Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/061ae4b5-4682-35ff-8956-308c12b39535.roa
File:                     061ae4b5-4682-35ff-8956-308c12b39535.roa (raw, json)
Hash identifier:          upUhndVZUj7pBKITW/DwAJXb02mQ0tpy6oMbCvBXtdQ=
Subject key identifier:   0F:D0:63:38:E9:6B:9A:B5:32:B8:0C:9C:8B:64:9A:1F:BD:65:BB:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB06C4D1AF7A190A2205C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/061ae4b5-4682-35ff-8956-308c12b39535.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396592
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:06:c4:d1:af:7a:19:0a:22:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=28f60a7e-671c-4277-93bf-fb28ecdba3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:da:3a:95:ff:d1:91:80:84:49:15:05:05:
                    c3:7e:55:d0:7c:e0:48:5b:d0:8d:b0:7e:f0:e2:ef:
                    a3:dc:a8:b2:a9:ae:df:22:e3:68:b0:f1:79:51:61:
                    b1:ed:3a:49:33:69:21:8b:42:75:4b:2c:a6:1f:1f:
                    c9:2a:4f:98:19:a7:31:03:35:19:86:4b:d1:84:2f:
                    1d:68:00:ed:82:e1:6b:27:32:5b:4c:b6:17:2b:2f:
                    ab:94:36:94:bf:f9:0e:fb:a1:9d:0c:c4:51:d4:b9:
                    6c:a3:7e:eb:49:b7:fa:c4:5a:2c:fc:dc:31:2c:19:
                    6e:be:2d:39:7f:cb:1c:bb:4e:76:9e:a8:fc:9c:fb:
                    80:b3:a3:43:54:dd:b4:65:c9:6f:9b:40:54:49:02:
                    b8:be:80:55:12:af:1a:36:b6:51:79:e7:80:9f:43:
                    bf:2e:11:25:1d:95:f9:ce:ad:33:35:fa:c5:fb:1b:
                    bd:fd:e4:8f:05:23:9a:b3:f8:4c:d3:b2:d2:a8:a1:
                    7d:4d:f7:93:4c:e5:03:23:d2:dd:47:64:3b:6a:dc:
                    d9:af:e6:bd:ce:4d:bb:c3:7b:58:a6:db:f4:b9:db:
                    74:7a:0c:bb:23:79:15:23:ff:04:f0:c7:a2:18:77:
                    75:18:4e:61:9f:68:60:a9:fb:d8:39:21:8b:34:34:
                    fd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D0:63:38:E9:6B:9A:B5:32:B8:0C:9C:8B:64:9A:1F:BD:65:BB:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/061ae4b5-4682-35ff-8956-308c12b39535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:44:67:df:ab:40:d0:28:79:23:d3:08:75:d0:3c:db:9a:b7:
         14:34:ca:4b:9a:5a:4d:af:ce:a2:e8:fd:f4:0f:30:a2:57:65:
         0a:57:a0:e4:46:dd:62:de:da:fa:d7:41:e2:dd:32:6e:97:9d:
         0c:97:04:62:08:f4:4f:21:fd:84:ca:22:9b:d4:53:57:09:b8:
         9c:d5:6c:d0:56:48:90:08:4c:97:41:57:ac:e8:c2:e7:f8:bb:
         6e:46:b5:42:b8:ee:d4:02:5e:2e:35:73:30:45:d5:65:76:95:
         78:41:d6:6e:57:98:c0:b8:6b:8e:1d:f7:95:29:32:f7:20:b1:
         4a:83:d9:0f:51:54:e5:90:28:8b:f8:72:d4:86:c8:71:f9:8f:
         f1:97:77:f4:ed:b9:91:5e:a8:c3:30:e6:1e:8b:d8:7a:c4:26:
         0d:a9:ab:52:2a:04:15:09:7f:c4:71:6e:33:f6:ba:f5:a8:e6:
         21:80:24:68:33:92:3f:e6:83:35:2f:f8:47:28:a1:f2:05:6d:
         b7:18:3d:41:37:8f:66:7c:0b:16:42:ae:e7:af:2a:f5:c7:02:
         84:7d:7f:e5:85:9b:a4:ea:35:0d:5b:75:2f:b2:cc:11:6d:a2:
         8e:7f:cc:e0:b5:f5:9b:d3:0c:c9:c4:37:66:8c:b6:3a:51:77:
         4f:b1:67:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:46:36 2025 by rpki-client