Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0d61fbe-c2b4-3cd8-881b-c5f056e0117d.roa
File:                     a0d61fbe-c2b4-3cd8-881b-c5f056e0117d.roa (raw, json)
Hash identifier:          MrHNmUbXD3j291tMPDUe21jSSa0l7ihulM+vlv/KKys=
Subject key identifier:   16:9E:DD:D1:30:AC:54:51:48:DF:D6:D3:E8:EF:9C:BB:0B:FF:B7:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496CE47F9B59EFD09E85FF8300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0d61fbe-c2b4-3cd8-881b-c5f056e0117d.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     397206
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:7f:9b:59:ef:d0:9e:85:ff:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=10b33c5e-4d9b-4cba-93af-0d9129287265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:02:fb:1f:4f:d1:3a:98:67:17:d5:8a:32:df:
                    f0:ac:d3:92:62:e6:d9:5e:33:7a:37:b9:7b:50:ab:
                    70:28:bd:e6:5c:5d:6a:57:d9:30:8e:41:3f:73:2c:
                    3f:51:e1:a6:57:49:58:a1:08:e1:7d:57:ee:3c:06:
                    d3:41:4f:37:bf:b3:0b:f8:7b:5f:26:4c:c5:93:6f:
                    90:5a:24:9e:6e:80:5a:a7:4f:28:dd:dc:53:78:7c:
                    f0:6b:e0:57:f4:74:7b:04:8e:af:e3:bc:12:39:3a:
                    3f:a3:9f:0c:e2:8e:d5:d3:33:74:9c:c0:d8:ad:7b:
                    3f:59:7c:65:8f:e1:12:bc:8b:5c:c7:b0:b2:82:10:
                    57:64:3f:10:0d:b0:45:31:d1:7b:86:61:9c:80:33:
                    c6:6e:23:f4:c2:15:81:db:5d:b7:2b:ed:74:b0:c6:
                    5f:76:94:c4:df:36:42:cf:61:ec:25:a1:ca:c8:46:
                    ad:ef:25:6a:ea:84:8a:58:84:34:ce:47:3c:91:8d:
                    b8:b1:ca:31:47:26:e9:60:84:cf:f5:c3:8a:64:b8:
                    a0:38:44:30:27:e1:e4:67:78:54:1b:f5:71:98:ce:
                    3b:8c:ae:57:d5:cc:1b:e9:42:3c:ab:43:c6:a0:15:
                    18:93:d7:ec:27:24:cc:ac:8a:4d:f3:35:66:1a:e3:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9E:DD:D1:30:AC:54:51:48:DF:D6:D3:E8:EF:9C:BB:0B:FF:B7:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0d61fbe-c2b4-3cd8-881b-c5f056e0117d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:8f:5c:26:4e:e9:85:21:6d:c5:ec:7f:98:98:89:a2:a5:98:
         8b:22:14:33:e4:84:c6:e5:6b:87:79:ac:5d:f5:94:e0:cb:5f:
         41:24:f8:4a:4b:03:05:91:ee:c7:4e:a3:9e:9e:26:6c:bc:29:
         cc:e3:cf:1e:27:5d:3d:93:53:e3:e6:6f:50:e2:ea:91:ee:7c:
         b0:90:ee:fa:e6:d6:c0:b6:a8:86:26:91:a5:80:6b:90:01:7e:
         e5:e0:5e:69:87:0a:a8:d3:b1:3f:5f:2c:49:af:8b:e6:54:b8:
         4d:0d:a9:60:b3:14:46:45:41:fa:f2:22:17:b2:99:2a:3a:81:
         3a:cc:ba:40:d5:c6:b7:7c:08:c2:85:87:82:82:55:5b:69:ac:
         44:9a:5b:0c:96:62:3a:9b:44:9b:6a:8b:0d:df:64:3b:74:ea:
         1b:32:4d:f8:31:88:82:b6:e6:da:9d:45:8a:e0:ac:7f:eb:36:
         c9:cf:7b:ab:ad:ac:e5:e7:1e:4e:b2:d6:e4:57:ab:4b:b0:06:
         fd:32:50:c7:81:b7:e4:bf:52:31:4a:26:b0:67:44:24:61:52:
         73:35:61:87:45:aa:20:64:5e:11:48:78:3c:3a:6d:22:bd:82:
         c6:a5:fd:21:dd:7c:ad:89:7a:6f:ea:6a:5e:a2:73:b0:a3:c0:
         6b:e4:72:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:30 2025 by rpki-client