Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cca400c-f8c8-3d83-93db-b4a96d9a7408.roa
File:                     1cca400c-f8c8-3d83-93db-b4a96d9a7408.roa (raw, json)
Hash identifier:          4T6XlCQvyBOflxv/n5of+PdFHOXNarI8oX7TnxmyibA=
Subject key identifier:   D5:D6:47:1E:F6:09:93:37:37:F6:94:DB:91:BC:65:52:0F:80:06:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F71542233BA4F14830DD0E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cca400c-f8c8-3d83-93db-b4a96d9a7408.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396543
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:42:23:3b:a4:f1:48:30:dd:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=f07e7575-d2a4-40b6-88db-6610d878889d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:92:e0:a6:86:f9:28:d0:00:13:30:f7:91:cb:
                    0c:b2:61:42:fc:ec:48:05:9f:cf:6e:ff:b0:1d:da:
                    66:13:b3:df:7f:a9:55:2e:0a:ab:50:41:53:79:22:
                    28:3b:41:19:18:c7:9a:da:fc:47:fc:3d:63:27:da:
                    1e:85:84:81:78:ab:71:b2:82:d7:6c:d3:07:48:c1:
                    07:b6:59:25:44:81:ec:20:15:39:50:9a:30:59:a1:
                    f1:55:bf:ef:a2:f7:a6:5d:dc:52:e7:57:0b:8d:af:
                    c5:36:05:65:77:f0:6e:26:17:07:f8:1d:42:87:2a:
                    37:60:28:2f:c2:75:94:f1:79:7e:9b:33:b7:4a:a2:
                    6c:83:f7:23:bf:54:f6:ae:75:f2:12:d4:77:ad:5c:
                    49:07:12:ea:28:a7:fd:f1:39:5e:6a:0b:94:70:c4:
                    bb:64:72:43:78:01:ea:66:b2:a9:12:e5:25:4e:f1:
                    84:d1:91:51:fd:6b:a0:cc:d8:23:4e:29:ae:00:27:
                    d2:79:07:87:b7:23:dc:9e:ec:56:a4:8f:b9:fb:df:
                    9d:ac:43:e7:ed:a0:ca:ab:63:f4:1c:9f:66:9e:a6:
                    2a:73:06:66:91:09:6d:ac:80:60:06:ab:4d:1e:43:
                    fb:78:0e:23:37:c0:6b:5b:c7:a1:bb:d6:01:a8:d2:
                    2d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D6:47:1E:F6:09:93:37:37:F6:94:DB:91:BC:65:52:0F:80:06:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cca400c-f8c8-3d83-93db-b4a96d9a7408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:b4:85:e3:5f:bb:ff:27:84:5d:2b:5c:4c:66:88:26:05:ec:
         d0:b9:4e:da:2f:93:58:cb:9b:66:56:5c:27:b2:9c:fd:a2:2b:
         fa:59:65:43:a5:9e:99:34:3b:94:3a:8e:9f:d7:be:9d:04:c0:
         7c:72:dc:c0:6c:a4:9b:b1:09:fc:2e:f5:c2:85:c4:26:d2:dc:
         c8:4b:3d:4f:a3:9d:0f:2e:d4:42:da:ae:2a:5f:78:d8:ba:52:
         82:93:24:9c:56:2e:5a:91:16:13:9e:4f:a2:45:93:e7:f0:ad:
         d0:09:b5:36:2a:00:6e:ba:e4:e3:14:7b:10:bd:d0:5e:21:76:
         b8:47:11:70:fc:7e:37:b6:c1:fd:b1:89:d3:16:34:31:b0:a0:
         19:fd:e5:3e:1c:b4:f6:23:80:16:d2:0d:ab:e3:57:08:3e:af:
         ec:01:be:7a:36:d4:71:13:56:47:ee:52:13:d6:b1:e8:91:aa:
         ce:25:a9:4a:0b:82:47:e8:a3:6d:21:c5:d7:bf:c8:91:f1:4d:
         d8:80:91:69:0b:bb:b2:5d:f0:b3:96:50:11:06:8d:39:bd:53:
         b0:b3:c1:c2:ed:63:6a:b3:38:7c:05:7f:22:dc:73:19:80:30:
         a1:e3:e5:f4:99:30:b1:02:1e:65:ed:2d:e9:3e:c0:d1:a5:55:
         5b:f5:ec:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:02:21 2025 by rpki-client