Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09285e1d-b751-32e7-bb52-6503caf59b15.roa
File:                     09285e1d-b751-32e7-bb52-6503caf59b15.roa (raw, json)
Hash identifier:          4hrVvSdLMEm3os5F3s5Od4r4uDqWJVPotDKKzLmTvIo=
Subject key identifier:   F7:9A:1A:6A:0D:B4:0B:F9:45:75:F8:B8:62:92:23:D1:3F:4F:C1:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F7153F64A549F333E4FD8480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09285e1d-b751-32e7-bb52-6503caf59b15.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     397201
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:3f:64:a5:49:f3:33:e4:fd:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=b3953cc3-07f0-4c72-b3fa-cd9689c19d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:74:1b:96:19:67:d7:ff:73:ca:82:e1:db:bc:
                    e3:10:e6:f4:37:e8:5d:30:29:6e:b5:15:59:f5:90:
                    e5:69:f8:1c:9c:bd:13:a9:28:f0:db:47:8f:7e:e3:
                    96:25:cd:a1:08:b3:06:47:f1:aa:e3:87:47:63:87:
                    86:55:b3:a4:86:99:e5:a3:ec:8d:c1:0d:a1:89:0e:
                    da:4c:ad:30:03:5f:33:b7:3f:20:8c:12:c7:01:49:
                    51:e2:cd:1b:bd:98:f1:38:69:a2:b5:57:ed:4f:ac:
                    5c:69:a3:2e:18:35:13:cd:db:de:5b:ea:70:23:c4:
                    3b:21:6d:a8:83:da:85:88:c8:84:e0:f6:05:cc:30:
                    4a:ef:50:fc:93:f0:11:1d:f8:eb:cd:86:20:f5:3d:
                    9e:9b:a6:27:3e:04:6c:99:58:44:f2:4f:9c:1c:07:
                    a2:49:a0:6b:6a:cb:71:b3:c1:53:1e:a5:83:6b:af:
                    4e:21:bf:72:7d:ce:24:c6:31:31:9a:a5:72:cc:9c:
                    39:6a:7b:9a:2a:19:24:b6:95:b3:88:76:67:0a:27:
                    4d:3e:e9:da:a6:d7:b3:4f:74:d5:26:15:b7:ce:a4:
                    8a:0b:88:fb:4e:03:ff:83:2e:6b:2c:db:fe:d6:ae:
                    3c:fc:71:b5:9d:be:ff:88:bf:47:14:ce:d0:4a:3c:
                    0b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9A:1A:6A:0D:B4:0B:F9:45:75:F8:B8:62:92:23:D1:3F:4F:C1:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09285e1d-b751-32e7-bb52-6503caf59b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:32:6a:04:09:fb:8b:34:f0:02:4c:ea:bb:7b:5c:7e:6e:b2:
         f9:67:12:90:49:d7:7f:8c:67:e7:2d:ee:77:ae:09:75:fd:1f:
         88:0c:f2:6c:a3:c3:47:bb:88:07:6b:5b:21:b2:90:50:c1:71:
         52:3c:21:98:e5:8e:5b:82:f4:da:75:5a:f7:4f:1e:2a:33:56:
         23:c0:6c:af:1f:8a:75:97:1b:c1:9a:b9:2a:f9:76:e9:3d:8b:
         dd:ba:e6:53:0f:41:6e:94:33:0d:93:3d:4d:1c:69:ba:40:27:
         b5:0d:a8:5f:ab:f9:93:a4:7c:28:57:51:c9:18:da:ce:6b:e7:
         94:04:78:ab:47:fe:07:60:4c:90:05:54:a0:0a:f0:30:4f:40:
         46:bd:35:95:60:5e:99:ff:74:6c:dc:5f:6d:13:41:8c:96:d4:
         5e:84:0c:06:33:3d:0b:d3:a1:2c:96:03:86:82:45:7d:00:f7:
         79:2a:80:a0:54:7f:ab:90:b5:12:2e:68:2a:a3:db:89:8a:75:
         6f:9c:99:af:96:cd:b9:5a:4c:a0:22:81:a1:69:b1:92:9d:8d:
         b2:b3:ed:b5:94:08:09:1e:7f:da:93:f7:85:49:33:5c:e8:59:
         92:a6:95:2e:b6:59:28:39:0e:e2:48:20:40:2a:93:fb:9c:59:
         0b:fb:74:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:46:42 2025 by rpki-client