Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/224bf48f-0de2-301b-a49a-aa7a5d43dd97.roa
File:                     224bf48f-0de2-301b-a49a-aa7a5d43dd97.roa (raw, json)
Hash identifier:          eH5O8Rp7IH+7bPg4jxZ/8B+qNigwf210dGfoFGLT/VI=
Subject key identifier:   55:D3:C0:EE:7B:31:BF:F3:94:F1:8A:48:1D:2A:2D:47:37:3C:A4:55
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AA7DF3FE95B927802C780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/224bf48f-0de2-301b-a49a-aa7a5d43dd97.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     36619
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a7:df:3f:e9:5b:92:78:02:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=10b85370-bde0-4a0c-8a27-2cc4c0058e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c6:ed:a5:bb:f8:b6:44:c3:b1:66:7e:18:a2:
                    7a:61:f7:c8:b5:4c:7d:00:de:fd:5c:4d:30:57:bf:
                    1f:b9:73:94:09:bd:f7:ad:8d:43:c1:2b:0a:c8:12:
                    ed:4f:8f:14:ae:b9:ca:70:9b:96:e9:41:93:08:b7:
                    4e:18:3c:4a:77:88:8f:28:11:a3:16:e7:33:eb:9a:
                    86:95:10:81:ea:18:07:6f:39:1f:8e:36:f9:3e:3b:
                    61:5b:93:d5:85:a8:a5:b0:6a:18:64:13:64:82:2c:
                    3c:68:e1:ba:2d:4b:c8:6e:62:3d:cb:db:43:41:cd:
                    97:62:3e:5e:f1:16:97:e2:ff:d6:c4:36:f3:1a:7d:
                    a5:fa:2e:6b:36:63:79:2b:52:da:34:2f:d9:67:39:
                    d8:c3:d8:77:33:ff:95:f4:b1:7b:bc:9e:1d:36:dc:
                    0d:fd:67:93:18:93:49:26:f3:7e:38:05:d1:88:85:
                    75:9d:93:9f:ac:e5:9c:db:6f:63:dd:0c:0f:5b:cc:
                    73:e1:72:73:71:a1:dd:ae:21:9c:75:27:a4:a1:5a:
                    02:67:ec:72:e0:20:1b:06:1e:f3:9c:70:44:5f:78:
                    f2:58:aa:db:24:c5:97:83:8b:8d:09:8a:24:b6:e3:
                    96:f2:17:00:97:52:ac:19:d4:07:8d:99:6e:19:a5:
                    e4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D3:C0:EE:7B:31:BF:F3:94:F1:8A:48:1D:2A:2D:47:37:3C:A4:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/224bf48f-0de2-301b-a49a-aa7a5d43dd97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:4b:f4:11:f3:d3:d7:e7:3a:dc:2e:ce:84:35:24:b3:84:f8:
         b5:c0:4f:43:c0:58:1d:0a:3a:e2:83:9d:c4:3b:f7:3f:8d:19:
         69:b4:32:4a:4f:a7:26:d6:da:57:9f:bd:8d:37:ed:8f:1f:ec:
         2b:ea:83:1f:95:97:65:0d:18:3c:f3:59:9a:3d:ea:01:b5:f2:
         b3:5d:93:12:f7:04:c5:ad:0f:e7:81:89:5e:c7:47:66:bd:b7:
         aa:a5:00:f4:b4:75:9e:d4:83:98:2d:e8:7f:7f:6e:74:ec:28:
         eb:44:6a:ee:b8:2f:b1:7e:b9:61:80:5b:1f:b3:fd:8f:5c:f2:
         ec:13:0e:91:b2:06:b6:ee:eb:de:9b:a8:67:c0:d4:e9:d4:b6:
         04:67:ba:13:1b:ac:50:53:ad:d8:c2:53:08:3d:e6:8d:6c:dc:
         0f:7d:2e:9a:1c:ba:29:f1:13:cd:ae:27:f8:dd:6b:fc:eb:b7:
         be:bb:21:3c:ba:bc:ab:a4:14:03:d5:1e:b0:aa:97:c9:d8:aa:
         2f:c9:0a:c9:83:21:a7:70:cf:33:a8:2b:ca:b4:d6:7e:a8:fa:
         8f:e1:42:a7:1b:29:db:26:ed:7f:eb:d0:cd:ac:64:0c:35:67:
         dc:b8:22:ac:1e:4b:ff:6d:59:f5:cf:7e:da:5c:ce:04:5d:f7:
         6a:01:01:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:39:08 2025 by rpki-client