Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/713df5f8-cc19-391d-86d2-83391cbbbf6a.roa
File:                     713df5f8-cc19-391d-86d2-83391cbbbf6a.roa (raw, json)
Hash identifier:          GuAopcI/FCMgC3lXy5+SrbmQSQzs26Nihu6+PGXK2P0=
Subject key identifier:   41:2E:9D:83:86:69:6C:3A:30:3B:36:DB:07:B1:83:35:D5:D7:A6:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858493243F18AE69A1124AC37C320
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/713df5f8-cc19-391d-86d2-83391cbbbf6a.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     396610
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:f1:8a:e6:9a:11:24:ac:37:c3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=2c28cefc-cdec-40d6-a741-3e93d1b4b38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c3:d9:cd:09:b7:e0:b0:89:85:8c:c6:a4:3f:
                    80:72:71:5e:4d:58:27:ba:53:fc:9d:d3:02:b1:8c:
                    62:b7:9c:f8:1a:53:76:01:bd:8a:d8:84:05:92:61:
                    6d:8f:9d:5c:9e:f5:f7:34:23:72:71:14:f6:65:42:
                    e7:9c:86:5f:a2:14:6c:ff:b3:9b:f8:29:c9:c3:b4:
                    6a:bf:d6:3c:97:e9:a8:87:5a:a6:81:7f:3b:9a:6c:
                    28:8c:f5:a8:df:2e:bc:e6:9b:53:5a:76:40:f6:90:
                    6f:43:c7:10:a3:c0:d6:e9:40:72:dd:c6:b1:0c:73:
                    c1:3d:79:c3:75:56:06:d6:c2:ab:a5:81:13:b1:40:
                    10:23:bb:b0:77:bf:e0:2e:ae:18:40:b7:2f:7f:2f:
                    da:dd:72:98:c2:26:3c:06:e2:6e:ae:0c:b1:8b:3d:
                    d1:21:34:a8:92:26:c0:0c:0e:a2:57:a8:a3:1f:ee:
                    dd:49:4d:e5:cd:8e:f4:bc:e7:f6:ee:a2:57:32:54:
                    f3:11:df:ab:f5:38:57:38:3c:98:78:9b:6b:b8:49:
                    5a:55:16:ca:6f:06:c8:cc:9b:c0:7f:ca:12:ec:42:
                    32:0b:9c:21:62:43:e1:ed:10:a0:da:c7:a3:b1:bb:
                    63:aa:44:38:90:5a:fe:5a:5b:30:d0:91:06:b3:e8:
                    5b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2E:9D:83:86:69:6C:3A:30:3B:36:DB:07:B1:83:35:D5:D7:A6:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/713df5f8-cc19-391d-86d2-83391cbbbf6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:1e:c7:10:a2:bb:ea:00:03:24:b1:d3:26:13:61:53:26:91:
         53:5f:30:be:99:ce:84:fa:46:59:10:4d:e7:50:16:89:95:0a:
         75:bc:77:63:28:5f:36:05:bc:31:69:6d:16:27:7c:b6:a2:27:
         93:66:24:12:fb:0e:09:98:6d:75:cc:d9:11:5c:4f:9b:ee:20:
         dc:c1:da:0e:36:b6:0d:d7:d9:39:f7:ca:32:1b:76:67:fc:e1:
         bd:27:05:6d:52:8c:58:dd:9d:77:08:7e:c4:c5:a9:b8:b0:f6:
         6e:c9:70:0d:31:ae:7b:20:3d:b6:0e:6b:51:79:e5:47:20:2e:
         92:78:4e:b4:45:44:71:a1:db:83:5a:f7:e9:f7:cd:c0:44:be:
         72:e7:19:5f:0c:4d:b3:13:2d:e3:b8:ef:62:90:9b:64:d9:dc:
         3a:e0:88:67:5c:75:6a:03:5e:d6:86:60:50:ba:e4:d8:87:03:
         eb:fb:19:f5:25:aa:79:42:5a:c2:7e:e1:d6:f1:85:a1:bc:7d:
         90:d0:7b:53:38:e5:24:f0:4b:08:80:47:b6:6c:ee:66:08:04:
         10:aa:de:ef:15:c2:86:07:06:60:10:c8:65:e5:da:ee:b8:2b:
         23:f2:75:69:b0:91:ec:84:a5:93:aa:bf:16:99:6a:7f:d4:09:
         4c:cf:92:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:17 2025 by rpki-client