Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878ba0e7-5a08-3613-8a70-018b2a9fbc3c.roa
File:                     878ba0e7-5a08-3613-8a70-018b2a9fbc3c.roa (raw, json)
Hash identifier:          zoaLubgBoJkHX7nyhx/fRYQBI2a9TI2NDNV03Eyqexc=
Subject key identifier:   C0:13:AC:54:3B:72:09:BD:A1:5C:14:EF:BE:F4:10:4E:2A:36:64:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849393E91C324C97D17734F8E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878ba0e7-5a08-3613-8a70-018b2a9fbc3c.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     396585
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:91:c3:24:c9:7d:17:73:4f:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=33c6ba1a-b20c-4a3d-87fd-360c623dbef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:df:ef:58:d7:41:49:7e:ec:52:43:71:2c:df:
                    31:a7:6e:24:e1:67:53:9b:1e:94:2f:b7:ec:b8:81:
                    23:4f:90:3a:3a:e8:1c:2e:a0:9e:2f:af:56:6d:d1:
                    45:3f:22:ec:ab:72:d6:87:06:c2:f2:94:6c:52:d6:
                    a4:4a:c4:f6:15:d5:03:ec:ff:5c:ec:31:13:3e:46:
                    33:05:58:f9:b7:b7:16:6b:3a:f6:c6:aa:2b:5a:6d:
                    b8:eb:8e:d7:68:14:3f:50:f4:ad:b2:bd:ef:87:e3:
                    55:73:26:6e:5c:53:f4:21:b9:ab:3c:ee:c3:62:89:
                    61:77:56:81:82:f3:57:45:a4:8d:8a:b0:98:d6:80:
                    6b:23:53:c0:1e:e9:fd:24:5d:5e:52:82:42:54:6a:
                    8f:55:f5:80:bf:f3:5c:b1:eb:12:99:39:fa:9c:8a:
                    93:44:c8:69:a7:2b:6e:ee:5f:2c:4c:9b:10:46:80:
                    2d:30:02:a5:04:81:91:6f:15:1f:2f:b2:54:9d:19:
                    d0:72:17:36:e4:4d:68:fe:74:9a:2e:bf:5a:ca:a8:
                    d6:eb:f0:fa:17:ed:82:c1:15:ee:be:6c:5b:dc:c1:
                    cf:2d:49:34:e0:8c:8d:60:5c:5d:33:32:07:c1:c0:
                    bb:f2:e5:66:26:fc:97:e2:d0:b1:29:1e:ec:33:aa:
                    06:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:13:AC:54:3B:72:09:BD:A1:5C:14:EF:BE:F4:10:4E:2A:36:64:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878ba0e7-5a08-3613-8a70-018b2a9fbc3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:fe:37:95:05:a6:ee:63:02:56:ee:e9:f5:26:34:2a:5b:89:
         c7:e5:08:0c:c8:e2:03:b2:84:ff:89:38:f9:43:eb:a7:84:79:
         68:11:13:de:7e:d0:85:c0:d6:9f:2e:df:3c:90:d4:fb:57:94:
         54:8a:94:46:3b:53:be:65:b1:92:ef:73:7c:39:00:e2:96:cf:
         e3:91:b4:60:40:7f:62:cb:5a:0c:3f:52:5b:5d:a7:34:e3:df:
         bd:79:69:d5:bd:1a:ee:da:47:5e:07:60:dd:71:19:f0:98:61:
         36:b7:85:88:ba:3e:77:be:04:c3:5f:f2:cf:c7:77:f2:a8:8d:
         fe:fd:7d:94:ab:02:44:b5:f4:a4:9a:48:18:12:bd:79:93:03:
         05:bc:20:ae:ab:2c:18:be:f8:2a:19:30:01:ae:03:7d:b6:fd:
         f8:d6:60:b2:8a:cf:55:e6:89:fb:b9:9d:b5:1b:37:d8:20:bb:
         cf:f5:bb:f4:6d:f3:78:35:07:f4:03:2b:18:d1:f1:c4:ec:33:
         7a:5a:ba:c0:d9:2a:c3:5a:9f:0a:1c:cb:9d:99:c1:c7:ef:1d:
         cd:93:eb:13:69:c8:5a:60:a4:ed:43:39:d7:07:92:83:13:5a:
         9a:01:f1:5f:91:da:d3:c8:d7:74:c4:3d:a0:ec:8f:df:36:54:
         04:b7:bb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:37 2025 by rpki-client