Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/191e5b6b-a068-3248-96ff-211440cdea62.roa
File:                     191e5b6b-a068-3248-96ff-211440cdea62.roa (raw, json)
Hash identifier:          JSdTiHLpt1hfjOb5yGo8DiR5eAYrhsfW9FY3SVgjfmE=
Subject key identifier:   CC:B7:D0:62:2E:CD:A7:F9:C1:C5:46:8A:F8:D9:3A:3B:A2:45:BE:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F7153E73F90A98552E30D800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/191e5b6b-a068-3248-96ff-211440cdea62.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396552
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:3e:73:f9:0a:98:55:2e:30:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=b7b4414a-cebd-4210-a3e1-52484559f3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9e:82:8c:de:c5:27:2a:c1:71:3b:b9:cb:5a:
                    5a:d5:a5:fe:6f:bc:b9:21:fc:61:fe:67:0a:31:23:
                    83:55:c5:09:fc:02:6a:c1:45:58:ae:a1:46:3e:38:
                    03:ea:45:c4:6f:52:80:55:70:16:c3:7e:8d:68:61:
                    9e:81:5b:0a:52:42:64:e6:47:89:b0:67:5c:34:0a:
                    65:d1:4e:9c:c5:03:6d:8e:28:04:78:f2:42:c3:12:
                    3e:f7:b7:ea:3b:0d:74:e1:8e:b1:36:01:62:b1:88:
                    9f:3c:89:d8:23:d2:86:5f:8a:de:2f:65:e1:13:74:
                    56:07:02:16:a0:06:f6:50:54:1e:ef:7f:7e:cd:b1:
                    dd:2b:2b:96:63:6a:ba:0b:00:74:2b:96:82:ad:6f:
                    82:29:f8:f7:3f:81:93:5e:1f:2f:f2:d2:01:37:a4:
                    fd:82:bd:18:34:4a:05:99:0e:45:8f:6a:d9:81:e1:
                    a6:ce:ec:2a:1c:53:6b:74:5e:6f:c3:e3:37:c5:c2:
                    eb:1e:92:a5:bf:ad:e2:f0:8c:a2:ca:75:4b:df:29:
                    f2:67:28:32:80:df:7f:a8:25:fe:45:6f:c1:5f:8d:
                    3e:1a:71:8b:75:23:a6:60:ee:8f:d8:b6:3b:51:71:
                    37:a2:bc:7b:df:f6:7b:f5:6e:95:14:7e:98:29:ab:
                    e9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B7:D0:62:2E:CD:A7:F9:C1:C5:46:8A:F8:D9:3A:3B:A2:45:BE:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/191e5b6b-a068-3248-96ff-211440cdea62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:b0:61:82:d7:2f:c6:d2:f6:95:71:7e:b2:bc:bf:10:b2:b3:
         16:70:8e:36:68:53:91:e6:f7:c5:ef:90:06:66:4b:24:6f:1b:
         59:00:d6:3e:7b:b4:01:98:d1:a4:4d:74:2b:46:4f:75:a1:fb:
         e4:07:33:63:b5:21:58:8c:e7:7e:f2:81:1b:e9:c3:c3:95:12:
         5d:b6:2a:5d:b5:22:07:fd:62:ac:59:21:29:af:eb:cc:fa:ef:
         ad:82:e2:0d:64:c8:85:7a:36:d1:3a:55:09:ff:47:70:36:7b:
         ba:92:c7:63:61:2d:4f:ea:de:d8:83:45:65:27:32:ad:a5:01:
         b0:e4:5b:f7:47:7b:25:1d:e8:65:06:3e:aa:b1:b9:6b:39:c1:
         16:b7:f1:50:a6:79:38:b2:04:5a:4e:50:60:25:a6:a0:75:32:
         2b:e4:38:6b:c7:ed:10:30:e8:3a:ff:2f:7a:c3:56:61:b4:69:
         19:42:b0:84:92:60:bb:40:6b:cf:74:1b:14:dc:f5:f6:82:45:
         62:e5:0e:dd:3c:0b:a6:47:c5:c4:00:d3:b6:de:56:2e:d7:58:
         15:df:48:42:91:73:3e:66:50:38:58:0f:77:45:c9:0f:de:48:
         9c:2b:59:b8:50:18:6a:26:db:74:a1:58:e8:91:29:5f:0a:f3:
         e4:54:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:46:22 2025 by rpki-client