Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac1d5574-16a1-3235-abfc-f3d832bc5707.roa
File:                     ac1d5574-16a1-3235-abfc-f3d832bc5707.roa (raw, json)
Hash identifier:          +lakirK1j3rYzm7YS9LgBoA0uJLStrK58xtQoUPm6D4=
Subject key identifier:   C8:AD:62:F0:72:59:EB:11:10:DE:D8:6D:5C:5E:36:8D:1A:88:B7:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496CE4813EF63728F183211A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac1d5574-16a1-3235-abfc-f3d832bc5707.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     397209
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:81:3e:f6:37:28:f1:83:21:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=b35349c9-663e-455d-a62f-9153a194ea91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:08:51:a9:a0:98:be:4c:98:61:3e:bf:ed:a5:
                    a9:63:ee:50:d6:57:74:35:cc:91:f0:c4:02:31:d6:
                    7a:01:18:89:ec:f5:08:f3:a9:6b:f4:9e:51:04:64:
                    4e:f0:e0:26:63:2f:98:bc:ea:97:43:2f:3b:8b:f3:
                    e8:c9:57:0f:19:35:eb:57:1b:00:58:77:b6:a9:ac:
                    92:4a:c7:41:1c:7c:9f:94:7f:b6:27:b5:ff:bb:7f:
                    14:eb:0e:25:57:51:d4:5e:e6:d8:61:0b:25:27:90:
                    c3:1a:14:bf:1f:64:33:63:e9:21:f8:5a:7c:1a:82:
                    fb:17:ac:38:c7:d9:29:bd:ea:b9:5c:c3:9e:5e:46:
                    da:45:fd:ac:6a:61:1e:84:e2:ef:e3:fc:48:30:06:
                    1b:a5:20:1e:ae:53:cd:57:5b:15:92:16:5f:72:ad:
                    7f:de:b4:82:9b:b3:e4:e6:61:74:08:2a:f6:04:a1:
                    c6:a4:4f:3a:d3:55:39:98:a0:f3:ad:6a:62:cc:47:
                    3b:72:81:71:a4:92:3e:3f:9e:b3:e3:8a:46:7b:65:
                    2e:c2:fc:69:0f:db:0b:fc:86:57:02:89:90:38:67:
                    d1:64:87:a8:76:7b:8b:01:29:25:35:5d:b9:fc:76:
                    49:ac:cc:40:53:b9:2c:50:d5:cc:0f:13:da:12:87:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AD:62:F0:72:59:EB:11:10:DE:D8:6D:5C:5E:36:8D:1A:88:B7:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac1d5574-16a1-3235-abfc-f3d832bc5707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6d:b8:6d:cb:58:a7:d9:7f:f2:a0:38:16:39:6f:ac:cf:8d:
         f8:c1:36:b2:d5:01:df:80:16:0c:43:72:d6:7b:61:f6:6d:5a:
         8d:62:19:fe:60:1d:34:57:b6:b1:69:d9:6b:f3:5f:5c:2a:ae:
         9f:a3:a4:69:96:bc:ea:da:48:3a:dc:e2:30:83:75:16:2f:33:
         78:87:0d:80:0d:51:65:05:00:11:8e:a0:69:7e:80:8f:d1:6f:
         e0:0d:c0:a2:90:13:81:76:1f:9e:fd:40:83:c1:9f:0f:c3:f4:
         03:8d:82:ae:74:19:70:0d:4a:54:08:04:6b:a9:5c:36:f2:3a:
         0d:84:64:2e:bb:85:7e:e0:10:d9:0f:20:97:54:e1:7e:0a:ab:
         8c:de:8e:ef:71:24:65:43:e5:3a:88:1c:f4:63:10:dd:e2:b8:
         3e:e4:d7:b3:61:4d:15:54:b1:20:cc:2d:55:c0:e1:cb:5f:3c:
         d3:eb:69:a4:f3:bb:03:97:13:f0:c7:d7:43:73:f6:a4:72:43:
         14:c0:74:05:37:b6:79:ab:fd:41:91:fc:d1:42:7c:7e:59:10:
         cb:1b:d4:3d:58:43:ac:e1:5a:75:9b:de:8e:77:88:a1:07:3e:
         f1:f8:e9:35:3c:a5:f5:58:17:2d:ce:92:21:8c:60:0a:9e:75:
         62:6a:ab:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:59 2025 by rpki-client