Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83eac1cd-6ac8-3ad7-9211-129def9292f2.roa
File:                     83eac1cd-6ac8-3ad7-9211-129def9292f2.roa (raw, json)
Hash identifier:          lEZyJXeTnp2rutHyTE2JnCPe3P61e1yp3eJCkG/Mveg=
Subject key identifier:   55:FC:6F:29:41:57:F3:5E:01:00:95:81:BD:49:0C:6A:91:32:DC:DD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E692F68F60CECA140DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83eac1cd-6ac8-3ad7-9211-129def9292f2.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     36625
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e6:92:f6:8f:60:ce:ca:14:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=76f4a2a9-05ca-484f-b8b7-63619f20dde0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b0:f5:a6:db:c7:b6:1a:d8:e2:48:20:6f:8f:
                    49:f6:5c:3b:de:2d:79:c5:77:7a:d1:9b:b3:7f:d7:
                    77:63:69:2f:2a:15:2a:f4:d1:e4:8b:04:5a:28:39:
                    ba:0f:cd:3c:a7:33:0d:00:44:3b:5a:ad:52:5d:fc:
                    5f:d9:a4:4b:ce:a0:28:01:64:ec:2c:37:b4:ae:7f:
                    bd:9c:0a:60:a8:1d:19:cb:e9:1a:f0:25:10:c2:80:
                    bd:bd:18:7d:77:de:9a:6a:62:dc:d6:0c:41:4e:5e:
                    86:56:e9:46:3b:83:e5:8e:ff:b7:e3:b3:3e:c9:e8:
                    96:27:1f:63:ce:97:73:63:5c:95:3f:e1:24:a4:52:
                    f2:f0:83:57:79:45:8d:c3:74:13:cf:38:0a:53:04:
                    d7:16:f5:be:86:6d:74:82:9d:15:12:60:13:8a:4f:
                    0d:43:c6:c0:a6:e3:85:b7:b6:d2:37:33:32:8f:a7:
                    df:f4:51:b9:76:ca:51:17:7b:54:f6:dd:cf:82:bf:
                    15:99:50:d1:53:60:98:e5:06:ca:11:93:62:89:f2:
                    c3:cf:ad:a9:82:84:62:06:2d:9d:14:61:84:79:2d:
                    54:2d:53:ce:eb:6c:b3:1d:3b:62:4b:2b:47:dd:20:
                    c2:ff:7c:9f:42:bb:2d:87:eb:cb:ac:9c:85:f5:6f:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FC:6F:29:41:57:F3:5E:01:00:95:81:BD:49:0C:6A:91:32:DC:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83eac1cd-6ac8-3ad7-9211-129def9292f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:27:87:3f:81:33:41:29:4c:d9:f3:cc:99:cd:2a:fe:ce:36:
         b2:df:6e:a3:9c:10:29:01:b7:e0:f0:6e:e7:b9:ea:be:2b:25:
         39:3b:dd:29:da:f9:c9:5e:5b:c3:0c:d3:d8:ef:06:c0:13:56:
         2a:3b:d0:9d:f5:24:8c:31:f2:af:0f:79:0c:c9:90:a3:63:09:
         62:19:73:78:25:3e:d4:78:57:4b:b1:d7:e9:ac:a5:6b:58:96:
         3b:0e:81:bc:cd:b9:17:84:13:70:b2:a2:b5:43:19:dd:6b:7c:
         ec:03:50:14:65:23:ea:ee:ce:26:df:0b:e0:bc:32:bb:76:5d:
         50:26:5c:b8:de:1e:2d:c4:c3:92:d6:80:36:8c:9c:88:dc:36:
         4a:3c:a5:7e:fb:49:a8:98:c4:e7:f7:81:38:75:46:67:06:b7:
         89:d0:9d:bb:d4:72:93:1f:b1:9a:66:5e:e3:ff:36:fb:d4:d2:
         5c:ea:fd:a1:bf:2b:e4:b7:d1:8f:74:2f:d4:b8:cc:b4:35:8e:
         2e:fb:0a:2c:47:0f:c1:5a:62:f7:21:59:a4:7e:83:36:78:11:
         cd:f2:66:b4:c9:26:b2:99:96:68:91:f0:bf:cd:f7:34:26:af:
         87:1c:28:ae:f8:70:6c:d1:b7:c9:41:61:29:60:50:c1:77:ac:
         fb:8e:fc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:17:33 2025 by rpki-client