Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73cdd3fc-b079-35a5-92c8-945977125d98.roa
File:                     73cdd3fc-b079-35a5-92c8-945977125d98.roa (raw, json)
Hash identifier:          nlJOELdR6+c7xG/KLRjlcdAm53LfvdfJsTO6ZUGDdBo=
Subject key identifier:   0F:BB:EE:6F:A2:92:AA:DC:DF:E2:AE:55:54:CF:25:76:40:7E:43:62
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849A4BA26E21E70E6CF1F27E100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73cdd3fc-b079-35a5-92c8-945977125d98.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396573
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:26:e2:1e:70:e6:cf:1f:27:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=23fa05a6-205c-4606-ae8b-fcb10af8e8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:57:55:3c:1b:8c:cc:1f:d7:75:14:f6:5f:04:
                    11:ec:0b:f8:6a:31:f0:6c:ca:f8:1f:f1:03:50:18:
                    c8:c8:da:76:7a:58:5b:c1:82:a0:53:5b:ea:d2:ab:
                    c9:60:e1:13:a8:82:79:9e:46:bf:78:e0:c1:01:bb:
                    4f:0a:10:93:32:fd:42:47:f0:81:77:f4:cd:09:e7:
                    61:cc:39:af:1f:ff:77:52:94:58:b7:ed:06:05:ba:
                    39:54:45:3d:98:a2:39:7c:8b:64:bf:f4:d6:b9:60:
                    5b:7c:4a:a1:7b:b7:63:b3:e2:c3:2a:fe:23:34:5a:
                    94:e6:98:b8:a6:e9:fc:40:b1:07:f1:ef:bb:58:da:
                    1c:dc:6c:3b:b8:75:12:9e:58:fc:f2:c5:2a:72:99:
                    80:07:e2:43:45:d6:11:4f:78:5a:b2:95:9c:63:c1:
                    22:61:c7:8d:ab:48:15:f5:4e:8c:cb:ce:7e:e1:9b:
                    51:90:46:36:a2:8a:54:5b:e1:69:d6:c8:a8:4b:6d:
                    22:fc:77:a6:52:b7:66:4d:c6:f7:07:73:3e:8e:b8:
                    e9:45:50:14:f4:4d:0d:e2:7e:49:19:17:9c:2c:81:
                    ad:5a:5d:e1:70:6a:81:5d:b2:42:f2:97:95:e6:7c:
                    d1:04:1e:f8:20:a5:78:11:b5:08:12:13:1a:ba:1b:
                    82:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BB:EE:6F:A2:92:AA:DC:DF:E2:AE:55:54:CF:25:76:40:7E:43:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73cdd3fc-b079-35a5-92c8-945977125d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:c9:0f:20:98:f3:ff:8b:4b:86:9e:67:7c:96:15:69:0c:9f:
         d7:a3:cc:fb:1d:0b:7b:21:79:bb:38:f0:4c:78:7f:fa:3d:c4:
         83:91:dd:ae:00:d2:d5:7b:72:90:3f:b3:d7:a5:1b:f5:bd:b9:
         25:ff:35:8f:b9:1d:0b:ca:a4:e9:53:e4:1b:d3:a3:18:38:54:
         30:16:3f:9e:85:60:11:d0:3a:3c:c2:fd:ed:12:fc:f7:3a:71:
         49:ed:7f:b2:f5:44:19:ab:c2:71:f0:9a:28:57:0c:39:0c:11:
         42:45:e8:2e:3e:16:56:18:42:c6:32:90:73:04:ed:35:bc:ee:
         c7:19:e7:4d:8f:a7:87:2b:fc:83:0b:23:dc:77:73:27:96:8a:
         dd:fc:25:db:f7:6a:c3:14:83:67:8b:92:7e:44:a0:a0:f8:77:
         95:f7:44:04:50:b9:c9:0b:a7:e7:51:ed:53:91:80:94:e9:51:
         eb:f0:40:f6:dc:0f:ad:f1:34:73:26:ca:40:b7:73:b6:db:16:
         04:0a:ec:75:93:8d:ca:cb:cc:d6:03:9a:fc:42:11:8a:5d:b1:
         68:8b:f8:06:22:1e:d2:b4:1d:81:7b:1d:0a:1d:24:dc:7f:ee:
         7a:22:54:00:02:7c:5c:0d:94:89:03:32:e4:26:90:c7:0d:53:
         e2:fb:01:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:18:54 2025 by rpki-client