Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccaf501e-d0e5-3e60-ab5f-78c54f330ff2.roa
File:                     ccaf501e-d0e5-3e60-ab5f-78c54f330ff2.roa (raw, json)
Hash identifier:          nuIRODn4U/89rK17Aa/+yRaxFX1BrpXm4woR2Y6sbLw=
Subject key identifier:   98:E9:57:02:85:86:DA:2F:3D:CC:36:9C:7D:C5:38:41:DF:9F:47:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496FAEFA0FAFC48D1A5AE47480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccaf501e-d0e5-3e60-ab5f-78c54f330ff2.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     20362
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:ae:fa:0f:af:c4:8d:1a:5a:e4:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=f59b1014-c858-4a9b-8f4a-de137e1250ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c1:a2:96:04:a6:cb:fc:2f:e6:df:ab:97:f0:
                    e0:04:d5:d2:14:8b:e5:48:03:bc:97:43:46:1a:45:
                    7a:c6:5f:84:11:52:5a:b7:8a:2a:73:16:f9:a7:d1:
                    c2:61:a0:bb:44:9a:66:bd:4c:07:8b:9e:0a:01:36:
                    b8:18:e4:77:8c:bf:3d:6e:0f:8d:26:05:58:40:15:
                    07:44:85:a4:da:36:fa:5f:ac:b0:92:d2:f7:14:8d:
                    90:c4:cf:60:16:42:05:1a:ee:c5:b6:42:8a:1e:29:
                    b3:8e:f4:66:15:12:ee:b6:b5:d0:8e:3e:7c:a8:16:
                    02:63:0e:42:35:41:0a:c0:a8:58:5c:36:37:db:12:
                    38:40:98:ce:d5:f1:10:cc:ca:f7:18:c1:9c:ce:2d:
                    91:43:34:0a:6f:06:5f:14:ed:d3:4d:e7:31:9a:9a:
                    b3:fd:0c:67:22:ee:af:08:65:3e:c9:fd:cf:ef:3b:
                    91:1c:33:cd:ff:24:19:09:e7:65:bb:1c:c0:16:01:
                    cf:5c:2b:bc:65:58:ce:4b:65:6f:75:c5:c2:2d:66:
                    65:6c:ad:87:0a:c2:3e:68:80:7b:b7:52:c9:15:00:
                    29:d6:b4:0b:51:c3:ab:d2:f5:ec:d1:eb:f9:1d:93:
                    ae:9d:3d:04:cf:e9:2a:cf:00:a4:35:a6:38:fc:2d:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E9:57:02:85:86:DA:2F:3D:CC:36:9C:7D:C5:38:41:DF:9F:47:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccaf501e-d0e5-3e60-ab5f-78c54f330ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:29:cf:1b:f3:54:fb:32:ac:95:8f:3e:65:39:a2:9c:b0:77:
         93:38:45:5e:84:12:f1:95:3a:e8:76:86:e7:4d:ab:b9:8e:70:
         e9:27:b3:57:21:f9:32:48:68:38:11:a4:36:27:67:9f:47:98:
         ec:6b:1e:fc:db:db:8c:91:33:52:72:9e:7f:18:3a:33:f6:59:
         4d:67:f0:5d:44:2a:f3:37:4e:38:4d:99:9d:9b:db:0f:51:78:
         4d:1c:bc:a3:be:4f:2c:89:62:e7:d8:b1:e2:dd:0b:a0:13:bf:
         c5:7b:20:75:3c:ac:0b:a2:da:eb:86:79:79:69:3a:4e:4e:e7:
         7a:e0:df:0a:18:60:71:8f:67:a1:8c:3c:c6:83:cf:b6:54:a2:
         2d:dc:7f:8d:2d:74:64:61:4c:c5:91:62:ce:35:ec:55:bd:ad:
         38:d0:d9:dd:91:61:64:7e:38:0b:e0:94:71:12:5a:0f:0d:6c:
         9d:02:89:50:40:bb:f7:cd:13:5c:9b:43:eb:fc:e5:ab:0f:42:
         43:56:fe:85:60:3b:85:35:d9:32:a8:72:1b:64:a3:67:dd:fb:
         a2:14:18:d3:3a:bc:d0:5c:9b:56:b8:fb:d0:99:a8:56:9e:eb:
         9e:f1:cb:bd:e7:c4:81:7f:cb:bc:51:ad:cc:50:17:13:b4:6e:
         c7:ad:53:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:28 2025 by rpki-client