Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/852947b5-d299-3a43-8987-66a2c6a604b1.roa
File:                     852947b5-d299-3a43-8987-66a2c6a604b1.roa (raw, json)
Hash identifier:          MkqR1cWUD6O2DOmSgcvzVR+060tu8YKVcT/sSvP/6+Q=
Subject key identifier:   D6:10:71:7C:9C:BA:E6:42:E8:E8:21:53:08:03:01:B2:C0:3F:AA:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496FAEF8673A7F4F28FA8E9000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/852947b5-d299-3a43-8987-66a2c6a604b1.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     397199
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:ae:f8:67:3a:7f:4f:28:fa:8e:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=8606be7b-173d-49a2-83de-20e740bfad31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2f:bb:0b:c1:9d:68:6f:18:08:63:46:ed:50:
                    a6:83:f5:08:7a:b7:6e:29:42:41:7f:4e:bc:08:5c:
                    1a:8c:0d:8f:fc:23:92:98:62:bc:27:11:7d:7f:d8:
                    f4:77:3a:60:28:f5:da:03:0a:e8:8a:b6:4b:75:a0:
                    72:45:53:30:fd:22:48:d9:c9:a3:c7:68:59:e6:b3:
                    6f:0c:d4:fd:f3:ba:3f:e3:f6:b7:c3:17:2b:79:99:
                    bb:e7:a3:22:7e:6a:02:58:af:85:d3:d9:db:8e:50:
                    29:4f:c4:4e:70:51:73:fc:61:bc:f4:b2:b6:36:0a:
                    7a:4e:ed:77:38:69:66:76:1e:f2:42:dc:50:78:ac:
                    07:ef:a1:ec:76:42:94:8b:f7:65:79:c9:fe:ce:28:
                    d2:3e:d7:76:d3:11:ba:01:9f:9d:c9:c9:2d:ff:dd:
                    50:8a:45:6d:72:0c:e8:2e:62:a5:5e:91:0f:6c:bb:
                    f4:12:e3:da:02:f4:07:e6:0e:4d:18:46:a4:20:c1:
                    1e:a4:dc:8b:d7:f3:ad:69:a0:e6:ab:44:93:48:1d:
                    44:00:4d:a5:e4:ef:d1:a2:41:63:59:f5:1f:bb:e1:
                    92:6c:1c:69:33:5b:d7:54:8a:34:e4:43:9e:cc:58:
                    a6:f7:fa:1f:04:00:1d:7f:8d:2c:d7:9e:8f:9d:cd:
                    8c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:10:71:7C:9C:BA:E6:42:E8:E8:21:53:08:03:01:B2:C0:3F:AA:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/852947b5-d299-3a43-8987-66a2c6a604b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:06:b7:b1:cc:03:5d:b6:51:1e:a1:73:cf:51:80:bf:09:a8:
         f7:11:dc:23:16:b5:de:ad:7c:a5:f6:1f:07:1e:b8:65:2a:59:
         25:3b:a7:bf:97:59:46:f7:9a:35:60:d0:1a:5f:99:da:28:6d:
         06:bc:fa:f5:f9:8e:56:e4:fa:24:a6:fd:a0:ba:2f:d4:df:d3:
         15:d2:a3:b4:cd:46:13:4e:8c:0e:37:bf:23:ae:8d:30:ab:c1:
         de:dd:f0:b0:ae:22:8d:5a:2c:9c:71:d5:fb:e3:44:8f:22:9e:
         9b:12:c0:bc:cb:d0:0e:1a:58:f3:05:c6:66:b2:88:a2:28:b2:
         d8:64:e8:e4:9b:4b:d6:bd:32:2a:85:ca:3c:ad:fd:31:6a:c8:
         e9:c9:20:4f:2c:6b:2b:53:03:97:d7:65:52:28:29:33:a3:14:
         45:ce:af:d9:8b:3a:fc:5c:55:5c:d9:5f:95:e8:fc:57:de:1b:
         1d:4f:b0:16:e2:93:7e:b5:71:6b:06:e4:b0:85:dc:3b:1e:d1:
         42:3c:bc:3c:92:10:3f:81:13:99:5f:99:1d:07:7a:92:b4:be:
         bf:64:3d:dd:8b:0e:20:b5:82:83:3a:b6:08:4b:fc:14:10:7e:
         f3:23:6d:95:a2:1a:02:42:a5:3e:10:57:55:c8:87:4d:99:7b:
         5f:8e:1b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:40 2025 by rpki-client