Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e32144a9-e981-3959-9809-abea267dee7a.roa
File:                     e32144a9-e981-3959-9809-abea267dee7a.roa (raw, json)
Hash identifier:          CU5B6Zusa2LHwWIbAN9UZJq7lTswIqbTSwlu+YydNJY=
Subject key identifier:   EA:BC:90:67:05:16:5F:FE:35:A4:53:76:D5:BC:45:60:60:DE:F0:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849403981758A91DA144F54D3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e32144a9-e981-3959-9809-abea267dee7a.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     396544
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:81:75:8a:91:da:14:4f:54:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=44508474-b4dd-4bed-ad81-218233cf93dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0e:a3:00:96:72:2a:9f:95:0d:3c:17:8d:a5:
                    f5:f0:c7:11:62:22:83:ab:9c:67:ab:c3:c9:93:df:
                    8b:fc:0d:cd:8c:7b:1a:51:02:3e:7c:4f:bd:2f:44:
                    bf:26:c5:fd:8e:ee:b0:c0:3a:72:a8:9b:3f:1e:f7:
                    7f:13:e2:cd:0e:29:67:28:f5:13:2e:0b:b8:73:bd:
                    3c:77:e4:37:5b:9a:a0:8a:63:f5:bc:aa:3d:97:27:
                    cb:11:dd:a9:6f:fb:21:e3:0f:e0:92:4d:09:5a:93:
                    79:b4:07:a5:94:eb:30:19:c2:37:21:e5:f7:21:ae:
                    dc:49:87:f6:52:b3:13:20:76:9f:a0:cf:7a:02:c6:
                    69:98:ed:29:97:1c:ba:ef:bb:2b:51:ab:23:51:3a:
                    19:ee:82:07:88:46:2e:d8:89:8b:ae:b5:54:e5:2f:
                    e1:7a:cd:87:92:20:1a:af:df:d2:56:1e:70:1e:3b:
                    ae:18:0d:bb:c6:ac:d0:77:da:42:b9:e6:b6:4e:d3:
                    82:ef:87:95:26:1d:98:de:91:25:6a:84:d9:ca:7a:
                    e1:93:10:3a:6b:29:81:e4:47:ba:a4:37:aa:4e:c1:
                    12:fb:20:ad:8d:0e:97:f9:bb:8c:65:57:63:66:16:
                    10:19:86:cd:33:98:18:36:bc:9b:a8:e9:7f:3f:62:
                    a4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BC:90:67:05:16:5F:FE:35:A4:53:76:D5:BC:45:60:60:DE:F0:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e32144a9-e981-3959-9809-abea267dee7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:85:8c:a0:99:8e:e0:6d:b0:19:c2:b3:65:c6:7e:c1:28:2a:
         2f:de:71:62:f1:82:53:56:8d:e9:af:29:b6:d9:a0:e9:3a:58:
         10:ee:d9:09:af:44:2e:4d:c0:b5:36:0e:37:76:98:ab:82:8a:
         42:9f:9f:8d:85:d7:74:34:3e:49:bb:72:46:45:4f:db:fa:23:
         de:b7:10:6e:b0:9b:55:34:09:0b:11:6f:33:05:23:d5:fa:64:
         08:08:6d:bf:d9:39:5b:4d:fc:cf:10:96:87:18:a5:fc:2c:70:
         9c:93:1c:e6:13:d2:df:91:5f:e7:a4:2b:6d:a3:42:a8:bf:df:
         b0:1c:9f:a8:b7:50:c7:c9:78:23:d9:e1:bd:59:53:4f:e3:a3:
         ee:36:da:a1:bb:3d:be:1a:dc:55:f7:d0:79:20:94:37:bb:35:
         b8:e2:15:2b:31:3b:a5:d5:d2:64:e5:7b:db:d2:7a:ab:b7:6e:
         08:7e:94:1a:19:4c:25:09:e2:57:c0:07:ab:be:94:13:12:a4:
         cf:8a:51:24:30:c2:2c:26:6a:ef:97:ed:33:c2:01:22:18:12:
         14:e4:4e:f4:37:78:a4:86:b8:4e:22:d8:7f:a7:3e:8a:00:d1:
         4c:83:41:17:8e:58:ef:2a:6e:1c:a7:a8:81:7c:27:61:2e:26:
         dd:af:2b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:09 2025 by rpki-client