Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bcecb5c-e333-3ec8-a28a-b152f758d75a.roa
File:                     2bcecb5c-e333-3ec8-a28a-b152f758d75a.roa (raw, json)
Hash identifier:          nb1WMwq05I05Cfk2ZMsza0jycIlYMRQzRkSb1rnKcso=
Subject key identifier:   E8:21:5F:AC:23:95:F5:5F:33:FC:64:C3:25:E8:85:75:AC:A7:A6:99
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F71540E842904C07FBC96E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bcecb5c-e333-3ec8-a28a-b152f758d75a.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396594
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:40:e8:42:90:4c:07:fb:c9:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=7174efd2-31ad-46ff-889a-6f1725ff08f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5a:06:3b:7f:cc:88:0c:5d:b7:28:73:ac:ec:
                    0b:a1:48:92:51:f2:b0:b7:b7:76:21:a5:45:64:5f:
                    7a:9e:48:61:17:b9:fb:cf:ca:f2:64:be:fe:11:e5:
                    6e:4e:51:e1:62:98:18:4c:8a:02:fd:50:c9:5f:0d:
                    db:24:e6:59:00:5e:8e:1e:ca:dc:bc:f4:e4:17:46:
                    a3:b0:fc:d1:46:78:38:63:06:75:fb:9c:d9:44:da:
                    84:6b:41:78:f4:bd:0b:58:05:80:b9:29:75:da:fc:
                    d4:84:47:33:25:01:2f:b8:30:0f:79:39:97:27:2a:
                    75:7c:a5:3f:c7:26:63:a8:a5:3e:49:cb:d4:88:51:
                    6e:d6:d2:ba:52:33:82:a7:5b:6c:70:fc:37:c7:7d:
                    cc:60:1e:a5:17:af:16:8e:b0:56:c5:e4:e9:8c:5d:
                    59:7d:ac:8a:79:7e:db:33:e7:a4:b8:a5:85:95:12:
                    60:2d:3d:d0:15:6c:6b:a1:2a:42:fe:52:58:d6:a2:
                    a4:c4:f4:b1:42:64:29:19:99:d4:d8:a1:a6:f5:3e:
                    9d:72:4c:f1:dd:ed:df:a0:6e:c4:04:4b:b9:f7:76:
                    21:47:4b:d2:38:b7:34:ff:fa:a0:8a:06:cb:e7:df:
                    9e:a9:33:ed:d9:0c:de:54:34:f9:72:17:7b:fa:71:
                    0c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:21:5F:AC:23:95:F5:5F:33:FC:64:C3:25:E8:85:75:AC:A7:A6:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bcecb5c-e333-3ec8-a28a-b152f758d75a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:8f:18:ff:dd:9f:e0:89:46:8b:16:22:f7:95:f5:09:af:d5:
         4b:2a:ab:10:44:46:e2:c0:c9:47:bd:bb:7f:86:d6:da:d6:c4:
         8b:bc:24:27:51:61:b2:c6:66:09:cd:5a:d8:21:fb:26:cd:45:
         e6:7d:e8:4d:ee:eb:9b:d3:f1:c5:8d:43:42:1c:e9:32:17:f7:
         2a:8f:1e:9f:d9:13:28:3c:5e:a3:7e:0a:39:b9:23:0e:ff:11:
         ef:49:7d:53:31:e7:24:5f:d5:b9:f6:13:48:db:01:9e:a5:d2:
         64:da:33:8d:f1:3b:0f:af:60:a7:1f:9e:6f:65:40:a2:88:8c:
         3b:ba:65:c9:c8:b7:72:cc:6f:5e:58:94:ff:72:8b:58:2b:05:
         95:46:99:52:a2:be:90:88:b7:59:e6:88:bf:bf:6d:d5:04:30:
         3a:d5:da:23:51:0f:de:de:cc:5e:2b:a0:12:58:65:cf:76:c4:
         e9:9e:a4:00:4d:1a:91:55:b9:cd:44:e1:d4:f8:bb:1e:74:33:
         49:1f:4c:e1:8b:e3:1d:8c:35:9e:ad:51:c3:f7:3d:29:7f:9e:
         4c:80:7e:8b:21:b4:a5:39:6b:77:bf:78:cb:ec:0e:36:a1:55:
         10:1f:fb:61:76:09:54:1b:1f:42:a7:df:e3:18:83:1d:f6:19:
         17:b6:4f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:51:06 2025 by rpki-client