Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f66b561-2f68-33ff-8a75-009c8ca58a29.roa
File:                     9f66b561-2f68-33ff-8a75-009c8ca58a29.roa (raw, json)
Hash identifier:          qXhlmvsxXhWxBZEpQlFDsjinvbSotqIAs62pbcGoePk=
Subject key identifier:   03:F5:8B:ED:04:18:F7:91:DA:5A:A4:07:9F:71:D1:4C:07:A6:8B:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183D4C2E63C2E27FED5A030
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f66b561-2f68-33ff-8a75-009c8ca58a29.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     32651
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:d4:c2:e6:3c:2e:27:fe:d5:a0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=00952bae-cb44-4616-a9b3-5cd3dab3c007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:db:60:ae:c0:22:53:3b:23:1d:a4:04:3d:87:
                    38:46:76:b1:c1:ca:a6:96:e3:35:68:b5:ec:b9:43:
                    f0:93:cf:e4:58:ec:77:f7:54:fe:48:84:c8:83:7e:
                    8c:d3:ca:ae:9b:69:ae:ad:cd:b2:4a:6f:7e:ca:1a:
                    f5:1f:e4:39:e3:cd:99:c5:05:dd:51:b3:c2:5a:56:
                    19:ac:0e:5a:bc:83:46:4f:23:14:92:f5:19:8f:e3:
                    62:bc:91:53:2a:2a:d6:de:46:fb:4c:5c:45:ba:91:
                    93:09:3d:59:57:7b:f3:23:0d:aa:cd:e8:13:f2:42:
                    bf:cc:8d:dd:ea:ad:10:05:67:86:b7:ec:2b:35:9a:
                    8f:3e:f3:60:da:14:cd:55:72:86:e1:fd:ed:48:d4:
                    c9:ad:fe:54:6e:14:e6:df:c3:2b:34:d3:b4:10:8d:
                    79:d9:30:ba:94:c6:3f:23:8c:8a:49:e5:d2:56:c7:
                    fc:55:d9:26:4b:38:45:67:e2:67:6a:bb:fc:32:fc:
                    6c:ad:bb:9e:7d:eb:77:fe:bf:7a:c8:b6:a9:1e:39:
                    17:5a:9e:ba:dc:b4:2f:d1:52:dc:08:f0:6c:68:f0:
                    8e:b9:26:d0:4e:cc:8f:a3:09:ae:be:4b:86:5a:66:
                    53:9c:18:75:d2:26:99:21:10:63:26:e0:a6:f5:43:
                    6e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F5:8B:ED:04:18:F7:91:DA:5A:A4:07:9F:71:D1:4C:07:A6:8B:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f66b561-2f68-33ff-8a75-009c8ca58a29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:41:75:94:d2:10:d3:aa:df:3d:c3:21:5e:4a:06:ab:cd:34:
         22:52:88:9a:e5:ec:03:03:5f:52:14:4f:91:48:b9:e3:c3:bd:
         13:4c:bb:6b:1b:c9:24:ef:20:da:13:ca:68:ba:ff:99:ab:a8:
         66:f5:07:77:6e:74:4c:c9:1f:89:b6:e2:45:ec:3e:c9:3f:d7:
         ca:fb:df:52:0d:48:e7:ba:dc:27:1f:62:3a:c7:a4:14:5f:24:
         d7:bd:e7:98:e2:b1:fe:c7:5f:e0:8b:a6:e2:9c:f1:ab:64:0a:
         86:91:eb:39:fc:9c:c7:1e:5d:cf:74:3c:c8:78:e5:fd:13:e5:
         4a:9f:d3:bf:27:9a:e1:a2:44:4d:8c:ee:96:10:e5:b5:40:fc:
         8c:2f:eb:30:05:ee:ff:ab:8b:a1:28:10:64:4b:d8:79:73:cc:
         0f:7d:61:ab:f2:53:9a:af:71:43:f4:5a:ed:95:2f:a7:03:a8:
         5f:46:67:1e:ec:e2:09:e7:f7:a5:75:1f:cb:37:0b:43:8e:e7:
         1d:b4:e6:05:46:cf:b0:85:ce:0a:a5:35:7b:35:4b:71:8c:15:
         e8:80:4a:99:eb:46:04:79:8f:cb:36:65:c6:c8:73:ce:10:ab:
         d3:1d:0d:8f:25:46:10:c3:e2:c1:30:5a:36:67:b4:71:f4:01:
         90:ed:87:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:45 2025 by rpki-client