Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87404f98-2176-30ed-97c3-b19a0b244ae1.roa
File:                     87404f98-2176-30ed-97c3-b19a0b244ae1.roa (raw, json)
Hash identifier:          yQjmvcBi1DoWL0RMUV3fxKe5DmWXF6jOFvhEZoFm1r4=
Subject key identifier:   7D:A7:4E:A2:FC:D7:B3:E2:68:E2:6B:5B:BE:7F:CE:AC:0C:7C:21:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858493243F4A2672A3AAC25A49000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87404f98-2176-30ed-97c3-b19a0b244ae1.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     22547
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:f4:a2:67:2a:3a:ac:25:a4:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=9c88f659-1a35-48af-a33e-368bd8482f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:ec:90:ea:57:d1:65:71:87:cc:07:c2:77:
                    09:63:a0:2d:fb:14:af:95:6f:eb:3e:df:69:60:ee:
                    dd:db:73:f0:25:e2:ce:7d:7a:2d:68:93:4c:b6:c9:
                    11:33:c4:fd:72:48:15:b2:ca:28:a0:fc:82:4c:80:
                    d0:ea:90:18:13:a5:e1:61:84:b3:62:99:41:ac:ab:
                    62:32:cb:d8:dc:ab:f2:b5:6b:99:aa:1c:c0:f4:54:
                    eb:02:27:c2:4c:1c:2f:08:0c:9a:57:c0:2c:1b:87:
                    7a:64:4b:f1:29:cc:c0:4d:e3:53:2f:f3:65:2e:ac:
                    1d:75:81:b9:86:b6:76:8c:8a:9e:ab:7f:6b:65:10:
                    ce:d3:ca:77:63:ac:0b:ad:26:05:36:7e:5f:1f:ec:
                    f3:e2:6e:25:1d:f1:27:1a:9f:09:22:ea:ae:65:fb:
                    9d:a9:08:5a:5a:35:9c:3b:3a:40:23:fa:f2:fe:64:
                    e2:42:9e:4d:40:61:07:27:e2:4b:01:89:31:18:7f:
                    a1:26:38:b8:6c:3d:5b:ec:e8:b1:90:21:2c:71:86:
                    34:56:7d:a3:79:7d:fd:48:76:7a:e5:06:e1:2e:24:
                    88:bc:c4:89:ab:de:7b:f8:29:15:f7:d8:9b:c9:5a:
                    fe:ee:2a:aa:03:82:b5:26:18:48:e8:46:88:00:fe:
                    7c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A7:4E:A2:FC:D7:B3:E2:68:E2:6B:5B:BE:7F:CE:AC:0C:7C:21:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87404f98-2176-30ed-97c3-b19a0b244ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:6f:80:7f:3b:f7:c9:cd:ce:c7:2b:52:f8:fc:5c:9d:17:a7:
         0a:96:70:5a:2b:53:a2:cb:8a:f1:d0:15:6f:01:ca:88:d2:46:
         54:a5:1b:9f:41:33:cb:ef:ab:28:de:f4:0b:14:92:10:05:a9:
         49:24:14:7f:46:36:98:f8:c2:89:c1:34:bf:4b:a9:4a:63:4e:
         a7:ce:76:6c:66:4f:a9:e5:0d:39:5a:55:05:19:f8:62:fa:e1:
         a2:51:86:cb:6b:ee:c5:7f:da:10:27:c1:03:0d:2f:d3:73:df:
         b7:5f:66:50:15:30:8d:15:88:0d:7c:72:a0:da:fe:09:2d:80:
         85:d0:b7:f2:1b:ab:86:bb:95:54:a9:90:ae:d3:d6:21:25:a8:
         e3:96:aa:17:b4:e8:46:47:b9:e1:bf:e3:3b:72:6b:d6:51:a9:
         d8:1b:43:4f:e0:11:1c:45:8c:fc:97:4e:c7:ef:5a:2f:44:32:
         f3:86:09:78:6d:b6:5d:b2:ff:46:e7:dc:0f:3d:d4:6f:ec:25:
         a6:50:9b:3d:d9:9b:24:20:17:12:af:0b:80:1a:f8:d0:73:dd:
         5f:03:45:f9:46:e3:98:df:e7:c2:45:94:f3:e6:9b:78:9a:30:
         f6:3a:1a:17:75:b1:57:12:af:52:59:16:45:a0:7f:be:77:ba:
         80:1a:93:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:29 2025 by rpki-client