Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa
File:                     9f57b5fe-9a49-347f-99a9-78749563a00a.roa (raw, json)
Hash identifier:          ij0Np4eChklm1QnjuxlJgg/QwqM9azY7CkxSgOSANdA=
Subject key identifier:   C9:5D:89:8A:A0:EB:58:BA:FF:64:B7:D9:43:27:AC:AF:EF:C2:5F:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497AD9CB7EFE118A7A18A73600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     396611
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:cb:7e:fe:11:8a:7a:18:a7:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=6c0c6759-be59-4f76-a221-b32e50342c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:04:9e:20:cc:03:b7:2a:a4:2a:88:e6:a1:
                    6a:09:e2:ea:de:af:a3:13:e2:6a:47:b1:5e:32:76:
                    22:eb:3a:ed:66:42:bf:fb:a3:ab:ec:e7:9e:62:b2:
                    e9:b9:24:8a:a1:53:f6:05:ba:6e:71:23:2a:79:97:
                    95:b6:4e:2f:ce:8d:d8:3d:72:5e:5b:61:5b:2e:0b:
                    6d:f1:2b:c6:86:7b:9d:38:ea:d5:1c:ac:35:69:21:
                    76:26:db:3f:cd:f9:1d:65:a7:a5:1f:e2:9e:6a:24:
                    20:f4:e1:bd:0b:47:c6:2e:84:a9:12:4c:58:07:da:
                    cd:bf:90:bf:ce:62:ed:95:2f:5a:84:c1:28:d7:40:
                    04:60:9a:7b:09:94:75:cd:6b:a8:23:d8:e3:c1:01:
                    dc:19:0a:6f:b8:7d:89:38:35:4c:3e:a5:89:68:79:
                    37:02:00:42:eb:70:7c:ca:1b:64:10:c2:76:3e:a9:
                    c5:3b:04:25:b8:bd:8c:f6:8d:20:87:e8:ee:c8:62:
                    d2:53:82:2a:e1:b5:2f:0b:2a:26:fe:f8:ff:98:11:
                    80:58:e3:2a:bc:f2:71:83:f8:3f:a5:ad:ac:2d:fe:
                    99:d6:b1:16:cf:b1:cd:77:dc:07:d4:5e:81:c1:b4:
                    bd:7e:8c:be:e3:28:b3:c5:70:d9:7c:1e:43:b3:20:
                    a8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5D:89:8A:A0:EB:58:BA:FF:64:B7:D9:43:27:AC:AF:EF:C2:5F:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:fc:70:0f:52:42:c1:f7:ec:c2:08:2c:f8:3f:c2:30:82:03:
         12:28:fa:11:c0:cb:87:48:7b:3a:d2:2f:2d:3e:90:4b:79:a3:
         6a:b1:7a:30:91:7b:af:fd:92:d6:8e:c6:eb:e2:21:4a:63:38:
         3d:29:16:1e:d8:f6:77:cf:2b:a8:41:cb:c4:8e:fb:0d:c2:2e:
         05:14:3d:39:1c:57:fe:ef:f4:2c:97:1e:2a:52:f7:af:be:b6:
         2b:90:db:76:4b:95:7f:7c:27:41:d8:69:42:54:ab:6c:6a:84:
         41:22:af:ca:08:32:0a:6c:ad:da:8c:00:85:a7:5e:9c:47:07:
         71:9a:54:62:fb:82:52:f0:04:7d:b0:63:f7:d7:78:82:a0:83:
         b1:3a:da:99:6c:b9:95:4e:ff:62:70:32:1d:3e:49:9a:29:3d:
         b3:b1:19:a3:7a:8b:54:5b:f4:2b:ed:82:c3:d5:4a:e0:6e:6e:
         cb:4f:2a:65:c1:94:ef:47:8b:1a:b1:64:32:09:08:48:0a:61:
         72:6b:dd:85:4c:36:19:0f:5d:d9:eb:77:1e:46:8c:19:1a:24:
         ee:1c:e3:e0:f6:00:a9:71:60:a9:bc:65:02:5c:6b:a1:35:96:
         c3:3b:e4:0f:53:b8:81:ec:47:34:7a:14:04:18:55:53:6a:c5:
         a3:be:21:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:25:44 2025 by rpki-client