Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3eb3671-0b50-3998-9a7f-ddaca9b84d50.roa
File:                     b3eb3671-0b50-3998-9a7f-ddaca9b84d50.roa (raw, json)
Hash identifier:          KavRBsD9cePqSGXfjflG3vqVzyguzW3lQ2Dl7bpHOF0=
Subject key identifier:   95:BB:37:0A:52:41:E5:80:10:D8:C3:D0:9A:4F:8C:57:BB:A1:78:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848C5733931D55E663A7EA1D880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3eb3671-0b50-3998-9a7f-ddaca9b84d50.roa
Signing time:             Tue 04 Feb 2025 13:33:18 +0000
ROA not before:           Tue 04 Feb 2025 13:33:18 +0000
ROA not after:            Mon 05 May 2025 12:33:18 +0000
asID:                     396611
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:73:39:31:d5:5e:66:3a:7e:a1:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  4 13:33:18 2025 GMT
            Not After : May  5 12:33:18 2025 GMT
        Subject: CN=bd556ec6-18c4-454d-9ac7-b1ef288d71eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a7:29:64:67:89:b9:8f:f2:73:70:7d:d6:0e:
                    16:5b:ed:7c:a4:ed:3c:70:69:79:88:9f:c8:8d:c6:
                    18:4e:4f:f6:ca:80:b8:0f:ab:87:dd:44:46:a7:9b:
                    02:1c:0f:63:c3:6a:ac:45:0f:4e:f4:e0:9c:a9:9b:
                    21:d6:5a:0c:9c:60:ef:01:6d:01:fe:28:f4:46:4a:
                    ee:71:da:5d:a5:ca:e6:d5:47:cb:1d:54:96:c7:f8:
                    ea:83:c8:c1:ee:b2:65:16:69:7e:dd:0a:6d:5a:2c:
                    bc:59:3e:77:aa:39:63:f7:79:be:d2:4c:ef:96:b5:
                    d5:6e:ab:ab:1e:34:46:2d:53:a2:27:bb:59:3e:f1:
                    ef:12:bd:e6:be:00:12:7b:69:4a:ab:ef:3a:e9:6d:
                    3e:7f:6a:1f:d9:94:6b:6e:b2:88:9a:e1:df:83:bb:
                    c4:7e:50:cc:35:f1:bb:7d:a9:c7:16:1f:6a:13:47:
                    02:22:47:1a:22:f6:f2:06:b9:c3:e5:fa:8b:b7:10:
                    20:0c:34:91:d5:8b:92:d0:28:bc:a5:5d:8b:cb:71:
                    c9:b3:ca:14:63:b3:37:c5:86:c7:2d:66:9a:17:73:
                    cb:20:18:26:c4:68:08:86:ce:b8:a4:0b:7d:69:fd:
                    cb:ad:65:55:78:2e:17:1c:8b:59:71:8c:cb:4b:c0:
                    73:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BB:37:0A:52:41:E5:80:10:D8:C3:D0:9A:4F:8C:57:BB:A1:78:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3eb3671-0b50-3998-9a7f-ddaca9b84d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:4b:ee:f4:11:6b:83:6a:1a:89:cc:6d:ec:f2:23:1a:69:e5:
         c7:de:07:f9:97:8e:7c:c4:0d:23:d4:54:b0:62:90:bf:31:c8:
         78:07:33:32:83:2e:43:05:6f:5d:c7:3a:2a:8b:82:8a:0a:a2:
         75:bd:cd:22:4f:1c:ad:3d:88:fd:7a:83:98:b2:59:f8:c4:3f:
         49:4a:1f:e2:70:0d:cc:8f:be:18:c2:8a:ad:48:90:d7:07:80:
         d0:94:dd:46:3a:f3:9f:ab:0d:ac:ce:4c:78:ff:70:17:86:25:
         8f:eb:c1:8f:69:6e:d4:8c:8e:78:ab:5c:31:ea:3a:80:9d:45:
         40:fd:58:8c:fa:70:6e:1a:11:fa:46:cc:e3:ed:c8:ad:ad:02:
         07:83:18:05:6e:22:4e:b5:41:03:8b:97:e1:6b:33:96:0c:2d:
         d2:f2:59:77:d1:e9:5b:00:af:78:f8:52:8f:c6:e5:93:ab:29:
         00:11:8a:50:cf:4d:21:30:55:5f:8c:3b:e3:5b:1d:36:1c:2d:
         4b:9d:9a:44:ba:db:a4:50:c1:db:e3:4e:9b:03:76:d5:6b:55:
         5c:7f:ad:95:f7:9c:65:d6:2c:ec:d4:c8:8e:82:9e:a4:34:bc:
         4c:93:0d:b0:03:7c:ce:81:ba:42:d9:69:ea:af:62:04:38:8d:
         f1:0e:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:59 2025 by rpki-client