Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dccb56a7-fc83-308a-97bb-134448d5889d.roa
File:                     dccb56a7-fc83-308a-97bb-134448d5889d.roa (raw, json)
Hash identifier:          3KQihaDsjBw+RYUn/USvznk/Zifceqwj9OMgSmj8KAU=
Subject key identifier:   05:B6:FB:9D:8F:4F:32:CA:20:18:58:C1:D8:FE:F4:9D:D3:58:E2:B2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F34EBF661516E333A480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dccb56a7-fc83-308a-97bb-134448d5889d.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396555
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f3:4e:bf:66:15:16:e3:33:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=f330bcda-97dd-4ca9-89a0-ccd1dc55832a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d2:25:c0:e7:7d:cd:b3:7b:8e:ce:ba:a3:69:
                    04:06:e4:81:49:e5:00:fa:ed:37:2a:df:9c:ec:6c:
                    59:f2:16:48:3b:70:58:c6:a1:cd:ae:1d:e3:fc:0c:
                    2c:ff:8d:91:7c:e9:21:50:74:6d:02:3b:86:d7:82:
                    b4:06:9b:07:e0:4c:01:10:f1:ca:bf:c3:4b:61:79:
                    06:c7:2f:6e:b7:b7:e1:f5:db:d7:c3:f4:e8:39:4c:
                    7e:68:13:ce:12:a4:a3:a1:9a:a3:31:36:1a:f7:2f:
                    0f:a6:bc:09:e9:bd:38:63:e3:03:55:16:9d:fb:dd:
                    7a:be:c1:21:9d:38:ee:ed:6b:da:ac:c2:f2:d3:6e:
                    dc:40:cd:f0:07:81:30:9e:ee:76:57:8a:b6:90:99:
                    0d:36:4c:c8:fd:8f:c7:1d:34:30:b1:a7:f7:86:0a:
                    f4:eb:5f:8e:a4:1b:5b:58:04:9a:8d:2d:64:b5:cc:
                    ed:b3:1b:cc:91:31:b7:12:9b:8e:72:e6:54:c5:09:
                    d9:3f:ff:f7:6f:67:a6:66:30:b2:b6:89:85:02:fa:
                    43:a5:e3:18:13:6a:a3:89:02:ae:b5:1c:1e:00:18:
                    4b:2b:cc:7d:81:b3:50:be:93:5b:38:24:48:fb:83:
                    31:ba:d4:bb:d3:54:f8:a9:e1:9f:cc:43:12:12:7d:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B6:FB:9D:8F:4F:32:CA:20:18:58:C1:D8:FE:F4:9D:D3:58:E2:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dccb56a7-fc83-308a-97bb-134448d5889d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:ff:41:c3:c3:e4:37:20:40:f5:82:19:9a:33:61:92:e9:6e:
         34:92:40:3f:99:f3:82:53:b8:50:58:d1:d2:b3:ad:36:bd:64:
         5a:ad:1c:c2:b8:9d:25:ab:e3:1c:91:8c:80:17:52:b5:51:07:
         34:f8:8c:b3:69:1c:58:c0:1b:23:81:f2:54:a8:94:4d:78:8a:
         92:33:0f:5e:b7:1b:47:da:da:20:1f:95:ad:6e:5e:20:d7:18:
         3e:6c:8c:6f:4b:64:69:6f:57:d5:17:6a:bc:d8:6a:d8:56:1d:
         58:b2:9c:ed:5a:89:69:5c:82:18:79:8b:74:ad:64:0b:2b:b2:
         88:b5:35:5a:39:17:e1:10:5e:7b:94:79:cb:b4:e5:31:a2:a8:
         e5:c5:68:b6:ad:df:22:2b:27:db:52:92:cf:11:76:85:3a:88:
         91:a7:a7:72:a0:0e:c8:60:b3:6f:a5:42:8e:24:b9:fa:ba:f2:
         3f:74:55:9f:5c:78:89:c5:76:02:96:00:4b:6e:35:43:d5:1b:
         ee:15:ec:71:05:48:65:c6:6d:57:4c:81:d2:17:db:15:6e:97:
         9c:80:ae:1e:0e:b7:59:04:8d:3b:ef:65:2d:22:f4:77:3b:7e:
         dc:9c:bf:6f:2a:28:df:34:b2:7f:42:66:c6:12:77:de:20:b4:
         5f:14:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:23 2025 by rpki-client