Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a16b1c22-4c32-3780-b85a-70bfeeba12b9.roa
File:                     a16b1c22-4c32-3780-b85a-70bfeeba12b9.roa (raw, json)
Hash identifier:          jODqRbO5tfQB5RoiZY9dHXfN4O0xPzFSErjkOScYEt4=
Subject key identifier:   AB:CC:BB:D6:5B:1F:FB:62:2E:F0:48:75:12:6D:90:45:20:D5:76:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183BE38D1353EC571FE0F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a16b1c22-4c32-3780-b85a-70bfeeba12b9.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396596
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:be:38:d1:35:3e:c5:71:fe:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=8530c63e-120e-414d-b4ac-5e29b44a9f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ea:0b:af:01:70:e8:d8:53:18:14:c7:69:27:
                    0e:42:8a:55:a0:fe:4d:15:57:86:3e:d7:83:ca:95:
                    59:c3:99:72:2d:ad:89:4c:89:df:29:f1:06:db:b7:
                    db:59:74:5e:e7:be:14:fa:86:0a:15:56:f6:3c:2e:
                    71:15:8a:ed:c9:e5:99:5e:e0:2f:29:96:44:92:8c:
                    ee:88:fe:6e:32:2a:90:e7:93:a5:86:ab:04:e5:d0:
                    a0:d2:31:83:9b:35:71:fc:d6:96:54:ee:15:90:b3:
                    9d:ea:c8:15:71:6c:27:7a:e7:82:97:4d:b8:f0:73:
                    a9:a9:a9:46:07:84:57:1f:e4:4a:e5:12:cb:8b:1a:
                    c6:aa:e4:3e:3a:c4:aa:e7:b3:84:81:de:e4:13:a2:
                    c9:3d:d7:4a:d9:d4:66:97:9d:11:8b:ca:92:dd:81:
                    a4:06:9e:12:d9:58:8e:37:06:24:3c:0c:30:23:94:
                    c0:1e:bf:d4:b7:9e:e0:77:36:80:1a:d3:96:66:ab:
                    ef:fd:aa:95:f3:bd:88:9f:1c:96:fd:36:ea:e8:92:
                    98:3a:28:71:69:b1:77:36:5c:5a:9c:02:50:3a:30:
                    ca:ad:53:7f:e7:f3:71:91:79:13:77:e9:3c:6c:53:
                    62:f7:df:cd:cb:51:54:8d:ef:55:0a:ba:5b:93:61:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CC:BB:D6:5B:1F:FB:62:2E:F0:48:75:12:6D:90:45:20:D5:76:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a16b1c22-4c32-3780-b85a-70bfeeba12b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:99:ab:75:9a:fd:a9:be:26:1f:e3:9a:3d:85:75:a8:41:52:
         c8:c5:74:2e:fa:f5:6e:ef:80:55:dc:42:f1:27:ae:a5:76:b0:
         88:e5:8f:fe:e1:5e:c9:ac:33:90:61:91:85:cc:c6:da:08:62:
         a3:8d:16:24:76:bf:76:6f:10:49:bd:9f:37:49:5d:82:8b:5f:
         c6:21:a9:24:ce:69:93:bc:bf:c2:6a:06:b3:e1:b4:bf:67:c1:
         24:ad:4e:33:e2:d3:78:76:b2:4b:d8:73:3b:3b:3c:a7:6f:89:
         27:04:2a:33:11:b6:64:16:1c:a1:2c:25:9f:29:db:c7:08:aa:
         fb:0e:b0:77:8e:eb:3d:c3:14:32:5a:4f:7d:4f:fa:ad:bd:f6:
         9d:a4:97:c9:ad:c6:d6:f8:66:4f:fc:8c:59:ca:12:ad:72:2d:
         60:bd:0c:22:d7:d3:fb:1a:da:35:3d:59:68:2b:0f:85:ae:79:
         b9:c4:c2:b4:27:cd:ef:51:e7:6f:a6:66:f0:8a:80:28:f0:3a:
         2f:7d:b8:16:8f:96:81:8e:37:76:fa:c3:c3:80:5c:2e:a8:29:
         08:91:5b:7d:58:46:9c:17:b3:69:eb:2c:37:a1:b1:4d:98:c3:
         03:41:8a:ad:a3:6c:86:c1:03:18:9a:78:58:df:ab:ee:ac:c0:
         91:64:e2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:28 2025 by rpki-client