Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa
File:                     ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa (raw, json)
Hash identifier:          JxMOsQPpyXrAUi5y9DXr4K2V4tmfjW/99z6RAMuwCLA=
Subject key identifier:   0C:31:40:27:7E:AE:88:BB:12:C4:A5:A1:4C:A1:A1:17:F7:D1:F8:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849393E8DDA6E917D2AFD639800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     396547
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:8d:da:6e:91:7d:2a:fd:63:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=8af39af5-9297-4a3e-a78c-9a58c807e4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:7e:b4:9a:50:23:27:91:96:ca:2c:7b:6f:
                    1b:6c:77:0e:ba:94:b2:09:a3:54:b3:df:d1:c6:cf:
                    96:44:7a:88:93:9a:aa:f1:c1:d5:5a:90:1e:a0:27:
                    bf:49:f0:f2:1a:ec:24:d5:50:90:f2:78:d9:6a:f4:
                    9d:73:ea:9f:26:f0:f5:51:11:e5:48:30:20:f8:a7:
                    4a:c2:3d:f7:a1:b7:c3:0c:f1:01:8d:4c:b0:ab:06:
                    bf:55:cf:30:bb:fb:28:00:19:56:b3:c8:d4:57:82:
                    86:fe:aa:4c:63:fe:99:f1:84:8f:3b:5f:34:11:9e:
                    b3:d4:a7:55:15:72:e5:13:f0:63:b3:96:42:d0:97:
                    25:3a:2a:eb:98:d4:2a:c3:6a:36:84:14:c9:7e:32:
                    b6:1f:c5:ba:dc:86:31:e3:c5:9a:31:10:b6:9f:38:
                    ee:2a:1f:b5:2d:05:94:75:5d:e1:eb:48:a3:ef:20:
                    dc:5a:23:fe:ad:a8:c3:b7:0e:14:93:fe:5f:c1:27:
                    f6:a0:ed:3a:d3:cd:24:f9:97:53:f0:8f:18:20:03:
                    46:9f:d0:cc:71:fb:5b:12:88:99:3b:bf:a2:a4:d9:
                    b6:d8:fb:30:30:8c:60:fc:e9:9a:c7:3d:44:27:73:
                    55:1a:02:cc:38:e1:8d:b9:a1:bc:75:07:9c:27:4a:
                    c8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:31:40:27:7E:AE:88:BB:12:C4:A5:A1:4C:A1:A1:17:F7:D1:F8:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:8e:0d:31:05:29:54:79:7c:4c:d5:63:25:bf:e0:d2:43:66:
         84:b8:d5:00:9c:eb:88:ee:69:e2:45:78:04:a8:09:c1:89:3b:
         00:38:82:ec:24:32:24:18:1c:0a:a2:c4:40:f3:48:24:23:2b:
         a4:73:f2:a8:aa:42:00:34:7c:0c:4a:d9:be:75:25:dc:db:50:
         7a:17:fd:2a:b3:68:a6:92:2a:61:74:c2:72:18:4c:32:17:21:
         97:a3:a8:51:64:51:c4:b7:dc:17:f2:2f:26:30:19:c5:f1:de:
         e3:9d:24:f1:e1:ed:78:8e:53:a0:ff:e5:d2:51:b5:42:56:45:
         a9:32:38:99:01:77:ba:70:d9:7a:11:19:c2:50:3b:a4:31:51:
         c7:54:20:ee:3c:1c:5e:ac:5b:68:f2:d2:bc:b7:56:f8:40:70:
         a6:40:ae:62:a2:f8:06:90:e3:22:b6:06:1f:6b:d7:40:a6:33:
         92:78:eb:f0:1c:2d:6e:6d:90:80:05:7b:0f:35:a7:7e:94:bb:
         58:79:cd:76:6f:c9:c8:22:5c:d6:4f:30:8e:aa:0c:4b:e2:b6:
         a9:42:03:b2:44:34:7a:b6:a1:61:6f:a7:45:16:8a:fb:b3:de:
         a4:65:34:a1:04:02:0b:e3:22:20:16:8d:59:ed:a7:f0:a4:b8:
         27:21:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:53:21 2025 by rpki-client