Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e8b0104-af9e-3204-92c5-d73c89a34899.roa
File:                     6e8b0104-af9e-3204-92c5-d73c89a34899.roa (raw, json)
Hash identifier:          Ogy0Rn/Wv20PUw/Kkunf3N9Jy3HXeSlytOQKz/9NT7U=
Subject key identifier:   EF:A4:5D:E6:68:00:AE:DA:CD:F6:79:B8:04:DF:98:9B:C8:F3:17:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F5A4A549CD21ED5319A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e8b0104-af9e-3204-92c5-d73c89a34899.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396572
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f5:a4:a5:49:cd:21:ed:53:19:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=d8007ddb-9776-405d-91cf-bc1f43726f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:53:38:8f:7a:bc:c8:6d:3f:47:4a:21:01:1e:
                    28:0e:e8:1b:fa:c5:2c:1c:44:db:4c:95:9d:75:18:
                    dc:38:d3:2a:f7:ce:21:fa:34:51:a1:01:88:dd:52:
                    96:c5:99:55:d5:96:80:13:cc:4b:3e:34:16:66:55:
                    c0:03:1c:d4:67:88:c5:ba:06:23:9b:d7:26:84:a2:
                    da:77:53:a5:86:10:00:74:1d:23:64:87:c7:4e:81:
                    1c:34:bd:ff:2d:81:90:0e:5c:75:9b:73:bf:8a:9d:
                    d8:50:b3:54:04:dd:6e:ac:0c:aa:e1:71:64:d9:f1:
                    14:d2:2c:f2:f5:b4:23:56:e0:f9:b1:98:c2:88:6e:
                    89:c4:66:f2:c7:2e:59:06:72:54:cb:29:e3:ad:aa:
                    98:7b:01:3f:01:81:84:eb:26:e6:05:19:a3:29:6a:
                    c8:48:a4:3b:60:f0:11:48:44:30:8d:89:d4:69:ab:
                    de:a3:b9:7c:7d:c5:8b:1f:e3:02:0e:7d:97:c0:8f:
                    91:fc:d5:21:23:68:f8:11:44:15:42:10:33:d7:49:
                    ae:d1:cb:ce:06:87:32:e9:8f:d3:c5:d6:47:7d:ca:
                    fc:ad:58:c0:d8:25:7e:44:95:d5:b8:dd:9d:a6:f8:
                    ed:6b:21:cc:0e:b4:06:ab:a3:32:da:b2:44:82:d3:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A4:5D:E6:68:00:AE:DA:CD:F6:79:B8:04:DF:98:9B:C8:F3:17:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e8b0104-af9e-3204-92c5-d73c89a34899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:9f:e5:59:30:5c:44:17:f4:a1:12:51:5b:9c:ea:e5:bc:5e:
         24:4c:77:e1:88:ed:d5:e0:d5:23:3c:6a:8b:10:cb:69:3c:5e:
         cb:70:38:67:6e:48:ff:f3:1e:18:0d:af:cb:e3:5a:92:39:77:
         79:3f:54:76:ec:be:21:11:4c:3e:ee:c9:09:f2:f3:75:8f:b9:
         49:0e:78:6d:24:d1:97:1b:f6:ad:9e:50:c2:32:37:92:32:aa:
         68:fb:aa:c3:40:36:b5:c3:8f:ce:36:22:06:d5:b2:42:da:84:
         1e:e9:15:62:d3:cd:07:81:9d:e6:9c:8a:07:dc:3c:ae:b1:d2:
         7b:a0:3f:de:4b:48:f3:aa:7b:bd:b3:6b:1b:be:f7:03:f1:30:
         3a:b0:59:96:be:77:7b:f5:8e:2e:11:29:f4:b3:3b:76:5b:71:
         bf:62:48:b6:64:31:a7:dc:e9:9b:96:97:ad:2b:bc:fa:14:a4:
         12:e1:d4:dc:c1:68:bb:5c:d0:c4:c6:dc:a2:40:8a:72:03:fa:
         00:28:58:1c:96:e5:c9:25:8a:f1:f3:14:28:8f:99:54:01:94:
         23:ad:d3:14:59:d7:28:d8:af:15:d0:70:2b:fb:cd:eb:56:9b:
         8e:88:aa:ae:45:82:07:67:33:8d:61:5f:40:bb:ee:65:ff:9b:
         80:ab:69:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:13:28 2025 by rpki-client