Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3500668-aa14-3544-9d6b-9f67c6bba369.roa
File:                     e3500668-aa14-3544-9d6b-9f67c6bba369.roa (raw, json)
Hash identifier:          WMI1o2aWu4gUAuvHiZNtAzOmF587eAPkhbwmUBHrn3A=
Subject key identifier:   66:81:B6:7D:B8:5E:CF:40:9B:63:A8:E0:F8:72:C3:B8:67:88:5F:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848C57336F19479ED7116711600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3500668-aa14-3544-9d6b-9f67c6bba369.roa
Signing time:             Tue 04 Feb 2025 13:33:17 +0000
ROA not before:           Tue 04 Feb 2025 13:33:17 +0000
ROA not after:            Mon 05 May 2025 12:33:17 +0000
asID:                     19836
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:73:36:f1:94:79:ed:71:16:71:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  4 13:33:17 2025 GMT
            Not After : May  5 12:33:17 2025 GMT
        Subject: CN=3a542392-c52d-4880-ae51-164ed4ee5c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:78:ef:22:19:84:41:71:7f:7f:3d:bb:a7:
                    89:d3:2a:75:aa:fd:2d:3d:a4:12:b6:d1:b0:ab:75:
                    dd:19:29:13:f2:92:c7:9e:73:70:6c:4d:61:4f:58:
                    d9:10:60:25:ee:64:c5:c4:14:0a:8c:49:84:42:2e:
                    60:dd:c7:23:48:f6:a7:f6:84:4c:66:07:95:18:5b:
                    23:19:89:b8:5c:19:92:17:5a:08:18:ed:00:19:fb:
                    19:2d:d9:d7:79:6f:c1:09:21:f3:85:ce:4a:ae:bf:
                    01:73:a0:91:dd:ee:9a:fb:b0:bf:4f:6b:bb:ff:b1:
                    3f:9a:9e:08:ee:54:51:64:7d:ea:80:7d:59:32:b2:
                    98:8d:03:5b:8e:be:7b:52:59:76:8c:79:a4:a6:62:
                    12:a1:18:49:a2:99:91:3b:e9:b4:55:86:ca:12:7a:
                    15:23:6e:25:30:50:9b:a2:91:82:23:11:c4:ea:92:
                    d2:98:cc:15:f9:d3:39:37:29:06:f7:87:6f:1a:1f:
                    e8:53:cf:fc:68:e3:38:5f:6d:6d:4c:0e:44:92:ec:
                    28:f2:19:dd:e2:cb:33:01:7f:38:06:1d:6d:18:3b:
                    21:7c:cd:fa:1f:c0:a3:75:09:de:1c:7b:89:f7:47:
                    2a:2d:51:77:d6:7d:89:4f:af:5d:6c:42:f7:49:9d:
                    93:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:81:B6:7D:B8:5E:CF:40:9B:63:A8:E0:F8:72:C3:B8:67:88:5F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3500668-aa14-3544-9d6b-9f67c6bba369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:15:27:5b:dd:68:7d:66:60:ab:10:41:08:b4:5d:96:28:fc:
         89:0d:c2:49:30:1b:82:2b:6e:51:85:23:79:13:8f:b9:29:ed:
         39:c1:08:4f:3d:00:54:db:74:e6:5f:6f:ef:26:f3:ae:f3:01:
         c2:27:54:bd:49:b2:61:46:83:8b:f5:37:f8:39:19:84:a0:c0:
         88:bf:dd:8d:86:ed:44:ff:e2:87:6a:a8:8f:d2:94:b7:23:a4:
         6a:fe:5e:b0:fa:67:4e:c0:e4:7d:e9:4c:a4:65:38:ed:8a:9e:
         82:64:29:eb:fd:3e:b6:25:da:b4:e9:dc:e1:fd:2a:de:5b:43:
         cf:d3:ac:6c:0b:7c:3f:9f:0d:b7:9f:65:bd:07:b0:6a:93:2c:
         cb:7d:6b:57:9a:a4:44:19:15:dd:f2:91:d9:2a:b5:35:55:a7:
         41:1f:89:82:6e:89:b7:9a:23:06:e8:20:c9:4d:c1:af:b3:3e:
         23:e1:83:10:dd:18:20:30:0b:bd:eb:d1:86:8a:02:3a:b1:4b:
         69:15:28:70:c2:e6:97:2c:56:bc:a2:e5:c8:e6:ec:17:6b:9b:
         9c:ec:c5:03:1c:dd:cd:44:37:35:44:88:c9:f2:3e:eb:0e:ff:
         d7:43:a7:08:54:d9:50:eb:21:ab:47:e7:84:0b:3c:8f:53:25:
         ec:00:d4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:35 2025 by rpki-client