Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/201187f7-8f78-3dca-bf5c-f203d896dd90.roa
File:                     201187f7-8f78-3dca-bf5c-f203d896dd90.roa (raw, json)
Hash identifier:          WCANeRbph19+KDJn9npBRj3go13bI5T6LRosUGzKcWU=
Subject key identifier:   29:49:48:41:BB:9E:71:2E:4C:0A:C9:B9:AB:E1:9F:E9:11:47:76:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F7153D7A0C371FD8963A4A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/201187f7-8f78-3dca-bf5c-f203d896dd90.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396547
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:3d:7a:0c:37:1f:d8:96:3a:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=5ecdd56f-8437-4904-a1aa-585f916adfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:60:e8:21:a6:dc:08:3b:28:7e:68:c5:26:fa:
                    c7:b7:9b:25:26:9e:75:91:47:45:d1:70:2d:cc:33:
                    0c:6d:6c:72:7f:2a:76:cb:dc:f9:d3:12:44:3a:47:
                    1c:bc:d7:7b:5d:a7:06:06:57:4f:54:1f:3c:28:f3:
                    c1:f2:2c:0b:5d:f9:eb:ed:ce:a0:71:1b:4c:90:c6:
                    81:b6:3b:ef:d9:c5:cd:ff:5f:a5:d7:da:f9:42:d7:
                    8c:04:5b:83:59:34:6e:6c:2f:9c:12:44:0b:20:f6:
                    28:a2:0f:37:a2:e7:98:91:ed:d3:06:74:10:88:51:
                    11:aa:b2:be:2a:03:38:99:90:96:0e:f8:a0:3b:78:
                    8e:fd:27:7f:9d:71:15:76:5f:30:86:bd:ac:ff:77:
                    d9:c3:aa:43:da:7a:bb:93:44:1c:5d:de:5a:7a:a3:
                    21:bd:23:0e:f0:66:7b:82:f6:87:08:24:8c:03:f3:
                    cf:82:0b:75:e1:4e:32:13:e3:1c:57:b2:7a:6d:d6:
                    ba:85:38:50:ed:b5:71:e4:ff:28:a5:48:49:58:93:
                    78:95:df:3e:1e:bc:17:56:10:f2:4c:35:44:be:ba:
                    77:47:65:58:6b:fc:8c:03:7c:1c:bd:aa:2f:71:01:
                    a1:33:61:7e:50:a0:ea:90:f1:08:13:22:58:09:a2:
                    4b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:49:48:41:BB:9E:71:2E:4C:0A:C9:B9:AB:E1:9F:E9:11:47:76:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/201187f7-8f78-3dca-bf5c-f203d896dd90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:36:2e:19:54:2e:1b:61:22:cb:85:46:57:0f:13:63:dc:66:
         9b:5e:45:74:03:c3:05:15:09:97:7a:a2:b7:58:34:5b:b1:db:
         10:b4:e2:30:ea:94:89:27:df:1e:02:b7:d6:75:9c:db:a9:75:
         a5:0f:0c:bf:bd:2a:1b:5f:82:00:bb:8d:5d:96:83:3a:c7:1f:
         22:22:a3:e6:d5:39:10:b2:79:6c:16:f8:7c:a1:22:23:33:49:
         17:4a:aa:60:72:47:34:f0:49:cf:dc:74:fb:d5:ef:ec:ed:7a:
         4f:6e:4b:be:f6:9b:9c:1e:f2:24:6c:d0:3f:24:ab:af:0e:45:
         91:04:0a:d7:29:e7:07:48:3d:cb:4c:eb:55:fb:86:05:8c:42:
         41:c4:66:e5:ce:cd:45:42:44:5a:81:5e:76:47:cb:47:58:93:
         5e:25:09:cd:60:6c:bc:70:bf:76:38:11:56:fd:05:c1:14:6d:
         61:00:91:0f:dc:a7:7d:ce:82:03:fc:50:9d:3d:0e:f8:4d:2a:
         cd:75:8c:69:ac:87:56:b0:fa:eb:5d:2e:21:25:3a:81:70:2c:
         f5:e1:53:4d:89:2e:b5:8f:05:57:dc:23:e1:5b:ab:34:e4:08:
         a6:8e:bd:91:79:46:33:c4:7c:ef:a7:84:c4:e7:73:65:e7:a5:
         82:cb:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:52:50 2025 by rpki-client