Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c40a5aeb-3af9-3a7c-b3cc-b2fe502cc144.roa
File:                     c40a5aeb-3af9-3a7c-b3cc-b2fe502cc144.roa (raw, json)
Hash identifier:          eFDoEgzdXTgM/BgTgq1JXa10AW3LVfwVmmlP/UESxkk=
Subject key identifier:   AB:13:14:D1:F2:16:24:8A:DC:E0:A7:45:94:8E:10:12:43:7C:8C:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849393E91A2139905E381C8D380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c40a5aeb-3af9-3a7c-b3cc-b2fe502cc144.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     396602
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:91:a2:13:99:05:e3:81:c8:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=710e98a6-451e-430e-9476-16b521863588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:0a:70:29:08:cc:75:fc:70:e3:47:e2:f2:
                    d6:aa:4e:ec:0c:21:1c:11:cf:f4:65:a2:22:22:a5:
                    7a:9a:49:a2:77:83:ad:da:79:da:61:d3:27:5a:c2:
                    3c:2d:9a:95:2f:b5:d5:dc:f0:9a:5f:cb:16:5b:85:
                    4c:3e:cb:99:2b:7d:06:df:12:ae:c6:8d:ec:29:85:
                    df:b4:ee:51:88:b7:b1:88:1d:ca:77:49:79:38:de:
                    1d:44:0d:04:e3:bd:a1:5f:bc:c5:2e:4d:da:91:c4:
                    68:e9:0f:21:7c:67:a7:d3:0a:0d:ad:02:01:59:70:
                    d0:1e:f9:c9:9b:35:c2:10:00:41:7e:09:4e:bb:2e:
                    87:56:ce:8e:40:39:8e:8d:aa:fe:fb:ad:6c:a5:0a:
                    76:93:e1:78:e1:3d:ea:ab:da:a5:f4:08:65:1a:e9:
                    54:f9:a6:fb:d3:fd:8d:ce:2d:b7:e2:76:82:a5:b6:
                    14:0f:37:16:12:b6:e0:09:d7:b9:5f:f3:0f:1c:ab:
                    d4:e4:86:76:df:a6:96:43:43:ab:48:f5:6e:69:14:
                    34:0a:5c:cf:75:1b:cb:7b:18:17:8c:06:0d:c0:d1:
                    6a:0d:9a:2a:e4:32:b6:0e:cd:57:ec:ea:77:09:fd:
                    d5:6d:3a:a2:93:69:9a:33:56:d0:07:1e:7c:26:53:
                    55:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:13:14:D1:F2:16:24:8A:DC:E0:A7:45:94:8E:10:12:43:7C:8C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c40a5aeb-3af9-3a7c-b3cc-b2fe502cc144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:29:32:58:ec:79:8b:2e:69:4e:e6:10:45:30:d8:92:88:31:
         6f:f7:b7:97:03:bb:64:e5:7d:6a:fa:9f:65:0a:dd:f5:5b:d8:
         de:77:76:e8:5c:20:03:f6:6f:66:47:ff:27:c9:1c:a8:97:fc:
         c9:ec:5b:b3:a0:fd:b4:ad:9b:33:0b:b0:54:db:60:df:32:20:
         18:f6:01:ef:fa:9e:83:a8:a7:2c:cc:39:98:26:38:00:d7:09:
         e4:b6:ef:07:4b:bc:a8:ad:62:1c:f6:85:31:79:4d:7a:83:ed:
         2f:b3:51:e6:d5:cc:82:f8:08:b2:8f:14:1d:9e:7a:b7:6b:ff:
         7f:34:ca:a5:42:c0:5e:e4:07:96:2e:00:d4:5f:a9:5f:d2:2c:
         6a:bf:67:26:59:3f:5c:ed:64:45:91:8e:da:55:1c:fe:aa:28:
         d3:33:08:e2:5c:a6:0c:73:b1:51:d9:1c:46:63:2b:1d:e0:6d:
         d0:a2:c7:79:cb:29:51:4e:65:e0:16:3d:84:9c:de:1f:40:81:
         59:1e:75:50:1c:4a:55:8a:eb:1c:0b:82:46:e2:1a:36:6e:3f:
         92:ab:c6:4c:c1:ee:0f:82:85:72:78:12:47:90:42:47:44:1c:
         0b:41:73:8f:69:0b:59:32:94:23:eb:b0:9a:ca:c5:da:98:b3:
         4a:03:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:55 2025 by rpki-client