Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fad48b20-f403-3cf1-b7cc-88e4c6d7e8e0.roa
File:                     fad48b20-f403-3cf1-b7cc-88e4c6d7e8e0.roa (raw, json)
Hash identifier:          40VDYy/IprkZFTH1ToCX6JPf+9OejBkiIZXtMrdvbEg=
Subject key identifier:   67:47:2A:6E:75:88:C1:48:6A:E9:81:83:5F:52:58:FB:FE:BE:88:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497AD9C9864C1ADABB7415BD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fad48b20-f403-3cf1-b7cc-88e4c6d7e8e0.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     397210
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:c9:86:4c:1a:da:bb:74:15:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=7231a131-9f2b-4cc1-b896-6520d331cdd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:18:2d:77:16:b6:05:9b:69:dd:5f:ca:47:98:
                    84:5f:04:ba:0c:0d:fb:b0:c5:7f:ce:03:3e:39:1a:
                    34:49:82:c6:1d:0f:39:d7:13:2e:16:ca:f9:03:b6:
                    de:90:29:0c:6b:19:60:55:5c:b2:9d:80:a7:68:5b:
                    96:08:1a:06:c6:1b:b7:45:48:a0:d0:00:68:a7:9d:
                    b0:b3:86:9a:de:c1:87:9a:cf:81:b6:72:04:d9:ad:
                    3d:0b:c5:53:f9:79:74:e7:8a:5a:0c:38:4e:8c:fd:
                    d5:d2:0e:83:1f:cb:ea:70:81:87:50:68:0f:63:d0:
                    c0:d7:46:28:a8:5d:2c:d2:31:ec:4e:95:2e:4e:5c:
                    ca:49:d7:a3:e3:d1:73:25:2c:5c:bd:a3:29:9e:6a:
                    aa:7b:07:2b:a3:ef:8d:bd:45:18:6f:40:ce:f6:db:
                    cb:0f:de:04:7f:aa:4f:bf:26:65:29:fb:13:c7:81:
                    8c:c6:0d:e5:a3:67:cb:04:3f:72:c8:ba:d6:1a:01:
                    7a:4e:0a:18:95:42:bc:99:32:e1:fe:77:d5:cb:f5:
                    f2:a9:8b:71:26:7a:3e:fb:aa:75:c5:4e:14:77:09:
                    38:4e:85:46:e0:c3:dc:fb:06:75:18:6e:bf:79:0c:
                    bd:ae:d7:06:41:e8:fb:1e:8f:29:10:45:96:3b:26:
                    10:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:47:2A:6E:75:88:C1:48:6A:E9:81:83:5F:52:58:FB:FE:BE:88:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fad48b20-f403-3cf1-b7cc-88e4c6d7e8e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:63:3f:00:d5:bc:92:4f:ad:d0:d9:c1:a5:cf:74:79:36:0c:
         b4:8d:21:0d:c0:76:23:c6:fd:13:7b:9f:4e:1d:30:d3:e7:d7:
         15:8a:a1:01:8e:23:23:65:d2:76:a5:7b:63:25:f4:dd:f3:57:
         01:f6:75:34:62:46:e0:ba:79:87:11:a4:d1:c0:d6:ac:a5:08:
         1b:a9:2d:6b:71:33:f4:d0:b6:23:f1:c5:27:01:d2:11:ec:89:
         b3:2c:95:2a:f2:b3:bd:2e:df:c5:41:52:c5:e7:cf:4a:8d:1e:
         e2:24:8e:62:29:85:f1:8f:4b:59:7e:ed:30:80:f7:bf:e9:12:
         d3:a6:37:d8:10:27:42:93:e1:f4:a9:fe:f8:47:4f:ee:e3:1f:
         3b:5f:05:e7:d3:98:76:28:13:6e:b0:89:bc:9f:3b:03:9d:06:
         57:25:37:3c:01:cc:3a:90:e9:a5:6a:28:e2:4d:ba:ed:48:74:
         3d:d4:00:ea:b7:20:6d:c2:d8:10:ab:59:e2:01:99:c7:a3:18:
         67:2b:65:7a:f9:d6:b8:b9:70:64:47:77:95:ff:1d:eb:ee:e3:
         1c:32:a1:e1:9c:20:e7:81:42:a5:ae:a6:0d:d9:d0:4d:f1:bf:
         11:a2:a0:c2:e0:83:db:d5:00:59:61:e0:d2:21:6c:aa:e5:6f:
         aa:f2:4b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:51:46 2025 by rpki-client