Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b234807-415a-303a-98e3-2c638703479e.roa
File:                     6b234807-415a-303a-98e3-2c638703479e.roa (raw, json)
Hash identifier:          ktF10XninDZHQpJIEX6JPmik0/+CvYQLA5N2l3twvjo=
Subject key identifier:   DF:E1:A8:42:42:82:8E:37:78:C5:58:A8:2B:49:4D:BF:25:F7:2C:F3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584940398268641651836B1AD680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b234807-415a-303a-98e3-2c638703479e.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     36621
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:82:68:64:16:51:83:6b:1a:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=4658d79a-76e7-479e-9165-cc692cdd305f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9f:7b:6b:9c:cb:3d:ae:b4:95:6e:50:91:d7:
                    63:28:9a:68:5e:fb:0e:ce:5d:8f:b2:66:00:c6:b7:
                    18:dd:a1:b1:41:2a:ca:76:5c:97:69:e1:d7:a8:e0:
                    19:5f:61:0d:49:cf:18:d2:bf:c3:ec:9c:51:67:d0:
                    75:54:6f:85:a2:42:9f:96:b3:01:8b:0b:50:d3:5a:
                    8e:4d:79:fe:d0:27:94:de:c1:9b:bd:3c:5a:21:c3:
                    ec:c5:14:d4:71:43:5e:a6:5b:67:59:2c:12:43:43:
                    04:fc:a9:17:74:f9:36:53:72:df:37:86:6a:5d:2e:
                    1d:3a:71:19:b1:c7:e7:ae:8c:93:35:b7:55:4b:94:
                    2f:d2:61:12:4e:00:f3:da:f0:31:8c:6e:dc:ad:7f:
                    ae:30:13:f2:6c:b1:f7:e0:d4:10:c0:96:53:1b:bc:
                    df:88:50:ca:ab:f9:6f:d3:62:8a:da:98:0e:34:d4:
                    ba:aa:36:f9:02:b6:16:7f:45:a2:5d:dc:41:16:0d:
                    6a:53:28:ae:30:c2:36:ed:77:c6:ee:2d:be:60:a4:
                    90:b6:26:a2:c9:fb:bb:af:b2:88:83:7a:67:6c:cd:
                    49:7b:02:48:02:2c:09:a9:24:64:6b:01:eb:9b:5e:
                    f3:e7:53:a4:3d:be:9b:93:a4:9c:76:c4:d3:9e:31:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E1:A8:42:42:82:8E:37:78:C5:58:A8:2B:49:4D:BF:25:F7:2C:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b234807-415a-303a-98e3-2c638703479e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:7b:82:a0:eb:0d:50:b5:5e:df:5d:da:a1:19:ac:0a:03:4f:
         0e:f2:75:d9:11:b4:8b:4f:6a:44:a4:2b:cf:95:40:76:e8:90:
         c7:4c:eb:e5:3e:20:5b:2f:a1:73:15:37:9c:80:6f:7a:2e:46:
         28:0b:51:67:ef:a4:c2:86:42:0a:46:b5:a4:1f:dd:fc:03:05:
         09:6f:93:70:7c:3e:6e:c8:11:40:b8:9a:7d:38:72:a3:45:a0:
         6f:00:eb:84:3d:b3:6f:66:5b:fc:7d:04:10:32:13:5c:a3:7c:
         3e:c4:17:3d:f0:dc:be:63:66:d1:82:bf:cc:cc:14:45:5a:01:
         23:d3:ef:e5:93:a1:72:c2:f0:64:d8:dc:65:65:d3:1a:71:c6:
         f9:63:80:1d:64:03:96:6b:88:1d:8d:1e:1e:56:af:a2:0b:f9:
         97:0e:1a:f3:8d:bf:de:b6:0c:d2:9a:f0:03:d7:a3:80:28:d2:
         a4:68:8a:bd:3b:51:4c:9b:a0:85:ee:81:f6:7b:0e:1d:ec:e8:
         67:2e:92:0f:c9:5d:12:3c:fc:ba:50:ed:bd:8f:6f:af:c9:7b:
         07:17:5a:b1:17:b7:80:12:86:ec:37:4f:3b:54:57:ae:1e:bb:
         58:cd:6a:c7:1d:8b:d7:f3:e1:df:3d:ba:53:a8:c0:07:55:43:
         80:ab:ad:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:27 2025 by rpki-client