Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb42a8e9-4e1b-3451-9400-3132aecafc81.roa
File:                     bb42a8e9-4e1b-3451-9400-3132aecafc81.roa (raw, json)
Hash identifier:          eM0CacNcM91ESaJx7PHrUOU/bqdEeCcCjFmBvx+AzFQ=
Subject key identifier:   14:F1:8F:59:23:DA:FF:7F:22:BF:61:0D:A0:C7:94:18:A1:13:AB:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858493243EDCEA860C5A628950200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb42a8e9-4e1b-3451-9400-3132aecafc81.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     396614
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:ed:ce:a8:60:c5:a6:28:95:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=6d17dbea-c294-432d-8fd1-6bdf7c9cf3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:9a:32:06:b9:90:b5:d7:93:6d:26:e5:cb:
                    71:2c:92:a5:3a:1f:4c:57:98:0c:b6:7a:9d:87:1d:
                    73:5f:f7:03:79:ef:05:4e:34:0e:cf:70:2d:2b:25:
                    6b:42:ea:77:48:a3:d5:dd:bc:34:c8:ff:80:99:41:
                    13:2c:98:0e:36:57:5a:37:38:80:0c:1a:b8:62:35:
                    c8:33:b8:d3:eb:58:db:d2:6b:fe:38:64:92:a1:af:
                    d0:0e:e4:2a:91:fe:1b:18:9c:c0:d3:ec:eb:27:db:
                    aa:7b:56:36:5a:9d:90:0e:f2:7b:a6:e0:b7:83:7a:
                    69:14:98:ff:31:ec:37:7a:23:15:8b:50:7a:ef:01:
                    ba:c2:68:d0:3a:48:e6:f8:19:27:5a:c0:fa:cc:be:
                    27:12:17:b8:8f:1b:b0:15:f4:34:c3:a1:14:93:53:
                    db:c5:39:f3:67:05:47:a5:80:e0:df:4c:6a:55:ed:
                    35:ca:c1:d0:32:97:6a:ac:3f:17:4d:c3:e1:a3:fd:
                    5b:88:ed:63:f7:2e:69:b5:42:b5:88:6d:99:8f:b8:
                    f3:ba:ab:b6:3f:15:47:d2:f3:0d:99:64:2d:cb:a8:
                    80:23:35:98:dc:a3:d7:35:66:37:60:04:6f:64:de:
                    1f:b2:c2:d6:36:63:66:4e:e3:3c:8f:19:55:1a:4e:
                    e8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F1:8F:59:23:DA:FF:7F:22:BF:61:0D:A0:C7:94:18:A1:13:AB:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb42a8e9-4e1b-3451-9400-3132aecafc81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:3c:11:34:5f:1a:ec:28:9e:69:79:23:5d:a2:9f:1c:0b:0d:
         05:ac:03:9a:89:56:86:d9:d9:fc:af:8f:97:41:d3:3d:19:1a:
         13:a3:fc:9c:8b:5c:09:5a:f4:8e:75:09:b6:52:3d:43:62:6f:
         16:67:20:00:76:6b:b7:a2:53:df:c1:e2:6c:7f:e8:31:5f:3b:
         a2:5d:d8:a9:42:17:91:a7:44:b4:65:76:d0:55:8c:16:5d:8a:
         15:f2:98:91:88:d0:21:77:0a:d6:ce:41:a0:a0:cf:8c:57:ce:
         01:33:9a:f1:2b:e4:91:88:36:ab:24:29:0f:9b:31:52:96:27:
         d9:45:e4:a5:bb:74:b5:81:73:5e:5a:41:15:66:76:b9:22:f1:
         ef:af:f8:b8:9c:1b:8b:f0:d9:0c:3f:3f:f4:6f:f6:26:73:78:
         23:82:c8:a5:c6:96:09:e7:80:b9:e7:d3:a3:12:87:86:ff:81:
         48:f3:2b:5b:cb:c6:da:f3:01:3d:13:70:24:bf:b6:97:e9:2e:
         7a:78:25:83:3b:73:2a:d1:f3:37:0d:b8:7a:8b:81:02:aa:0c:
         78:ea:04:83:c2:e4:bd:e9:18:28:e8:f2:a3:6f:12:a6:99:19:
         c6:63:f9:16:2f:09:ec:97:60:5b:df:2e:e3:1e:a3:a3:80:de:
         15:11:06:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:47 2025 by rpki-client