Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b5311c1-f295-387d-81ab-94dceb9b9e47.roa
File:                     6b5311c1-f295-387d-81ab-94dceb9b9e47.roa (raw, json)
Hash identifier:          fdy/RAqfK0ulHVJr8X/FbarNl5vB4naPU1alMcguEfs=
Subject key identifier:   3E:10:D3:DA:93:B4:71:C3:FD:D2:25:05:B9:9A:A7:B7:88:59:27:86
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497AD9C47622E2EEA2F489C100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b5311c1-f295-387d-81ab-94dceb9b9e47.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     396826
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:c4:76:22:e2:ee:a2:f4:89:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=36964f46-3018-4536-8d86-6d9bf32c88ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8e:d0:45:86:3c:9a:45:2a:0f:3f:61:45:ad:
                    02:71:f9:e3:c6:55:2d:1a:c3:b6:d1:72:38:bb:75:
                    57:4e:f3:d8:74:94:69:ce:d9:22:bc:14:92:16:42:
                    f6:3d:4a:75:f5:b7:9a:33:bd:b4:c7:e3:9c:27:82:
                    c8:d8:37:d0:18:00:f3:31:9a:ff:b8:c2:e1:7d:d1:
                    08:5e:25:ab:93:8f:0e:d7:0f:cd:aa:41:b4:fe:15:
                    65:e5:6f:59:78:8a:bc:6e:5f:8e:6f:fb:ec:f4:07:
                    85:ce:32:1a:64:7d:30:88:82:e7:18:d3:eb:c3:44:
                    3f:94:fe:58:2b:17:45:96:b2:ec:cd:0d:23:63:81:
                    f5:70:bf:d5:b5:da:c8:38:2b:40:52:1d:28:ce:0f:
                    3e:24:a9:86:b4:cc:46:dd:94:5c:18:82:85:7f:4f:
                    94:f8:f8:fb:8e:60:06:9d:db:d0:42:f4:d5:fc:c4:
                    2c:4d:f7:70:3b:79:96:65:93:1f:a3:79:33:2f:09:
                    10:45:64:18:32:e5:ea:e8:bc:3c:6f:39:81:ba:bb:
                    a6:c5:2c:d7:7e:8b:57:e1:19:ed:16:88:76:bc:95:
                    88:ba:49:94:d2:1d:ba:56:0f:42:5d:5b:1b:21:71:
                    aa:e2:59:06:a5:c8:07:ad:b7:96:ff:b3:c0:7f:8f:
                    89:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:10:D3:DA:93:B4:71:C3:FD:D2:25:05:B9:9A:A7:B7:88:59:27:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b5311c1-f295-387d-81ab-94dceb9b9e47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:87:63:95:06:07:2d:7b:fc:84:ff:d0:d8:f2:31:8a:c6:5d:
         33:6e:55:d4:c7:60:75:6f:f9:a0:56:c9:69:8c:c7:88:61:0a:
         c8:67:84:d9:11:49:4f:45:88:70:fc:24:2b:34:ec:9e:6e:20:
         5d:1d:7c:39:b3:0f:af:79:ef:7d:74:4d:fb:b7:18:e5:1f:54:
         67:dc:95:75:3b:7a:64:d1:94:1d:58:c8:a8:e8:74:a7:3b:e1:
         c8:19:c8:12:11:5a:87:40:16:ca:26:df:06:17:90:3a:0e:0d:
         d9:dd:ae:d0:b3:d5:19:b1:5a:4e:85:76:67:40:dc:6d:f5:37:
         c5:48:93:9e:60:7e:c4:b2:2c:ee:e2:4f:25:36:5f:30:6f:79:
         9d:a1:84:df:20:ed:6e:27:bb:27:a5:98:fb:78:4d:56:79:f8:
         37:e8:c2:c4:65:1c:94:16:9a:d0:59:f0:21:60:cc:b3:92:09:
         e2:7b:9c:fd:8b:b2:c1:64:37:24:58:da:26:3a:bb:03:44:cc:
         4a:a9:ae:cf:f0:b9:09:3e:53:ef:81:b4:8b:b3:41:75:ce:e4:
         d7:ca:bb:16:cb:6f:d8:e3:57:56:94:c4:c1:9f:47:5f:12:da:
         8b:62:25:55:72:c1:e1:15:f7:8d:54:77:d5:b1:d6:43:bb:54:
         05:d7:91:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:37 2025 by rpki-client