Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba81de9f-3e4d-344a-97de-4b557947a999.roa
File:                     ba81de9f-3e4d-344a-97de-4b557947a999.roa (raw, json)
Hash identifier:          srEBXpe5CzwTv9xK88CknR6QOf1uD8tfHr4JxlyAHgU=
Subject key identifier:   07:83:8B:54:58:09:2F:B2:C0:D9:BB:72:6F:41:62:41:A0:8D:D1:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183DFE28DC2FA4A5F274100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba81de9f-3e4d-344a-97de-4b557947a999.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     36622
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:df:e2:8d:c2:fa:4a:5f:27:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=56b1fc61-e9cf-4da1-bf17-9dd8e622b3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:20:84:52:4f:ba:49:3d:78:dc:4c:98:91:
                    5e:65:2b:cc:e9:16:7d:db:9d:c5:7c:16:22:38:18:
                    84:55:7c:fa:f3:b7:16:9a:c0:ee:aa:7b:79:c0:ec:
                    01:da:6d:19:61:84:ff:8f:45:d3:d4:3c:99:d3:8c:
                    b5:92:50:d6:02:5c:d5:98:b4:3e:a2:1c:16:ff:77:
                    6a:fe:7a:32:45:ab:81:e8:54:cd:08:96:c7:da:08:
                    1b:76:4f:f6:1b:61:59:34:8c:d1:fc:f9:b3:92:fe:
                    cf:3a:3a:ce:52:a7:a2:7a:67:07:31:58:06:73:5b:
                    da:a9:60:60:5c:f3:e1:00:d3:84:b0:97:e3:f6:f7:
                    b0:1c:69:9e:d8:c8:e0:10:ee:be:8b:d9:89:07:94:
                    64:b0:79:d7:7a:2d:9a:ee:27:31:6f:38:07:e7:45:
                    55:23:85:e3:6e:90:f7:f6:42:0c:07:1a:cd:8e:66:
                    ef:b0:29:30:aa:5c:57:e3:94:de:d8:64:8c:f7:2d:
                    d0:5b:29:86:e1:d6:b8:14:6c:3b:82:cc:48:c6:be:
                    0b:11:5b:02:9f:31:32:e2:94:c7:59:22:71:ef:3f:
                    d7:dc:39:da:c9:ce:a6:7c:4f:76:1e:98:72:9b:97:
                    81:88:1a:8a:e0:77:1b:1a:70:94:75:00:b6:f8:ee:
                    e3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:83:8B:54:58:09:2F:B2:C0:D9:BB:72:6F:41:62:41:A0:8D:D1:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba81de9f-3e4d-344a-97de-4b557947a999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:01:ad:3c:12:4c:58:fd:96:ed:1b:7a:d0:d7:88:06:45:2c:
         44:ec:71:ea:3b:fb:6c:fd:ea:06:c2:53:e3:4c:ae:ca:50:59:
         49:5a:82:c6:8f:9d:36:ed:b7:ea:e7:cf:f5:c4:4a:44:f8:10:
         86:59:1d:e5:ef:1c:66:c1:cc:f5:75:f2:43:74:48:96:54:21:
         2f:69:d5:4b:e4:d7:08:b8:75:a1:82:62:6f:a9:04:14:e7:45:
         74:bf:de:51:6f:b5:ea:99:2b:69:47:89:74:c3:19:36:08:6b:
         9c:6b:07:47:88:7d:04:d5:6b:de:ff:19:c5:92:2b:63:63:1d:
         48:51:78:49:34:a9:b8:a7:21:ab:8b:ba:1f:1e:3f:b6:c4:09:
         b7:e7:8f:ed:4e:5f:e8:30:13:73:6c:c1:87:d0:f4:3b:cb:cd:
         34:37:25:21:9f:43:6c:2b:62:5b:31:18:de:bf:e6:8a:2b:95:
         8e:e4:91:e3:6f:a5:14:ea:2a:cd:6f:79:ec:b5:75:f3:85:78:
         f3:6a:8f:94:36:9a:96:f1:73:4f:62:b0:a9:ad:1d:a0:9b:33:
         7a:2a:cf:2a:60:ce:d2:59:f5:ab:49:42:74:4e:eb:86:4a:23:
         6f:fe:4e:fb:a1:ae:86:46:3a:dd:c1:f3:83:28:42:0e:53:de:
         fa:fb:b5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:29 2025 by rpki-client