Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c7002d-2986-3c8f-af76-6b2a7a777de8.roa
File:                     c1c7002d-2986-3c8f-af76-6b2a7a777de8.roa (raw, json)
Hash identifier:          DSZFZjh18jsAunsxVImn9jQtutJI9CphauXoWsr62hw=
Subject key identifier:   16:5B:D4:53:E9:EE:DA:14:3B:FC:44:7F:B1:25:CF:48:B9:95:80:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496FAEF672585A0A74EB7D9380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c7002d-2986-3c8f-af76-6b2a7a777de8.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     396571
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:ae:f6:72:58:5a:0a:74:eb:7d:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=f999337a-0ec9-4bc9-9855-0371b87054b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:16:5f:09:43:a0:8b:e5:4f:9b:e3:c0:3f:
                    3c:10:77:e5:7a:c6:00:a3:94:96:9e:0c:2c:2d:79:
                    06:46:e4:73:cf:b8:37:68:80:38:41:bb:7f:d1:3d:
                    45:b3:62:bb:70:23:03:96:09:51:a4:55:75:89:89:
                    09:a0:24:57:b6:8c:66:ed:e4:63:81:49:da:45:62:
                    00:21:c4:a4:ef:61:35:0c:50:1a:36:31:33:fe:77:
                    c7:c2:1d:9d:40:84:99:a1:b7:57:31:01:bd:4b:36:
                    b8:7b:01:59:e5:a4:93:33:92:a7:04:fc:6f:29:80:
                    df:cc:2a:fa:b8:d4:a7:af:c5:0d:c2:a2:94:91:47:
                    8e:bc:2c:04:32:9f:9f:ad:01:02:b2:5a:4a:ad:92:
                    2b:84:ef:19:a0:2f:18:51:07:53:7f:77:2b:9d:04:
                    68:51:ef:48:e3:e6:43:12:18:08:82:c2:78:5f:78:
                    be:7e:12:c1:6a:2a:b1:f6:18:d4:2f:65:54:69:d4:
                    35:7b:b0:ab:42:e7:53:0f:88:1d:8e:11:8d:da:58:
                    40:32:2d:a9:8c:54:a8:b0:ec:ae:11:b5:11:9b:08:
                    48:0d:57:d0:59:05:18:31:7d:0f:5b:6a:5b:65:10:
                    78:26:14:67:c8:0e:02:d3:d1:10:26:42:bd:69:d0:
                    43:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5B:D4:53:E9:EE:DA:14:3B:FC:44:7F:B1:25:CF:48:B9:95:80:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c7002d-2986-3c8f-af76-6b2a7a777de8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:76:ec:86:59:55:6c:54:e8:79:6b:e7:d6:d2:95:1d:ed:5b:
         60:92:63:62:2c:90:f2:1d:26:bf:61:d1:64:4a:5a:5b:05:69:
         f8:ca:d0:0e:a4:1a:da:36:04:79:24:44:e4:79:7d:9f:16:fc:
         44:01:36:d4:95:d8:bb:a0:31:25:0a:8c:3b:e4:51:85:01:18:
         58:f1:e3:dc:ae:b0:75:6e:94:50:9d:b5:70:f9:a5:51:bd:66:
         21:2e:44:1a:92:db:42:a1:32:42:e3:7a:72:fd:b4:fa:be:06:
         2e:50:01:43:d8:d8:29:21:06:0e:ab:86:a9:29:06:35:0a:18:
         be:2a:e5:82:0b:c3:f5:37:e4:51:e7:71:f9:25:2e:0e:a5:ba:
         10:42:d6:1c:ea:24:be:97:ef:4e:fd:cf:da:59:ab:ff:d2:13:
         31:79:25:4f:fb:6e:58:b1:91:fe:3c:5e:49:ba:3b:d1:a0:5f:
         f2:3f:c3:e9:2a:d2:f0:a2:c7:1b:a2:69:10:3b:f0:81:fd:56:
         1f:56:84:18:8c:7f:c3:c1:32:2d:a3:51:ad:78:ea:00:c5:86:
         ce:c7:f7:c9:3d:7b:1c:20:e8:ab:69:66:5a:a8:4c:f6:5b:b6:
         fb:8e:42:02:81:f8:3c:e2:87:6e:ea:c2:41:48:75:c8:85:65:
         0a:3d:3b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:23:16 2025 by rpki-client