Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91d7336e-af88-3bc1-8ed3-3bff0942501c.roa
File:                     91d7336e-af88-3bc1-8ed3-3bff0942501c.roa (raw, json)
Hash identifier:          QJSJugsQML3IhZC2k4B/nE30mbN8NfGA4laONPbegYM=
Subject key identifier:   3A:A6:15:A8:CE:E2:7E:7C:64:D0:FA:55:7B:1A:AA:47:9E:B1:CC:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183C9409D1013E7BCB0E780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91d7336e-af88-3bc1-8ed3-3bff0942501c.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396827
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:c9:40:9d:10:13:e7:bc:b0:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=38ef726f-a118-445e-959e-fd6719eef458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:d3:a8:85:42:70:9a:7c:30:13:fc:82:4a:
                    7f:c5:ec:15:f0:2b:ce:4c:62:3f:9b:a4:c4:82:55:
                    3d:d6:27:e5:f1:5d:e2:4d:87:fa:cb:1a:c9:87:2d:
                    f6:dd:02:24:1c:56:a2:27:76:44:3f:0b:91:a7:c0:
                    9f:b2:e1:05:60:a6:46:c0:0a:25:8f:9c:40:11:b4:
                    25:5d:16:70:3f:9e:83:d1:55:55:ad:6b:b0:e2:2d:
                    dd:3a:31:fc:c2:44:3e:c9:0e:10:e6:14:1e:4a:a8:
                    a4:8b:8a:88:93:f2:2b:7c:b0:a1:1f:cb:79:a1:28:
                    ba:47:5f:b4:db:90:b7:28:e1:a2:46:e6:a1:b8:4e:
                    2c:53:28:f8:73:a3:a2:f2:64:05:e2:25:2b:65:46:
                    33:02:02:51:e4:56:c1:84:9b:22:91:89:b1:b4:5a:
                    17:72:ce:ce:63:72:54:c2:95:d5:aa:c9:98:c5:08:
                    e6:f6:7e:e8:23:b0:3f:fc:2a:4c:d0:e6:98:ff:5b:
                    db:46:d2:a3:2a:ca:21:b3:38:17:57:3e:02:b1:a6:
                    b4:9b:fc:e0:b3:55:04:67:08:27:99:a1:92:dc:a8:
                    2d:c1:60:12:ee:85:7d:ab:c9:5a:62:11:3a:ea:c5:
                    8d:84:b3:a3:4c:22:81:b2:fb:a0:b1:33:9b:75:33:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A6:15:A8:CE:E2:7E:7C:64:D0:FA:55:7B:1A:AA:47:9E:B1:CC:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91d7336e-af88-3bc1-8ed3-3bff0942501c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:85:45:76:94:23:9b:4b:49:54:b6:b0:af:cf:2d:cb:d5:f0:
         c4:c9:13:98:05:ce:e4:a7:7b:5b:a1:7a:da:70:c7:f5:07:d4:
         1c:80:90:17:0c:6e:41:2a:7c:68:d1:ec:29:b3:8b:02:73:41:
         96:16:c4:a2:af:d5:70:00:91:84:fd:25:f0:1c:2f:f4:2f:ae:
         db:e0:b4:8d:95:38:30:42:29:52:22:7e:1b:b8:95:de:d6:71:
         26:03:d8:f8:2b:da:f7:72:9c:5e:d4:32:13:5d:68:0b:28:71:
         bc:c7:5f:64:14:1f:8f:d8:0a:f7:88:2a:8c:e6:68:b2:c3:d4:
         86:be:d9:8f:c7:4b:a4:44:cb:e6:8a:50:e4:f9:f3:bb:c2:13:
         f5:d5:f2:b3:bc:01:10:37:ab:a6:08:40:ce:5b:11:c0:94:c5:
         20:bc:17:01:64:e4:9c:19:5e:1a:2d:e6:c7:9b:14:bf:16:87:
         ee:90:59:36:23:93:50:b9:26:32:62:79:d2:37:28:cb:6a:ae:
         00:d1:0e:c9:8f:8c:15:27:4c:99:ce:1c:35:fd:d8:db:27:e3:
         33:55:b7:96:a8:58:1a:88:4f:7f:2e:c8:8d:de:b2:c5:8c:0f:
         bf:f6:7a:62:1d:f2:57:8b:4a:35:9d:ff:d0:8d:b0:16:b3:e1:
         9b:ce:b0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:14 2025 by rpki-client