Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dd889de-6ec0-3ef5-8435-d3c26b44e771.roa
File:                     0dd889de-6ec0-3ef5-8435-d3c26b44e771.roa (raw, json)
Hash identifier:          5XCCwWcVf7NJ1knD+YkR05V9q0BW5jb3AKQXXh6bgTk=
Subject key identifier:   8E:BC:32:6A:AB:A3:00:3A:0E:C9:4E:38:24:92:D0:BE:ED:7E:AF:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849A4BA28663ECA70A361C48A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dd889de-6ec0-3ef5-8435-d3c26b44e771.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396569
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:28:66:3e:ca:70:a3:61:c4:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b48e0573-24f6-4cbb-b9f5-57a472e42a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1e:85:5c:06:aa:22:84:40:ff:32:6f:13:d2:
                    7d:a0:d0:50:a3:3f:d4:a4:cd:8d:74:55:6d:62:60:
                    16:75:a3:64:d1:45:09:9a:04:39:7b:c1:03:33:34:
                    f0:5a:16:1d:00:40:2b:04:de:f8:e0:2f:8b:a7:bf:
                    10:81:10:49:cb:85:b5:3b:b6:81:b9:88:b2:55:0d:
                    1c:0d:7b:44:61:e1:cb:57:be:3a:30:0c:19:e6:1b:
                    d3:de:b2:bb:cd:d3:34:b8:fb:56:c5:b5:8a:cf:a4:
                    30:04:ef:b7:b8:a9:6e:3f:e5:85:aa:be:d0:ee:b8:
                    16:55:b1:62:93:1a:75:63:4b:ef:bf:99:98:c1:2d:
                    3b:c3:9e:e3:48:af:00:64:64:fc:66:2c:a8:ad:35:
                    4e:d3:d4:fd:44:77:1d:9e:ef:17:72:98:85:de:30:
                    60:1a:1b:7b:a6:e2:76:3e:2b:20:01:92:ec:57:2d:
                    a8:e3:b7:97:73:aa:7e:ef:61:66:5e:31:34:87:37:
                    3e:6d:d9:a5:d9:be:ee:e5:0e:04:bd:a3:e9:0d:f3:
                    81:65:d7:45:ba:24:b8:d8:3b:0d:2a:32:36:9c:40:
                    05:95:d8:c1:91:9f:dc:0c:e0:ea:fe:b6:3b:01:1c:
                    01:d8:3d:3b:16:e1:10:5c:0a:00:d2:1a:68:44:54:
                    39:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BC:32:6A:AB:A3:00:3A:0E:C9:4E:38:24:92:D0:BE:ED:7E:AF:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dd889de-6ec0-3ef5-8435-d3c26b44e771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:1f:16:98:ce:74:af:a2:8b:c5:50:da:53:f1:40:85:9f:c5:
         1b:55:75:14:2e:7b:9f:f4:df:98:ea:3a:80:5d:e1:cd:5a:d4:
         51:b6:51:4f:37:0f:b7:0f:2b:61:96:26:29:db:f8:f4:d7:82:
         a9:0f:0c:f3:e1:5a:94:8b:96:07:44:f2:d4:99:ee:de:de:89:
         b4:18:aa:1d:54:cd:e8:26:44:51:e4:1b:9b:27:29:2b:64:9e:
         0d:14:ba:7f:aa:b0:b9:28:a6:05:bb:a0:bd:ba:dd:b0:67:a9:
         2a:cc:4f:a5:eb:f5:fb:07:0a:a2:2f:ed:31:fe:a5:47:dc:47:
         88:2f:6f:a4:94:9b:06:d2:17:36:2c:3a:8a:0c:54:e1:3b:5b:
         bc:0e:d0:34:a0:a8:a1:c6:bc:ff:18:95:f9:91:de:82:d8:e9:
         25:07:60:58:64:11:35:7d:88:d6:24:7a:8a:37:19:fb:76:eb:
         a1:28:dc:f8:77:3c:0f:14:fe:9a:6f:ab:6e:78:6d:5c:c3:b1:
         20:c5:23:a2:42:c3:bb:2d:77:b3:f6:3c:2d:31:fc:04:0d:76:
         1d:a4:c4:cd:0e:99:54:d5:b0:90:af:fd:68:44:7a:00:8b:c6:
         de:aa:1c:b6:0f:ee:d8:17:4a:4b:da:62:f9:bb:75:de:27:2b:
         d9:ea:ae:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:24:04 2025 by rpki-client