Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b660b5f9-82a3-3b56-9b1f-91087901ca04.roa
File:                     b660b5f9-82a3-3b56-9b1f-91087901ca04.roa (raw, json)
Hash identifier:          CfFndxPe86Ll1+rHN6zAvJ40vLMlIrV5Y01XtCnKpfE=
Subject key identifier:   45:5C:79:8A:C2:3D:FE:59:14:69:76:54:DD:4F:E0:0A:B7:AC:F4:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A3F589AF80C969D01D036380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b660b5f9-82a3-3b56-9b1f-91087901ca04.roa
Signing time:             Thu 23 Jan 2025 13:38:23 +0000
ROA not before:           Thu 23 Jan 2025 13:38:23 +0000
ROA not after:            Wed 23 Apr 2025 12:38:23 +0000
asID:                     396574
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:f5:89:af:80:c9:69:d0:1d:03:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 23 13:38:23 2025 GMT
            Not After : Apr 23 12:38:23 2025 GMT
        Subject: CN=d02de250-efd5-4e22-aadc-2e71609a6529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:af:2d:7f:fd:e0:4f:bd:ec:38:32:1e:38:d9:
                    f7:40:96:6f:01:ef:aa:9f:25:3b:17:f3:53:a8:84:
                    41:2e:dc:fe:31:ac:4f:50:74:d8:c7:4e:cc:b6:13:
                    07:ad:7b:42:35:0a:36:c0:97:4e:ec:f8:13:d2:ac:
                    83:d9:b8:34:7d:ad:aa:5e:6f:6c:02:13:72:ea:ff:
                    68:55:3e:f7:84:f3:5c:ad:19:fd:c8:5e:4b:52:14:
                    e2:17:82:f4:a0:e0:ee:e7:e1:9d:3b:86:46:15:35:
                    b7:f4:78:5d:1d:43:77:d8:e9:ae:9d:bb:26:93:0b:
                    0e:b9:ad:b0:ed:cf:60:32:00:32:b1:9e:7f:9e:2b:
                    a9:b3:70:ac:88:15:78:c0:62:40:e5:cf:5d:84:29:
                    1e:83:29:cf:b2:92:f1:db:0a:23:b3:32:9b:ff:9a:
                    76:a7:a0:71:90:93:1d:14:da:b8:e2:af:07:6b:ed:
                    1f:63:2d:78:8b:b2:12:6e:a5:00:d6:01:c6:b0:81:
                    e3:85:3b:b3:3f:59:33:ad:fb:52:7f:0f:9f:7f:82:
                    ed:fe:78:cd:ea:27:34:c0:3f:e5:3b:fb:e1:c5:2e:
                    44:57:87:8d:fe:09:6c:c7:77:0c:3f:d6:38:38:97:
                    68:38:3c:9f:c7:f4:01:c2:ea:e3:63:5b:a0:95:02:
                    be:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5C:79:8A:C2:3D:FE:59:14:69:76:54:DD:4F:E0:0A:B7:AC:F4:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b660b5f9-82a3-3b56-9b1f-91087901ca04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:5a:e4:a8:47:cc:a0:ab:cd:5c:46:bf:97:59:ea:1f:20:0d:
         ad:ff:57:03:de:67:30:ee:0c:3b:dd:ae:9e:13:5f:58:8b:f5:
         89:bc:18:47:ad:89:23:8b:0c:5a:b9:f4:ea:b5:d9:32:79:8a:
         b7:d5:b5:71:b6:be:a8:62:32:1c:33:11:dd:b9:e8:9d:ce:12:
         1d:94:7e:63:52:e2:49:3b:13:25:a2:0e:af:1e:80:7c:8b:d4:
         8b:2b:4d:7f:85:1b:53:a7:d6:26:7b:84:c4:ff:2b:66:b1:1e:
         03:25:d3:16:70:06:dc:0c:e7:f6:29:a9:8c:92:b6:ea:6d:b0:
         99:61:f9:2b:ee:3f:52:15:66:bb:37:de:f9:4e:7e:5e:58:67:
         ec:df:e6:33:ee:e6:ef:92:94:25:9f:75:97:ff:f6:e1:c8:67:
         6a:37:57:ff:94:83:da:8f:9c:c9:26:70:dc:e0:61:dd:05:3e:
         16:15:ae:e3:cb:d8:0c:dd:48:36:82:aa:ff:c3:75:99:8e:f3:
         94:e5:58:9e:8e:89:28:42:fc:48:fc:79:36:8b:4a:40:f5:13:
         ee:3a:62:13:ea:5e:39:9e:dc:47:aa:9e:6c:90:51:11:5b:05:
         ed:a7:fd:f7:9f:4a:01:ac:26:01:2a:fb:bc:a9:36:63:e7:19:
         be:4c:78:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:21 2025 by rpki-client