Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e242ff9-880d-33ee-aa02-4679b5cf5fa5.roa
File:                     9e242ff9-880d-33ee-aa02-4679b5cf5fa5.roa (raw, json)
Hash identifier:          a9BMeldEaiu+BzZeRAthcxSgLPCG5Y17QE+dDzYuoCs=
Subject key identifier:   C0:25:2E:FB:3E:14:7D:64:30:43:43:54:9C:48:05:5A:13:B8:D7:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849A4BA279958C844D6DFB97D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e242ff9-880d-33ee-aa02-4679b5cf5fa5.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     397195
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:27:99:58:c8:44:d6:df:b9:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=5ac3abd6-5176-45bc-bc94-63fe2bd096c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b0:06:75:58:a1:3d:c1:38:fc:2d:4f:21:4f:
                    8b:42:3b:5a:49:d1:48:3e:0d:67:aa:1f:c7:00:d7:
                    ad:ba:d6:cf:59:c5:79:4a:b4:92:2d:25:16:9c:31:
                    3f:cf:34:ed:94:45:24:ed:c4:eb:35:af:f2:a1:83:
                    76:4f:7f:23:7b:c6:bf:25:4d:1c:65:7f:01:98:12:
                    64:c5:4e:bb:af:a2:67:c2:aa:b5:b1:47:fe:47:36:
                    22:5a:19:44:c5:03:30:c9:d9:ce:f7:93:3f:46:42:
                    4e:f3:f3:8b:d3:87:9c:b7:da:fa:53:4d:25:bc:89:
                    71:b2:a6:83:5d:73:0b:b5:9b:a2:76:2d:aa:86:ae:
                    4c:26:4f:64:80:4b:7f:15:ba:8f:82:e1:87:af:dd:
                    df:91:26:c2:3f:d8:cd:b4:fb:f6:83:86:ea:3d:d0:
                    22:f4:a9:9f:d6:c7:ee:62:fc:38:6e:f7:d0:64:94:
                    8e:92:99:02:77:e4:f3:cc:d0:f1:2b:dc:a6:9d:c7:
                    af:bb:d2:f3:83:45:67:3d:07:04:67:82:48:64:8e:
                    2a:63:b0:a6:e6:46:ef:38:99:1f:f9:f7:28:f5:83:
                    f8:05:47:9a:17:ad:ae:fe:3e:f0:27:47:52:24:ab:
                    3e:65:72:73:d3:38:39:18:36:f7:f7:9b:67:c0:67:
                    2a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:25:2E:FB:3E:14:7D:64:30:43:43:54:9C:48:05:5A:13:B8:D7:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e242ff9-880d-33ee-aa02-4679b5cf5fa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:76:b5:35:86:ac:ce:35:5b:4f:76:8a:11:c7:ab:66:c6:05:
         e1:6e:ff:48:1a:30:8a:5c:59:56:08:49:8f:9f:64:09:4b:27:
         88:15:58:80:23:c6:b5:e9:36:b7:7e:23:d6:4d:3b:34:fe:39:
         f7:18:fd:78:4d:79:62:a0:3a:00:c2:7e:7a:88:cf:17:8b:d7:
         cc:d4:31:15:51:49:ee:23:8b:fc:d8:2c:f7:94:b2:03:23:b2:
         4c:78:66:af:38:b8:df:70:35:1a:57:1a:ca:08:dc:13:12:58:
         50:c8:33:44:3a:bd:2b:b0:6d:e0:6f:7d:ea:f9:f8:df:ed:74:
         76:af:a8:a8:c1:8f:ec:ea:c7:c6:7b:ae:9d:47:be:a2:ef:12:
         b0:1f:ad:ad:c4:34:d3:12:c7:cd:16:90:86:6a:52:e6:3e:49:
         06:70:5f:88:13:7b:4c:53:4a:c4:44:27:f0:3f:7b:6f:af:3f:
         6d:4d:15:c0:49:4c:22:1d:42:c3:4b:8a:d5:69:55:9c:f7:8d:
         00:5a:90:59:2d:0e:c1:c7:25:23:1a:4f:c0:2f:64:0c:3d:68:
         5f:c1:25:7c:2c:5c:c2:c8:b2:d6:8b:2c:f7:af:ab:b4:c7:c9:
         5e:79:46:94:6d:74:22:65:d7:26:76:37:f4:bf:ab:46:52:ff:
         ef:59:26:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:14:44 2025 by rpki-client