Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f99daa13-9063-3e8e-8be8-e27e97bebc72.roa
File:                     f99daa13-9063-3e8e-8be8-e27e97bebc72.roa (raw, json)
Hash identifier:          3D2WgTlD2na8Grr4VQnSZ44X/jqzUSU2CBqvcg6eRgU=
Subject key identifier:   E0:2F:61:61:77:D3:A0:1B:7F:5F:DC:E3:84:8E:1A:03:28:E7:7B:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849393E8E3693EEFEE023523D20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f99daa13-9063-3e8e-8be8-e27e97bebc72.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     396575
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:8e:36:93:ee:fe:e0:23:52:3d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=c98b5123-5cab-4d80-a65e-43ff58c71dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:79:6f:6b:92:8a:27:5e:44:34:a1:05:28:83:
                    e5:35:8d:5d:fc:b9:49:86:00:f8:79:a0:29:dc:ca:
                    26:9b:2b:45:29:0d:65:0b:96:c0:ad:07:f5:86:b4:
                    3a:4c:f9:35:8b:aa:b6:25:7f:b3:a6:de:29:d7:57:
                    e5:ee:8e:aa:1e:8c:64:81:ca:ff:09:4c:8c:da:11:
                    d9:8e:93:d9:66:ea:79:d6:fe:c5:bb:f3:3f:39:58:
                    cc:c1:35:8d:bd:69:db:7c:fe:7b:08:4f:81:1d:9b:
                    a7:16:2f:32:c6:23:85:b4:e9:0d:c6:0e:81:22:14:
                    92:9d:58:8b:2d:7a:97:e1:ea:05:3e:5e:df:bf:e9:
                    72:26:af:ed:a1:37:78:d1:4e:3f:5e:b8:15:35:c3:
                    45:70:e4:5d:27:78:75:e0:bd:3c:c9:32:71:e5:cc:
                    2f:ba:fb:08:1d:51:fe:00:07:f2:e1:9c:d2:fa:9a:
                    84:2d:45:46:01:85:73:45:76:65:b9:95:d3:e9:4a:
                    86:31:72:0c:00:c1:99:f9:02:e0:de:ea:cf:0d:88:
                    c0:38:2f:f5:61:ca:ad:bd:b8:0a:03:37:0f:85:a1:
                    b6:db:ac:c6:14:88:e0:8f:bd:5f:14:90:cb:60:23:
                    a7:94:3b:fa:20:3f:f5:be:34:4d:2d:59:3b:b4:31:
                    a1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2F:61:61:77:D3:A0:1B:7F:5F:DC:E3:84:8E:1A:03:28:E7:7B:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f99daa13-9063-3e8e-8be8-e27e97bebc72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:96:55:52:f2:db:93:73:68:b9:cb:7d:80:8f:11:75:cf:cd:
         4f:6e:1a:d4:15:88:83:f6:83:83:8a:c1:a7:0a:bd:7a:e8:e9:
         a6:6f:5c:ae:c0:8c:28:74:77:d5:31:92:2d:a9:7a:cb:2f:b5:
         f6:a0:9f:f3:90:18:d6:a1:0e:6e:27:de:85:58:63:ba:32:b9:
         d9:00:d6:35:55:2b:5a:1f:9d:8d:d4:a4:bf:51:e5:31:f2:07:
         dc:b1:f9:36:84:56:35:b4:8a:39:11:a0:8f:59:94:85:78:66:
         fc:51:62:38:82:ae:86:23:1e:a9:ed:68:67:34:ce:99:54:be:
         e9:4e:61:a3:e8:2b:29:6f:da:5d:f7:5a:d5:46:ca:f7:4e:07:
         81:ed:2c:d4:19:3d:43:53:31:1c:52:e9:c2:34:63:55:62:40:
         7f:46:2a:cf:f0:e8:c4:30:11:db:06:07:65:7e:35:2b:d0:5f:
         d4:97:75:43:c9:ab:5d:af:21:ac:a1:37:61:b1:74:1e:4a:e8:
         73:ac:fb:a3:bf:85:13:f2:23:5f:5c:c5:5b:80:36:41:b7:f2:
         7c:de:3a:bf:f5:95:f5:5a:fd:6f:75:2a:69:cf:7f:6a:71:57:
         9d:68:6c:e6:9f:26:df:31:3f:ae:22:45:b4:95:17:00:89:79:
         7d:d4:32:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:58 2025 by rpki-client