Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f31b487-b259-30db-ab04-d51ce84e9198.roa
File:                     0f31b487-b259-30db-ab04-d51ce84e9198.roa (raw, json)
Hash identifier:          D5l7ibq1XPCSxZar/ulicu1h9iES+l3oj8vtRkhv6bc=
Subject key identifier:   E6:C6:54:66:48:10:34:81:25:36:74:35:1D:D3:9D:50:F4:3D:64:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A18956264900E7B7D270ABD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f31b487-b259-30db-ab04-d51ce84e9198.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     396589
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:62:64:90:0e:7b:7d:27:0a:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=64e7cd71-01fa-48ec-b7a2-e5506b0221eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:61:94:81:3e:5e:c1:dc:de:82:7a:25:94:74:
                    d9:fb:22:28:e0:97:cc:5c:9b:3e:f0:be:c6:a8:1a:
                    7b:ba:f6:e1:df:db:e2:de:1e:03:8f:19:80:5d:36:
                    0d:1a:65:cc:bf:b0:5d:ea:0f:48:ce:4a:bc:41:c8:
                    52:0b:51:29:b5:7c:17:00:6c:fa:7d:0b:7f:44:1f:
                    7f:2a:ea:5a:01:08:63:95:c9:c1:77:ea:1c:a1:57:
                    ff:86:64:f7:15:1c:d3:78:ea:f2:6c:ec:21:c2:25:
                    6a:c4:2f:f8:82:4c:55:00:29:78:20:b0:74:7a:52:
                    57:36:e7:c0:19:a3:3a:84:e5:6f:32:fe:93:f5:13:
                    75:81:10:6e:9f:89:6f:8b:82:f3:15:12:92:71:32:
                    69:6c:41:6a:04:d2:ac:bc:99:06:47:56:97:ca:ad:
                    28:3a:12:88:06:ca:e2:d8:0a:b1:83:16:b1:68:fb:
                    75:b5:2b:60:84:53:06:8d:07:d4:de:7b:39:58:c9:
                    61:6d:d5:1e:78:2d:32:da:00:8b:47:a1:f3:ac:4f:
                    68:69:66:45:ca:40:87:6d:d2:f4:61:88:17:36:4e:
                    27:91:08:10:28:e6:d3:af:d8:aa:67:b2:56:e3:e7:
                    0b:5f:d6:0c:22:17:30:86:d3:5c:54:e3:08:92:1b:
                    a2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C6:54:66:48:10:34:81:25:36:74:35:1D:D3:9D:50:F4:3D:64:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f31b487-b259-30db-ab04-d51ce84e9198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:06:b0:7b:6c:19:7a:1b:51:3d:c4:9a:77:1e:c7:39:ea:9e:
         f8:75:e2:04:36:aa:42:69:83:dc:ad:09:ac:6d:db:91:20:2f:
         04:9c:ce:23:24:a6:99:ce:94:95:85:fd:97:45:30:ff:9d:c9:
         1a:36:57:0e:46:e7:8a:69:23:69:71:f1:1a:ef:43:85:91:7d:
         f1:de:e7:21:6a:48:3b:22:ac:e0:33:58:0f:a2:b7:80:52:a2:
         11:39:6a:c5:02:89:34:46:07:73:da:a4:e4:bd:31:8b:25:4f:
         08:51:9b:38:f2:c2:e5:94:f5:39:c0:23:1e:2d:ae:e0:b5:e2:
         68:2e:13:5c:66:87:8a:6a:b6:77:d0:22:0b:60:23:11:70:c3:
         a4:c4:69:c5:cb:48:ea:38:84:90:61:95:e0:92:20:1f:12:43:
         13:63:a4:34:44:3a:61:18:44:08:ee:c2:e6:b2:ba:fe:e2:c6:
         1f:ea:89:d1:ad:ae:21:13:7f:c2:3e:b0:d9:b6:e1:e5:85:c1:
         62:8d:9a:08:bd:3d:aa:e0:bc:98:15:37:ce:eb:8d:59:03:9f:
         7c:02:1c:fc:20:4a:5f:d7:07:16:10:0e:71:af:13:54:d3:6c:
         f6:92:12:a5:72:c2:45:c3:9d:59:9f:5b:0a:f1:5a:6b:02:54:
         7a:a0:63:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:53:34 2025 by rpki-client