Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbad8993-698d-3d02-aaee-faa7494f65d2.roa
File:                     dbad8993-698d-3d02-aaee-faa7494f65d2.roa (raw, json)
Hash identifier:          m49VdzbD4O91UP+tiyRkNy8NSIeys3cxK7Upk7obuhs=
Subject key identifier:   E6:43:71:C1:E2:52:65:00:2E:D8:8B:00:89:6E:EC:C8:CC:83:08:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183CBEC30ABFA7FC883BF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbad8993-698d-3d02-aaee-faa7494f65d2.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396552
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:cb:ec:30:ab:fa:7f:c8:83:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=709c5825-fe94-4ccf-b4f8-d6efc0e3d654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:f9:30:2b:43:bc:17:6d:60:7a:14:5e:45:
                    58:e5:ae:d0:25:0f:6f:09:27:ed:12:9b:74:36:2f:
                    ef:e7:7f:06:ff:fc:22:54:74:be:43:9f:a0:43:72:
                    43:b9:16:45:17:c4:82:e8:7b:c2:db:9b:e7:ab:1d:
                    5e:a0:0e:ed:ef:4c:62:31:fa:11:5a:ad:be:f5:b7:
                    1f:a6:54:32:40:43:8c:6f:88:1b:06:ac:d4:f7:50:
                    80:9c:d3:22:08:b4:37:33:7f:59:50:31:80:a4:0e:
                    db:95:15:55:a9:d0:6d:41:51:3d:2d:c9:11:4b:b8:
                    34:67:68:2d:fa:a9:a8:0e:f2:3d:47:5b:58:49:01:
                    76:35:0a:c4:3b:cd:46:6d:22:e1:81:7e:cb:42:72:
                    17:73:c5:f1:c3:a3:7a:3a:87:12:03:73:1b:9e:7e:
                    d1:73:b0:c4:29:a2:8f:67:2a:87:e3:d3:05:98:58:
                    5e:35:74:aa:9e:c0:a3:b9:b2:03:7e:19:ae:fd:1e:
                    1d:0b:7a:84:22:fa:df:e1:f9:d2:1a:6d:20:c6:e4:
                    31:f3:25:7e:ca:73:11:45:4a:a3:bb:3b:20:11:54:
                    f1:2f:ec:34:21:33:c9:32:c7:60:49:5c:d5:8a:80:
                    51:84:07:34:74:e5:88:07:9f:ec:5d:86:02:f8:e9:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:43:71:C1:E2:52:65:00:2E:D8:8B:00:89:6E:EC:C8:CC:83:08:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbad8993-698d-3d02-aaee-faa7494f65d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b0:74:67:ab:64:1d:5b:a4:b4:81:2b:3c:83:9c:f3:d9:31:
         52:52:82:c8:e6:b7:26:1f:b2:3c:1a:fc:9e:19:4a:31:f7:9f:
         01:3a:c9:0d:72:e9:c0:b2:56:2c:2a:20:2b:22:2f:bd:78:1f:
         57:23:1e:4a:a6:df:ac:4c:bb:67:e0:f8:84:d8:19:74:64:41:
         f2:84:14:61:df:7e:4c:ee:03:65:b4:b7:28:67:1f:a6:b5:10:
         5f:47:54:a8:69:47:b3:a6:91:20:83:fd:22:d0:ee:40:e3:5e:
         7d:77:a4:38:91:1f:56:ee:12:38:95:1b:54:0a:04:89:9d:6a:
         3e:34:e3:5d:39:15:19:9d:b4:54:eb:08:9a:42:14:dc:ab:e2:
         e5:6f:9a:e6:b3:26:2a:67:e0:7b:cb:63:6b:be:b9:b2:5b:4c:
         6a:ab:5b:2f:0c:b6:03:99:5b:79:f7:78:99:9c:74:b8:4c:eb:
         c4:43:f3:4d:13:cb:ab:cb:2a:50:33:e0:ee:3b:26:a4:aa:6b:
         e5:67:90:39:18:a2:57:ab:97:96:cf:cb:8c:d5:fd:8a:3d:30:
         22:e7:df:35:21:ad:e5:c7:c6:0e:4b:3a:dc:71:87:5c:d4:b3:
         f5:d3:93:5d:89:6e:e2:da:cd:8d:62:c2:53:80:60:ee:4b:ac:
         5d:bf:a5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:07 2025 by rpki-client