Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f1ea876-e56c-3944-93b0-dc1884fe5910.roa
File:                     6f1ea876-e56c-3944-93b0-dc1884fe5910.roa (raw, json)
Hash identifier:          x4uaBlcK/S4IZrjrSmN6N8y6uLwZ+2ToXJbc0+FMdrg=
Subject key identifier:   C7:05:86:77:A4:26:91:16:0C:E0:3D:5F:1B:5A:36:5C:B7:C4:FA:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497DA4603786E2A77A86A81080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f1ea876-e56c-3944-93b0-dc1884fe5910.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     396561
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:60:37:86:e2:a7:7a:86:a8:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=4fc94c15-6062-4699-a7ed-79b9c56220c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d4:a0:3c:61:b1:bc:f8:02:5d:e6:a7:0d:0e:
                    e3:65:49:43:db:33:27:c9:4e:71:13:e5:fc:e2:73:
                    88:a4:51:e1:96:ed:de:46:03:ae:ff:14:7b:a9:3f:
                    63:d7:ca:4a:a2:43:0f:59:61:48:15:72:73:56:37:
                    25:26:aa:15:54:81:c4:c8:35:eb:5c:99:de:4e:49:
                    47:f0:4c:2e:78:3b:e6:f8:e0:d4:2b:b0:5b:ae:fa:
                    7e:c0:bd:96:fc:44:6c:68:37:c7:3b:ba:53:92:b4:
                    33:9f:f5:5e:40:be:c3:71:69:40:ab:8f:58:ec:d4:
                    da:4a:be:9c:77:00:79:7c:17:d3:4e:77:96:42:84:
                    81:86:24:37:14:8e:37:78:1d:c3:aa:21:fd:61:03:
                    b6:4c:51:83:b2:90:e6:52:17:74:33:ff:3b:e0:fa:
                    81:c1:55:50:82:57:8a:2b:3e:14:23:fe:91:26:d4:
                    75:71:c3:b2:e3:ed:7b:d7:a0:d2:da:f4:c9:4d:e6:
                    d2:0b:9f:2e:08:38:86:3a:1b:44:ae:bb:07:65:11:
                    07:86:e6:e1:c1:db:8f:54:5c:17:29:7e:d5:c9:e0:
                    e2:7e:6a:d3:2a:77:54:90:07:23:56:29:ac:2a:95:
                    e8:ee:86:ea:49:5f:ee:83:f8:4a:8c:94:b3:50:de:
                    07:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:05:86:77:A4:26:91:16:0C:E0:3D:5F:1B:5A:36:5C:B7:C4:FA:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f1ea876-e56c-3944-93b0-dc1884fe5910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:fb:23:d6:ec:41:ed:40:4e:ba:36:40:8a:14:17:42:6f:92:
         0e:2a:6d:e3:30:0b:19:6d:92:fd:f9:81:7f:6f:ce:f9:79:e8:
         c9:4d:de:59:6e:b6:d7:1a:d1:7b:ce:c4:25:2d:41:a5:03:0e:
         95:6e:59:c4:99:85:e7:8c:3b:6d:13:86:5e:3c:1d:98:e3:92:
         dd:4e:84:46:85:aa:d4:96:cb:d5:55:41:5d:d1:d0:b2:2b:d6:
         69:8c:1c:85:9a:97:cd:96:0c:e9:fe:15:ff:4b:24:7d:f0:d3:
         54:93:c5:f2:bd:a7:6d:3c:96:5f:4f:f9:ee:ad:82:0c:b4:7a:
         f1:1e:c3:82:ea:ce:f0:91:90:d2:0a:db:bd:73:9b:a2:60:52:
         1b:b7:17:66:b4:9c:78:e9:ff:8a:dc:18:65:74:a0:a8:d2:30:
         b7:fb:87:2d:61:23:7e:a6:04:1b:b0:54:48:1b:28:0e:bf:95:
         f8:89:5d:4a:b3:a4:b8:14:ca:99:1a:ae:77:f8:a5:5a:80:04:
         9a:76:f0:70:72:71:83:f1:53:e5:29:47:f9:4b:20:73:fb:d0:
         c5:28:77:85:95:f8:b6:16:e7:43:2d:47:04:a5:42:4f:6e:eb:
         6f:81:ea:56:a6:d9:87:2c:42:e1:e5:95:af:4e:1b:3b:68:ee:
         9b:9f:8e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:55 2025 by rpki-client