Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5037220-0a09-395d-85c2-3e9960af18d3.roa
File:                     f5037220-0a09-395d-85c2-3e9960af18d3.roa (raw, json)
Hash identifier:          bbEks9DFxRtEMWkGC+43cuFAO06rr80bk67tb5f6qGo=
Subject key identifier:   CB:D6:07:5B:BB:C8:39:FC:68:50:E9:1B:FE:83:07:61:2B:AD:CD:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497AD9C31F85B2B9D04CADB800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5037220-0a09-395d-85c2-3e9960af18d3.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     396567
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:c3:1f:85:b2:b9:d0:4c:ad:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=4d965293-6e88-4c0d-926f-2fa4f1665193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ed:7c:26:ea:89:f3:4d:c1:7d:17:6f:ed:f6:
                    4e:8a:6d:52:3f:63:fa:ce:d3:c8:76:e2:c9:b5:3e:
                    bb:6f:5a:af:6b:22:bc:70:ac:00:7b:1c:c2:ac:ce:
                    0a:5c:82:e2:78:43:55:cf:73:85:21:28:64:24:35:
                    2c:88:16:54:b2:07:44:66:ac:b4:1e:c9:5f:41:4d:
                    22:33:09:4c:fe:e1:7e:91:32:39:7e:7d:65:63:52:
                    75:ba:18:e5:1b:6f:29:cb:29:0e:3f:c8:34:5c:9c:
                    48:f2:d6:24:82:1f:d7:66:b0:30:9e:63:7c:fd:0e:
                    a3:91:a4:b5:38:56:97:52:86:f1:a5:26:c2:54:82:
                    97:9f:41:e2:f5:b4:06:20:5a:f2:fc:5b:98:73:d3:
                    ba:a5:3e:61:ef:3a:e5:25:90:bf:c7:11:03:37:d0:
                    b5:cb:a5:a7:75:85:e2:4c:95:b9:1f:a4:48:1f:81:
                    ef:8c:d7:13:c7:37:f3:70:33:d5:a6:37:d7:73:79:
                    a7:38:2e:c0:b7:b7:f8:0e:f2:64:7c:b7:94:76:48:
                    6b:70:a4:03:85:f0:32:16:96:9c:d3:78:b3:76:4b:
                    14:0a:7f:b5:31:79:8a:a8:7a:1b:93:02:fe:85:73:
                    6b:60:83:7b:84:8c:cc:22:a6:41:d3:5f:7c:96:c0:
                    18:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D6:07:5B:BB:C8:39:FC:68:50:E9:1B:FE:83:07:61:2B:AD:CD:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5037220-0a09-395d-85c2-3e9960af18d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:5f:87:4f:15:b5:5a:e6:6a:15:6d:cc:5f:f3:13:4a:4e:e2:
         c5:18:a4:88:e5:7e:ef:d4:a7:cc:55:31:8a:ad:1d:3f:04:c3:
         7d:55:b6:25:24:81:69:04:d0:01:b2:fc:44:ac:bc:5b:19:b0:
         3d:12:43:f2:2a:a8:18:c5:f2:6e:b6:f1:49:c8:7c:0e:38:09:
         83:c8:5f:3f:d9:77:a9:0f:e6:a0:2b:3e:82:29:cd:76:e7:c2:
         f4:a5:80:17:3f:45:7e:3c:68:48:d4:a2:6b:6a:4c:12:6b:b8:
         d8:07:38:30:cb:22:6e:4a:cf:22:e3:e4:35:03:f1:7f:5f:53:
         d5:3e:8b:ca:22:46:49:38:f6:39:39:ee:48:4a:d3:b8:d1:cd:
         4a:60:63:d2:f1:d7:1e:23:1d:be:20:ec:ff:c0:84:86:ef:49:
         c6:88:b0:a2:e2:ad:ca:15:d0:6a:f6:33:3c:26:92:90:f3:c2:
         fa:a0:c2:0c:4c:46:d6:91:ec:16:3e:71:67:78:58:18:34:e5:
         0c:51:e8:aa:6c:d5:ca:f3:0d:68:a0:62:4c:a6:ee:3b:8a:49:
         4c:a4:f1:47:ac:0a:69:2e:71:c7:3e:4d:43:f2:59:11:98:f8:
         5a:70:2b:65:de:fe:fa:0f:67:25:c3:d4:3e:ed:4a:c8:be:f9:
         72:49:c0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:31 2025 by rpki-client