eb:cb:4e:2f:14:25:2e:14:f6:08:73:96:
                    29:01:84:2d:90:a6:25:a0:8a:92:77:73:3f:ca:8d:
                    ea:d3:f7:97:d7:1d:f0:cb:c2:72:3d:b3:6c:b5:a8:
                    a4:bc:d5:1a:f8:b8:b7:46:6b:b5:26:38:01:53:8b:
                    7c:1c:3a:df:4e:60:09:e8:a0:92:37:7b:7f:68:b4:
                    d7:0a:5e:80:e1:2c:a4:eb:dd:62:39:62:1f:2e:f9:
                    af:b3:9f:e6:06:ee:6a:c5:2f:d7:a4:93:c7:de:49:
                    ed:17:90:ab:97:24:05:e0:57:80:31:c6:d2:8b:40:
                    b7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DE:C3:F1:29:75:18:AD:27:AA:42:DB:AF:F5:F8:D8:23:91:D3:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69a64220-97e1-30c1-bd1c-514f61b6047b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:03:57:f6:28:a4:a2:e2:87:ad:2a:6e:f9:90:18:59:56:2e:
         eb:b5:fa:a8:5c:65:68:d1:11:e8:8b:4b:e7:f8:7f:50:fc:fb:
         81:6f:dc:02:6b:d1:68:15:2e:fe:2c:b2:73:62:92:8e:97:49:
         30:03:f5:7a:6d:f2:af:23:0a:08:2f:3e:50:51:a9:3d:e6:f3:
         fa:51:66:2c:b6:e4:88:1c:36:cc:17:c1:27:5a:f6:e3:f8:e8:
         10:aa:48:9e:28:62:09:ad:7d:a5:30:f6:17:81:6d:f0:0d:64:
         0e:8b:48:d7:65:98:ef:d7:3f:ad:18:27:d4:51:6d:08:e3:16:
         4c:70:77:0b:ce:a2:49:c4:c7:69:75:2c:ac:c3:ef:04:b0:d7:
         7b:a0:ef:47:55:99:35:b8:77:f9:52:20:8b:d2:46:1f:4f:5e:
         d5:f9:5a:93:22:8f:4b:2e:2f:7f:c3:ce:31:26:e3:9b:f7:ce:
         b3:aa:9c:4f:52:1f:1a:6a:01:a0:00:2a:78:29:96:dd:78:88:
         ff:8d:ab:31:10:a5:4c:66:1d:44:6f:41:c1:cd:71:aa:99:e7:
         68:85:4d:6b:95:7d:bf:b8:48:2b:2e:f3:06:9a:a0:7e:68:8b:
         35:c7:b5:a0:c7:ae:60:60:b1:44:4c:c5:b6:f5:e2:d1:4e:2a:
         92:5c:87:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:04:55 2025 by rpki-client