Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cc15d3f-2add-3ef2-9446-92ba90a041f8.roa
File:                     8cc15d3f-2add-3ef2-9446-92ba90a041f8.roa (raw, json)
Hash identifier:          /LP0QgRzoe9Smy6EHtid62Qdzf3TAWCmXmRx3jsyOVQ=
Subject key identifier:   4C:03:D8:47:A6:3F:0D:CD:8E:C8:6D:E5:25:A2:C6:FA:24:8F:86:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A3F583E1995F20159BF56200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cc15d3f-2add-3ef2-9446-92ba90a041f8.roa
Signing time:             Thu 23 Jan 2025 13:38:20 +0000
ROA not before:           Thu 23 Jan 2025 13:38:20 +0000
ROA not after:            Wed 23 Apr 2025 12:38:20 +0000
asID:                     36628
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:f5:83:e1:99:5f:20:15:9b:f5:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 23 13:38:20 2025 GMT
            Not After : Apr 23 12:38:20 2025 GMT
        Subject: CN=a3874159-5dcb-4ba4-bc6a-2e4f5601f4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f8:fa:e7:24:ad:70:57:74:b7:09:fb:e5:bd:
                    c9:20:eb:1f:26:b4:46:e1:ef:26:49:5d:f6:9e:76:
                    cf:16:c1:a8:b5:55:a1:45:3f:74:56:09:67:10:cf:
                    17:89:b3:0a:ee:41:0a:52:b4:6e:3f:58:e6:a2:24:
                    b4:61:fa:b5:bc:08:2c:46:c6:22:0a:c3:74:6d:87:
                    51:a6:d4:94:e2:e8:72:ba:3e:d9:51:90:27:a9:21:
                    d2:ac:44:bb:c2:9c:15:78:ca:e3:33:eb:02:e2:35:
                    8b:ac:90:6b:23:10:6d:ea:94:02:b0:14:df:07:24:
                    85:f1:46:d6:db:fc:41:2d:15:f8:70:ab:58:7b:89:
                    bc:b8:06:5e:62:b3:11:0b:fd:48:9b:31:5c:c3:68:
                    bc:17:f2:43:8a:1c:ca:3d:44:2a:37:ea:4e:8d:bb:
                    84:49:9c:2a:ee:0a:65:a9:87:8e:80:2e:4d:ef:4e:
                    a1:f0:0c:91:0b:ca:19:fd:e3:75:97:d6:77:e7:58:
                    74:e2:7a:ff:29:29:86:3d:59:72:eb:02:14:11:33:
                    7d:6b:fb:c8:6e:60:4b:ea:3c:5d:7c:c2:aa:c3:c9:
                    83:ab:03:c4:ec:80:35:de:f6:69:e9:49:bd:ba:fc:
                    ee:7c:6b:81:46:a8:be:9b:15:bc:80:e6:61:7b:61:
                    fc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:03:D8:47:A6:3F:0D:CD:8E:C8:6D:E5:25:A2:C6:FA:24:8F:86:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cc15d3f-2add-3ef2-9446-92ba90a041f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:06:01:6f:e7:99:6b:06:51:7c:b9:9a:38:8f:ad:1d:12:a8:
         90:f0:29:9e:be:d8:ff:fb:d4:f6:c1:f1:e1:f5:97:3d:2e:8b:
         db:f8:0d:3e:05:d4:7b:62:44:7e:da:46:c5:a3:5b:ee:d1:30:
         7c:73:e3:05:76:a1:a4:ff:24:d3:48:ea:1e:52:52:e7:d7:ea:
         3d:f7:a9:7f:91:98:30:b8:fc:a8:28:46:13:1f:9a:cf:62:db:
         40:93:79:be:70:1c:0e:85:3d:3b:6b:af:80:96:15:9b:78:55:
         8d:b5:3b:20:81:10:bc:f5:4b:10:a6:61:fb:b8:37:08:cb:e9:
         d7:21:0d:a0:97:d6:4a:26:f7:87:de:f9:8a:4f:98:46:24:83:
         0c:38:3c:73:87:20:36:31:e4:10:22:d8:00:6a:71:92:69:03:
         09:a0:aa:9a:e7:5a:06:72:ed:5c:62:1d:db:f6:76:d2:e5:c3:
         5a:67:93:94:8d:70:26:0e:55:14:9e:fb:91:16:01:96:c4:0d:
         64:78:e9:c6:8d:43:13:bc:bb:e9:dc:2e:ac:20:cb:d9:2d:9a:
         bc:86:38:da:bd:e9:c9:5c:5d:03:2c:82:df:c0:e5:33:b1:a7:
         5b:1b:97:6f:5b:8a:5b:f7:0c:ab:a7:d3:04:f8:46:59:8c:80:
         33:3b:1d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:02 2025 by rpki-client