Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/050a946c-24d0-3b22-a9e8-2cea473cc4b5.roa
File:                     050a946c-24d0-3b22-a9e8-2cea473cc4b5.roa (raw, json)
Hash identifier:          T25+tLIA0tOJLT2qSmJZjNYX7bGHGzc0rd5SB5XQGQw=
Subject key identifier:   20:DB:85:B4:93:4B:8F:27:B7:32:6C:A2:95:E5:D6:2D:89:25:5B:FA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB18D126AC9F8921193B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/050a946c-24d0-3b22-a9e8-2cea473cc4b5.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396574
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:18:d1:26:ac:9f:89:21:19:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=567e8b3f-ace7-4714-aa10-df8cb69cfd87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:f1:6f:50:42:30:10:31:d3:e9:b2:1e:d6:
                    81:62:c8:f6:92:c9:e1:f4:fc:93:b6:c7:fb:41:84:
                    cd:6b:1e:99:06:81:d3:6f:fe:48:50:94:cb:0e:da:
                    10:dc:5d:d3:1d:63:3b:b1:8e:81:d2:b3:16:44:59:
                    22:2e:a8:35:b3:d3:95:63:51:02:b0:98:33:07:b5:
                    2e:a3:4b:97:ce:86:8a:fc:64:17:f9:58:8b:aa:0d:
                    f9:bb:6e:54:14:19:81:f9:6d:57:a7:a8:e9:7e:9b:
                    1d:0b:84:7e:d4:bf:09:16:b1:9c:1f:a6:59:f0:2a:
                    7a:49:2d:d3:01:5a:5f:d6:77:44:58:5a:4a:06:e4:
                    db:92:10:0c:ad:9c:9f:56:54:b2:24:d8:a2:49:67:
                    28:76:b5:1f:6e:b8:e5:c4:f6:32:9d:22:c4:42:80:
                    12:85:e8:33:2a:79:1a:07:0e:96:70:b4:97:83:12:
                    94:2d:a2:00:32:7e:b3:ce:2e:96:0f:ad:54:d0:0d:
                    ef:67:6e:f2:8e:26:2b:0e:c0:ab:a1:4c:14:7d:4a:
                    ff:fe:6f:ec:76:9b:52:ef:06:ba:82:1f:86:82:a9:
                    13:9e:78:90:9e:53:35:88:f7:85:0d:ec:d5:4a:ec:
                    a5:97:26:e2:b7:d7:07:d6:5c:8f:95:a7:c9:ed:02:
                    39:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DB:85:B4:93:4B:8F:27:B7:32:6C:A2:95:E5:D6:2D:89:25:5B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/050a946c-24d0-3b22-a9e8-2cea473cc4b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:86:3f:bb:3e:f8:99:11:85:cc:5f:bb:ad:82:25:45:1a:3f:
         69:e9:69:0c:9a:4b:64:57:a3:31:4d:21:f9:38:22:2d:16:0c:
         46:c2:6a:e2:aa:3f:52:9f:7d:6f:f0:38:cf:94:c5:a0:0d:c8:
         ce:b4:91:a0:ad:8e:ab:f1:19:69:22:21:26:40:9e:16:a1:44:
         45:9c:99:54:5c:9c:ff:9b:d4:99:50:95:08:42:95:85:ae:e9:
         ff:9d:8a:16:13:3c:93:97:6e:03:72:75:2a:e6:a6:e7:4d:00:
         43:f9:e9:a0:05:41:30:04:02:b6:1c:3b:ab:c2:9b:eb:90:7c:
         73:52:16:32:0c:91:72:19:c8:6f:a1:3b:60:fe:83:39:ab:59:
         f4:9e:67:aa:b6:30:92:7c:e4:89:90:ac:e5:8e:10:4a:6e:f6:
         45:eb:29:97:7b:77:e8:cc:82:f0:51:1a:5e:0c:b6:35:55:15:
         0a:61:81:65:8a:52:01:b4:da:f8:ac:39:67:81:d9:95:5d:45:
         7c:1c:f3:e2:c3:ea:c0:de:b7:c6:fa:c9:b8:6b:57:2c:0d:d7:
         0f:36:91:a3:92:b6:d5:65:66:7f:4c:aa:05:81:e6:c7:36:5d:
         2c:18:16:02:78:fe:fd:d3:77:05:eb:52:75:06:41:91:f2:41:
         01:03:bc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:15:17 2025 by rpki-client