Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1d6ed4a-b292-368b-aa1d-9d5ec8bc630c.roa
File:                     e1d6ed4a-b292-368b-aa1d-9d5ec8bc630c.roa (raw, json)
Hash identifier:          ZGUYqdwt2MF7AcGcBdyiKfKfcIloXhPOjoI1A9FrmWM=
Subject key identifier:   5E:43:4C:E6:4D:67:65:49:02:3D:E7:1A:51:2E:FF:53:A8:5E:50:EF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183E36792C76219B2C90D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1d6ed4a-b292-368b-aa1d-9d5ec8bc630c.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396551
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:e3:67:92:c7:62:19:b2:c9:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=93cab1dc-44bc-4685-a452-007d0a3034b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:bf:f6:4d:54:d9:7d:b8:21:21:43:97:c2:
                    06:2a:51:ba:83:17:7b:87:16:ad:01:a5:c7:f2:71:
                    2f:19:c3:39:fc:7b:d4:5d:95:ab:4a:2d:ef:be:43:
                    66:74:a4:cf:fe:37:35:0f:44:23:f0:d4:91:1f:3b:
                    94:76:63:1a:17:97:b6:c8:bf:4a:81:08:73:d5:91:
                    11:f5:06:db:26:dc:3f:92:5a:b0:eb:64:c8:d9:af:
                    dc:5d:1b:dc:36:82:db:87:e2:6c:eb:ff:af:4a:15:
                    dd:21:ea:ea:ed:04:f6:3b:59:0b:d5:53:62:d1:d9:
                    89:c9:7f:fd:c9:59:8a:b3:a8:bb:7f:8c:74:d6:0d:
                    99:df:74:e4:19:54:4a:e3:30:6c:ee:d7:0c:14:65:
                    68:ca:ae:ab:e2:61:55:7e:0c:d0:6d:46:8a:d3:c0:
                    df:af:8c:a1:f1:5e:14:0d:a1:f2:ed:db:3f:06:29:
                    30:d0:c7:81:06:9d:10:65:2b:2a:76:b9:4f:d9:d8:
                    39:94:19:8a:52:0b:26:b2:2c:c9:e7:71:94:eb:6b:
                    2f:79:ea:f8:24:d8:39:b8:83:c4:f7:cf:0c:06:37:
                    6d:cd:73:46:c8:13:af:f7:f9:00:fe:bc:d6:8d:09:
                    f9:a2:8b:d7:e1:94:73:06:5b:f0:8d:cb:eb:52:c0:
                    bc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:43:4C:E6:4D:67:65:49:02:3D:E7:1A:51:2E:FF:53:A8:5E:50:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1d6ed4a-b292-368b-aa1d-9d5ec8bc630c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:66:ce:d9:d7:94:f1:ff:04:10:cc:03:92:e7:61:d2:3d:64:
         5d:ba:5e:45:26:72:0d:f1:65:09:36:f8:87:4d:bf:8a:8f:da:
         b6:03:28:72:72:ee:00:87:f8:b2:2f:d7:ba:6e:2b:5c:ca:89:
         f7:09:5d:ab:05:ee:b1:af:b2:f7:78:e1:b5:b0:4d:af:28:9d:
         d6:ef:11:70:24:a9:50:2f:54:d6:de:5b:b4:e0:2a:df:a5:19:
         d5:53:3f:a1:2e:96:22:7a:ab:70:2f:ee:24:a4:aa:d9:49:4e:
         f3:90:72:29:50:6c:ba:31:32:cb:29:ca:fe:95:14:0c:ba:a6:
         67:eb:e6:79:52:e2:41:2f:db:81:23:50:cf:22:01:0f:ae:72:
         8a:f8:f7:14:18:38:2a:29:b9:93:59:1c:55:12:69:54:50:54:
         c9:e7:a4:36:b3:84:63:6c:70:29:23:f3:38:55:8c:76:42:0f:
         bc:04:08:2b:3a:a5:e8:8f:c0:d0:a5:db:d6:a4:98:6a:4d:37:
         2f:1c:dd:e1:33:ca:f5:72:07:ea:3f:04:ee:93:d4:6b:99:0a:
         30:da:b7:21:5a:f3:c1:45:1a:29:46:6b:82:cc:dd:81:4e:fa:
         f3:8c:1d:ec:08:6f:43:f1:b3:24:57:a8:df:d3:df:6a:d5:a2:
         7c:44:76:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:24:37 2025 by rpki-client