Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a129d54-a39e-355d-b4c2-fef534ca9c7c.roa
File:                     9a129d54-a39e-355d-b4c2-fef534ca9c7c.roa (raw, json)
Hash identifier:          VJRMlH2mvn9YltawDiUdbj/yzUaoCNu0Ici947VhURs=
Subject key identifier:   0F:84:0F:9F:5D:1B:B6:17:70:1E:1F:D8:24:CA:64:C0:E8:07:2E:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496CE4815CBDA35C4D71E11F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a129d54-a39e-355d-b4c2-fef534ca9c7c.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     396826
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:81:5c:bd:a3:5c:4d:71:e1:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=ac6ac0bb-0637-47eb-a176-2cd68da8ef7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:74:c4:90:a6:46:f8:bf:ad:2c:db:59:b0:
                    c2:d4:3a:64:97:4d:7a:0a:22:0e:08:54:0b:de:bd:
                    e3:52:22:4f:af:50:2d:5c:f0:24:a2:e6:a5:3f:74:
                    25:24:8a:3f:57:4a:0a:da:ad:0d:28:99:45:45:97:
                    1a:a4:73:73:3b:d3:f3:c2:d2:7a:e7:23:bd:0d:a1:
                    c2:6e:49:8b:82:20:c7:25:0a:84:6c:9a:e5:90:6d:
                    3a:db:db:ba:59:01:45:f9:df:54:4a:6e:33:57:fc:
                    d9:16:79:10:3c:d1:05:e3:29:96:58:dd:9f:29:38:
                    f2:80:89:22:fc:a1:24:70:43:51:5b:45:91:9f:1f:
                    e1:7d:48:33:08:1d:8a:40:20:5b:c9:27:e5:55:8f:
                    49:9b:b9:22:0d:e0:af:db:70:d5:8a:87:49:b9:8c:
                    2d:66:bd:8a:7f:6a:54:4d:21:d6:7c:30:f4:7a:6f:
                    66:22:60:42:6d:88:c3:f4:30:2a:ed:d8:07:a5:b5:
                    b9:3c:3e:d2:81:2e:c2:9a:6a:5c:94:2e:8a:20:b3:
                    bf:ac:60:a5:c5:6a:bf:75:54:f4:b9:1b:4f:b1:1a:
                    66:da:23:cf:d4:73:5a:d0:11:63:18:48:fc:36:50:
                    07:13:50:4c:dc:b9:a5:93:1b:f8:75:01:cf:97:aa:
                    5f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:84:0F:9F:5D:1B:B6:17:70:1E:1F:D8:24:CA:64:C0:E8:07:2E:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a129d54-a39e-355d-b4c2-fef534ca9c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:6e:c8:f8:33:12:ab:23:7d:c4:a6:80:cc:c5:97:23:a6:87:
         9f:a0:8b:05:c0:bc:0f:e0:ec:57:12:f8:b7:b4:a1:96:56:d1:
         78:81:9c:b5:25:f3:5f:9c:4e:e9:49:6c:c4:25:19:10:1d:e4:
         59:39:01:04:c3:af:9e:da:0f:5f:ee:70:dd:f4:54:82:b3:00:
         4c:47:cb:bc:c3:b0:87:80:ec:32:73:25:35:2d:b6:f2:e6:e5:
         8f:b7:fb:0d:e7:8a:b8:13:8b:15:09:b7:b3:f2:48:83:d6:0b:
         b0:da:fb:21:ea:50:14:76:c4:b6:a2:3b:b9:2c:d7:7c:e7:66:
         3a:e3:9c:b4:73:97:5b:04:b7:bc:04:a1:36:63:b0:03:73:d6:
         22:db:19:7e:98:e7:41:d0:31:db:0a:89:1c:91:a2:77:13:51:
         1c:9a:ab:b5:48:a8:bd:11:51:77:fb:da:77:90:9a:d6:6f:72:
         1a:80:ac:f6:e1:08:df:61:af:2a:28:cc:83:c5:0b:c5:30:f0:
         a3:d5:a1:49:d6:9e:16:cf:5a:ce:eb:08:0e:3b:21:6e:9a:36:
         ed:3a:ac:83:5e:25:98:1d:ae:92:1f:64:68:98:f6:72:0b:cf:
         7e:d1:35:2c:63:ae:3f:47:77:3c:f3:b6:ef:46:07:2e:36:2f:
         05:73:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 21:31:12 2025 by rpki-client