Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34b405e2-4e8e-3fd4-afee-4b1e33dbffc7.roa
File:                     34b405e2-4e8e-3fd4-afee-4b1e33dbffc7.roa (raw, json)
Hash identifier:          iySg/6Ty08L8O33wlUASiP4YnNCmeziZwnHFC8hQMeo=
Subject key identifier:   55:86:92:C4:1D:E3:92:0D:75:30:E0:4E:F1:4E:F0:AF:B5:D3:58:06
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849A4BA2921C8092D31E1A2EA58
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34b405e2-4e8e-3fd4-afee-4b1e33dbffc7.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     397201
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:29:21:c8:09:2d:31:e1:a2:ea:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=524dc912-89e8-43cf-9a3e-cd9f4c30b2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cd:51:bc:f8:6c:31:46:84:e0:16:b8:d0:a0:
                    81:16:a8:7c:20:d5:f3:cd:c7:23:b3:92:85:9d:1c:
                    ad:25:01:ff:5d:99:ef:e1:12:7f:6d:2d:cd:98:a5:
                    0d:d3:a8:1e:6e:00:4c:4d:a4:35:6d:8a:c4:ce:67:
                    c8:e5:33:4c:a9:7e:99:dd:d0:f8:62:ed:58:08:29:
                    b9:80:57:ea:a2:4e:07:fb:ed:df:3b:b0:fb:f7:d0:
                    d2:69:c8:66:bb:0a:c4:6d:e2:2f:e4:73:85:ed:a6:
                    2f:0a:c0:85:7e:fc:a8:0f:bd:ac:f3:1f:09:f5:80:
                    cf:84:84:3b:bd:b1:3c:18:55:6d:a8:15:c9:da:8b:
                    12:e0:58:bc:c4:6f:0f:4e:00:97:c9:2c:c6:d0:14:
                    b2:e2:38:d0:e1:e3:d3:1a:84:3d:a8:8b:03:04:2c:
                    ce:18:0f:a5:39:8f:b6:aa:cb:f6:bb:8e:87:da:a0:
                    7c:8c:b1:50:77:13:1d:18:5d:bb:c8:ab:9c:49:8d:
                    8f:00:db:9c:96:24:0a:cc:6e:7f:69:29:65:0d:d1:
                    56:1f:aa:ea:b1:ec:b6:de:0f:c9:e9:c8:22:de:27:
                    e0:cf:a7:9f:48:0f:48:d1:aa:6d:94:0d:cc:5a:d1:
                    d0:54:f5:ef:ab:17:86:21:ad:bc:2a:81:91:73:a8:
                    6f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:86:92:C4:1D:E3:92:0D:75:30:E0:4E:F1:4E:F0:AF:B5:D3:58:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34b405e2-4e8e-3fd4-afee-4b1e33dbffc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:62:a4:7d:cd:0c:23:e7:f3:c8:62:a9:79:68:c1:64:02:f0:
         41:f6:93:d5:4f:d3:55:98:48:30:e4:d8:ae:af:d2:16:f9:02:
         00:37:79:09:bf:b4:33:71:e8:7d:c5:fa:7f:54:bc:a6:18:b5:
         a2:5d:52:da:00:f7:8f:dd:64:b1:8b:3e:45:25:e4:1e:fc:a4:
         21:8e:b3:70:e9:c3:3f:dd:0e:26:51:25:e8:75:6f:5e:26:7d:
         88:8b:ca:f2:b8:bd:3e:26:b0:da:33:80:88:67:da:3e:2b:ae:
         81:5b:1a:22:b9:a1:e5:c0:33:d5:33:e6:ca:a5:5a:ca:ed:a9:
         64:57:71:31:c9:10:d9:5b:96:04:06:5c:49:0e:e2:98:2f:d1:
         2b:bc:19:dc:95:06:e7:2c:63:bb:10:9c:cc:08:bf:13:82:3b:
         a1:88:ca:ad:30:47:f2:a0:6e:7f:ec:fe:46:55:33:ad:75:5b:
         df:2d:40:74:a4:e6:ca:d4:cf:25:be:bd:1b:c4:fa:ff:e9:15:
         0c:4e:65:81:eb:81:59:a2:b1:6f:2d:3f:e1:32:69:4c:3f:00:
         a0:3f:32:f3:41:96:d3:e5:f7:61:c2:51:b1:1d:a8:c5:ec:ac:
         10:4e:1c:18:18:45:6c:28:bd:a2:96:1d:9b:7a:8b:d9:e4:3d:
         68:a7:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:20:22 2025 by rpki-client