Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0bd846f-2b23-3f2f-b8d7-1bbb6ebb6b8a.roa
File:                     c0bd846f-2b23-3f2f-b8d7-1bbb6ebb6b8a.roa (raw, json)
Hash identifier:          V+D0qgajyRgLJCWxWeQB+cGk8gsae3n4VWMPcSV1CUs=
Subject key identifier:   08:93:BB:FC:59:7C:9B:6C:DF:A4:15:0C:A2:72:62:AA:1F:0C:26:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183FB9F8CEB8C798E241340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0bd846f-2b23-3f2f-b8d7-1bbb6ebb6b8a.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396616
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:fb:9f:8c:eb:8c:79:8e:24:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=b885d5ce-5c19-4776-a801-ecff3ca84920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6b:f8:c5:6c:7d:6c:37:52:c0:c5:22:0c:2c:
                    e8:66:76:59:f2:8a:0d:82:93:73:d3:b9:3b:ce:c0:
                    a5:64:7b:d7:9b:85:44:75:cc:80:2a:55:ca:bc:e3:
                    f7:27:a1:e8:ad:68:e4:68:e1:8f:60:37:be:15:9e:
                    ff:a6:a0:41:39:36:0b:c0:a7:00:82:fc:69:e7:67:
                    ad:51:bd:e8:c3:3f:bc:6a:93:fa:a7:67:10:67:08:
                    cb:5f:a4:ea:07:d7:34:da:bb:49:78:17:80:fb:ef:
                    2b:13:f2:63:5c:56:c2:53:c3:27:c5:28:18:41:94:
                    2c:62:9d:25:6d:94:bd:89:df:52:0a:9d:09:fb:8a:
                    33:84:a2:69:2f:b0:07:37:e8:ee:b9:7e:0b:c7:18:
                    64:b5:4b:eb:22:30:a0:45:d9:bd:d1:95:97:e3:e0:
                    14:6f:bb:9b:2f:ef:c3:29:de:38:a7:8a:31:af:14:
                    e6:ef:f3:c9:80:e9:46:71:d4:43:96:2c:07:2b:09:
                    41:92:76:0e:3a:3e:58:f6:59:85:67:bf:e0:c3:c3:
                    6a:a5:7d:b6:67:1a:f0:05:03:a2:81:5b:09:bb:5e:
                    94:9a:d7:6a:77:5d:f1:60:0d:27:24:ee:f5:3e:42:
                    ba:13:16:79:a0:33:5e:fa:5c:33:de:84:33:ec:26:
                    90:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:93:BB:FC:59:7C:9B:6C:DF:A4:15:0C:A2:72:62:AA:1F:0C:26:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0bd846f-2b23-3f2f-b8d7-1bbb6ebb6b8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:32:02:f6:41:7b:ce:57:34:16:43:38:3f:7f:9d:6c:32:0e:
         3e:72:ed:ba:98:83:e1:8a:eb:23:b6:fd:a6:42:e7:63:4d:60:
         e5:7b:ba:8b:e8:92:49:f7:b1:16:a8:0b:9c:3b:cf:c4:be:7d:
         82:12:ea:01:0b:bd:3b:c4:34:e1:b8:85:56:4c:83:86:fd:a9:
         ae:fc:63:97:93:f1:73:c0:db:55:13:71:48:1d:c9:6a:f3:29:
         26:1e:5f:4c:43:dd:cc:99:c0:18:0b:e4:c1:df:46:80:5f:18:
         5b:0b:c9:e7:95:37:d9:ee:85:73:b7:f1:15:91:80:a7:fc:f5:
         e7:9c:49:66:6e:2e:f1:a8:2c:de:40:17:f0:37:d2:bd:ec:9e:
         bf:6e:ed:05:bf:3b:27:79:28:f1:1f:82:1c:bb:59:4e:ce:df:
         b1:4b:15:3d:60:52:1d:e6:84:35:f2:b3:66:24:dc:52:cd:4b:
         35:3d:6b:7a:91:fe:cd:5a:dd:86:38:44:bb:b0:0b:71:f2:34:
         93:98:8e:0d:58:7a:cd:21:07:0a:d3:a2:9f:ab:86:47:14:14:
         55:07:7f:01:80:7c:cc:a5:46:0b:1a:18:47:17:42:0f:34:c1:
         fa:cd:e3:0d:06:a8:c9:de:00:0f:da:41:57:c6:39:2a:ac:ce:
         df:4a:37:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:19 2025 by rpki-client