Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31cdd9a9-842e-3bac-bb04-22b11009a763.roa
File:                     31cdd9a9-842e-3bac-bb04-22b11009a763.roa (raw, json)
Hash identifier:          R0nrAm17yZT16uFfFyhxBDFNBXuy2NtYLfGLloR3qkc=
Subject key identifier:   C8:97:C2:80:B4:CB:06:CC:36:66:AC:0E:A1:4A:99:F8:F5:E2:B5:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849A4BA25869BB309A959C9E840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31cdd9a9-842e-3bac-bb04-22b11009a763.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396599
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:25:86:9b:b3:09:a9:59:c9:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=e014f1ec-6935-4fe2-ab9c-ed31fa970b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:96:53:3a:9b:ef:47:b0:f8:3f:88:83:ba:
                    f1:a3:b2:08:a9:9f:50:30:a9:d9:49:e2:05:d9:97:
                    aa:a7:60:3f:65:61:42:7f:a0:c0:bb:42:af:85:d1:
                    c7:db:3b:1a:27:b5:28:4f:41:12:5d:3e:ff:b4:8e:
                    ed:9b:82:6e:a7:00:1a:a9:0c:3d:92:8d:ca:ab:e3:
                    13:09:39:bb:82:88:63:ff:a0:8a:2d:a0:66:ac:b8:
                    12:fd:7b:4f:2c:ce:48:48:ff:7c:62:4b:d7:15:20:
                    b5:24:42:85:26:69:9b:37:9c:82:8c:e9:c4:7f:e0:
                    05:78:c1:65:8c:9e:b5:0d:d0:ae:ee:e8:b1:ef:7f:
                    04:8e:5b:4c:09:d3:60:18:6c:97:a1:5a:64:d4:39:
                    f3:47:04:fa:f6:e5:b8:fe:27:0f:05:ef:0e:f9:4c:
                    ed:91:dc:ee:d2:db:54:e7:64:ef:98:02:46:6f:e5:
                    80:8b:72:76:48:0e:24:8c:61:84:c0:83:0f:49:d2:
                    33:6e:72:24:ef:b9:02:84:7b:37:8d:85:c4:c7:24:
                    67:45:df:9b:53:db:47:6b:8f:fd:6b:44:d4:69:94:
                    9f:92:6b:0e:ab:b5:fa:9a:80:12:2b:a1:70:43:61:
                    49:02:80:ad:bf:0d:b2:cd:65:fc:69:78:38:b6:46:
                    36:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:97:C2:80:B4:CB:06:CC:36:66:AC:0E:A1:4A:99:F8:F5:E2:B5:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31cdd9a9-842e-3bac-bb04-22b11009a763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:a6:34:f1:bf:73:ec:2a:30:86:8e:75:46:47:b1:18:85:1f:
         b5:fd:48:62:46:60:a1:c9:69:4c:89:3f:40:6d:c0:d0:0f:f3:
         ca:af:98:91:c3:d3:df:34:29:57:94:a4:6a:01:64:00:e7:a8:
         b5:46:dc:9c:ab:1e:5b:2e:b0:b1:cd:81:be:85:b0:ca:71:ac:
         21:9f:5f:7b:9e:53:7b:36:fd:92:01:e4:b3:70:37:95:63:6e:
         7d:f7:4c:12:72:ce:c4:68:36:d7:52:0d:2e:1f:fe:13:27:42:
         7e:6b:5a:ad:16:2b:32:ea:ba:05:94:c7:cc:86:be:ed:22:c2:
         6d:18:50:e9:e2:58:ea:e0:e2:5c:91:f8:21:61:c8:db:b0:05:
         21:57:cc:d5:73:9d:b6:05:d6:2b:4c:e3:57:52:3d:81:ce:b2:
         ab:a5:ca:07:1c:72:36:32:17:69:18:93:38:ae:c9:3e:5c:d1:
         19:69:e8:e9:16:d9:11:d7:37:1d:04:14:83:1e:79:7f:d9:77:
         08:5c:9b:15:8b:70:4a:44:ac:3d:98:08:bb:e7:2d:b6:39:34:
         df:e1:c2:78:66:7d:ff:0f:7b:2b:41:a7:4b:17:a4:0b:80:fc:
         c5:c3:d0:bf:27:fb:11:2f:ea:fa:59:e5:23:95:1c:84:0b:13:
         f6:19:d8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:40:27 2025 by rpki-client