Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3288883c-66bd-3a8e-a7ff-6e5cad79253e.roa
File:                     3288883c-66bd-3a8e-a7ff-6e5cad79253e.roa (raw, json)
Hash identifier:          N4FjcBbWw1fPdfnQsG44a/gFykCBqbYVVaL93s0GZPg=
Subject key identifier:   3E:0B:ED:E1:63:2D:2F:FE:61:FE:A6:56:18:0A:85:57:64:53:AD:16
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849A4BA24D66D476760F4EFCB40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3288883c-66bd-3a8e-a7ff-6e5cad79253e.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     397205
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:24:d6:6d:47:67:60:f4:ef:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=e4d2701b-545a-49b1-abf6-b6cd7a36d051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8d:1c:c1:39:7b:99:1d:59:ff:da:2c:be:90:
                    58:d8:4e:12:72:0b:96:f2:65:7f:d9:e4:ed:3f:ea:
                    85:88:ad:6d:77:50:a6:bf:f5:a8:02:52:f5:b7:09:
                    11:e8:1d:29:50:19:c9:6a:70:ef:7c:47:4e:91:4e:
                    53:01:ae:1f:78:e0:95:2b:67:01:26:b8:e0:8a:25:
                    07:4a:0a:27:d8:8d:37:fb:6e:eb:21:33:ce:fc:4f:
                    aa:ab:7f:cf:be:51:5c:87:d2:4d:a5:df:c5:46:ef:
                    3a:08:e2:5a:0f:c8:d2:90:62:d7:c3:c7:11:2a:0f:
                    14:63:5b:5c:6a:0b:35:88:24:3f:4e:6e:52:58:41:
                    77:34:c0:53:f1:5d:58:be:c5:85:69:dd:d1:5d:fe:
                    8d:6e:57:cd:94:bd:84:78:7f:59:b4:76:3c:86:b5:
                    65:e9:86:f9:90:a7:5f:68:a1:0a:80:ab:6d:22:a1:
                    2f:d6:fe:28:99:ac:54:32:29:c7:c2:97:47:29:ea:
                    23:c9:aa:e2:bd:c7:0e:ba:47:be:3a:5d:dd:ce:00:
                    03:b7:16:dd:27:a9:2d:33:21:d8:ff:9c:b0:09:ea:
                    2e:da:2d:58:7d:ed:d0:d7:02:c7:ed:33:47:f5:1b:
                    1e:e1:ff:85:0e:55:3d:8f:75:f6:f2:82:75:88:40:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0B:ED:E1:63:2D:2F:FE:61:FE:A6:56:18:0A:85:57:64:53:AD:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3288883c-66bd-3a8e-a7ff-6e5cad79253e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:90:63:8f:a7:5d:82:d7:57:98:5c:d9:09:67:ea:e6:87:7a:
         04:dc:a3:d2:b5:c9:0b:0b:ed:09:ca:6f:16:fb:93:e1:52:a1:
         0a:ae:cb:75:13:da:f6:82:f1:37:49:31:67:4c:c9:27:a3:dd:
         e6:96:40:dd:35:0e:85:e4:d9:d6:52:6a:2a:fc:8b:04:88:dc:
         45:5a:07:4a:8e:0b:bb:c3:d6:81:87:41:2f:cc:bf:32:5d:1c:
         35:88:f7:1f:b3:96:3f:26:95:3a:3d:10:3c:aa:45:ca:5c:54:
         f9:93:a2:91:dc:4a:9f:f7:aa:c7:be:7a:81:7a:c9:26:ba:2f:
         d0:e1:b1:74:27:b9:d5:9b:22:73:a7:08:45:0f:42:34:8b:ac:
         cf:5a:78:fd:19:49:66:51:44:8b:36:9f:b0:c5:0b:9c:d3:6b:
         70:2e:e5:e5:7b:58:bd:45:38:7c:62:17:48:be:28:e4:36:a1:
         64:f8:4b:98:99:97:a9:aa:a8:30:ee:c2:06:1f:fd:9f:ff:a3:
         1d:27:38:6d:de:20:43:9d:cf:22:eb:1c:c2:59:eb:6b:79:3a:
         41:1b:b9:b2:5f:be:ed:96:3c:51:ae:87:e9:f1:c8:2c:8c:ea:
         90:11:18:e9:71:cf:0d:5e:05:64:44:5f:86:b6:b4:1e:d6:2e:
         16:38:cc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:27:44 2025 by rpki-client