Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7024b183-b190-3dfd-bed4-725410dea48d.roa
File:                     7024b183-b190-3dfd-bed4-725410dea48d.roa (raw, json)
Hash identifier:          YLG2ve3U8CuEogayI9S6D6YNHLcXyoN54p6X9hw9fqQ=
Subject key identifier:   79:F1:42:C8:97:D0:5B:E5:28:CE:CD:B7:85:D3:4B:21:84:61:98:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849393E8F54D18D239D3B3E8B40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7024b183-b190-3dfd-bed4-725410dea48d.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     397211
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:8f:54:d1:8d:23:9d:3b:3e:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=cf0f2a6c-742f-4449-af9b-63e2be169234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b6:af:3a:8b:b5:a7:79:b1:f3:c3:36:fe:d3:
                    8c:ef:ba:27:ac:77:6a:63:ba:67:c6:32:9c:f7:59:
                    3c:14:0e:31:4a:74:27:14:c0:a3:db:0f:c4:2a:5f:
                    a6:a2:6c:02:34:b8:06:ad:87:48:9c:3f:4c:4f:29:
                    bb:b5:e9:89:34:ed:25:55:3b:c0:16:31:2b:0a:d0:
                    8b:db:79:a9:e9:52:dc:40:b9:c8:e7:0a:94:a5:eb:
                    39:a4:d5:63:61:63:fb:12:4d:97:bd:47:74:a2:ea:
                    1f:7e:32:c9:f5:61:62:01:4d:22:2d:69:df:32:8a:
                    b1:04:c2:3a:7f:93:6a:91:49:26:a9:2a:19:3c:ad:
                    aa:b4:98:a6:4c:f2:03:d2:b7:5b:42:76:f5:aa:1d:
                    23:d9:3c:62:01:9d:11:98:4a:30:d4:07:08:2c:b2:
                    ba:da:b0:92:a0:c2:09:67:82:6d:36:fd:c4:10:e9:
                    a0:77:62:f6:ea:66:84:a4:09:e2:81:03:63:c1:29:
                    43:ff:f9:e4:0a:84:c0:06:01:ef:f5:aa:73:04:b0:
                    83:12:15:0f:11:9f:48:c6:eb:22:be:23:a9:17:9b:
                    a8:9e:21:1d:7d:09:ee:30:a8:fe:de:33:c8:7e:73:
                    f5:4b:b0:ca:81:7d:9c:af:1e:1f:bf:85:21:8a:30:
                    67:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F1:42:C8:97:D0:5B:E5:28:CE:CD:B7:85:D3:4B:21:84:61:98:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7024b183-b190-3dfd-bed4-725410dea48d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:1e:ba:96:8c:8f:87:fa:2c:95:20:b2:e7:a0:e1:10:94:cd:
         d1:b7:50:aa:41:59:72:96:e7:4b:03:94:00:4c:3d:28:e7:6d:
         42:22:b5:2a:b8:ad:de:35:30:b6:38:43:d2:af:fa:1e:6e:c3:
         f3:5a:d9:89:7e:e6:c0:b1:bd:42:47:c0:78:21:a6:c5:e0:18:
         98:8a:e3:f4:df:a8:75:24:93:f0:3a:67:e3:67:5a:a1:a4:80:
         22:4a:ad:77:00:5a:2d:d6:49:51:8b:5b:e1:bd:10:38:50:d1:
         18:98:18:67:24:02:3f:2a:ef:0a:e7:4f:6f:c5:69:bb:24:ef:
         76:54:87:98:2c:1f:1c:bd:3a:dd:2f:76:c9:d3:96:8b:2b:c7:
         bf:2c:ce:de:df:84:52:64:50:82:3b:52:e4:c6:8e:61:41:37:
         07:e8:77:f6:fa:ea:c0:4d:d2:3c:f1:c5:ea:e0:3c:d7:8f:55:
         ca:0b:7c:93:1a:e7:78:d9:cc:bd:0d:c0:23:c4:4d:ad:d4:26:
         f6:b7:09:50:1d:67:a4:ec:a5:67:16:9f:94:86:e3:2a:3a:01:
         5e:83:cb:c4:20:e0:15:03:e0:a2:48:de:cf:5a:98:a5:e5:87:
         fa:ae:c1:95:4e:ec:ea:91:dc:5f:c9:15:28:01:02:5b:28:66:
         2e:8b:e8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:59 2025 by rpki-client