Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d061289-ce4a-3b11-8f3a-af42807fdc38.roa
File:                     2d061289-ce4a-3b11-8f3a-af42807fdc38.roa (raw, json)
Hash identifier:          wQrw3HMsZ1OCjLolte9neja8YzG+IzvowRXOJJKpnwg=
Subject key identifier:   93:82:44:C2:D7:E1:CE:5D:C7:91:4A:58:26:11:D1:72:BE:E1:D3:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A18956409C0DE85C55723C440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d061289-ce4a-3b11-8f3a-af42807fdc38.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     396582
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:64:09:c0:de:85:c5:57:23:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=d342c8e4-f588-40df-b3c8-45c8786391d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cf:94:7f:ba:20:49:f2:95:27:c5:b2:bc:0b:
                    1e:9d:11:2b:79:3f:3b:fc:5f:92:4f:e9:99:48:f8:
                    7f:69:d0:e1:e8:cf:ed:62:5a:d9:83:a2:41:be:3c:
                    61:42:25:6b:d4:26:4c:7d:02:23:e1:dc:6a:03:fe:
                    a3:b8:17:39:9c:20:c4:02:26:6f:32:a8:fc:f2:fb:
                    0e:d2:02:01:fd:71:2d:6b:0d:aa:15:40:7c:2c:51:
                    96:a7:83:cc:23:5b:24:12:a6:5f:bd:f1:63:39:5e:
                    d2:07:2f:b6:5e:d1:ea:a0:98:c6:4b:9c:17:d7:71:
                    79:6c:bc:15:31:9e:21:c2:7b:00:f6:57:bf:d6:9e:
                    8d:2f:2e:8a:1b:33:8a:89:ca:3f:d0:79:f8:04:59:
                    0d:dd:7e:c1:d7:c1:c5:32:a5:d9:06:9a:a2:e3:35:
                    bd:30:14:52:42:25:f3:34:06:c5:2e:15:74:e3:9e:
                    7f:e3:c8:c8:28:b6:0d:6c:ff:3f:44:ba:0b:45:ac:
                    f3:12:08:b1:66:1d:03:08:3f:5b:b7:f0:37:60:18:
                    a2:a5:e6:d2:2f:4a:54:f0:71:26:09:cf:e3:2c:13:
                    d1:4e:28:2a:f4:2e:a2:06:dc:db:ca:11:c3:86:59:
                    f9:a2:9b:93:9c:c2:83:59:12:a4:1f:9d:59:23:60:
                    1e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:82:44:C2:D7:E1:CE:5D:C7:91:4A:58:26:11:D1:72:BE:E1:D3:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d061289-ce4a-3b11-8f3a-af42807fdc38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:15:38:53:14:41:1d:92:99:cd:56:5c:c1:9b:d6:43:6c:bb:
         23:32:37:fa:8f:ff:7d:0e:79:98:25:54:0d:76:5c:28:63:7f:
         1f:00:ac:9f:fb:41:60:92:49:bd:10:c6:fe:6f:1e:6a:0f:44:
         f1:13:ce:d6:57:40:f5:0e:94:c8:03:64:d9:93:21:07:dc:a0:
         a9:1b:a5:7f:79:ae:c7:a3:86:59:91:6a:9d:d8:33:07:02:f3:
         78:c0:c4:32:ed:1d:62:39:f5:55:ec:07:b5:7e:ab:52:ab:2a:
         32:93:80:35:36:70:7a:79:a8:28:b8:c9:29:2a:8a:66:b2:88:
         b4:05:73:86:bd:99:3f:2d:57:94:68:c0:54:76:fe:70:15:3a:
         9d:eb:06:3e:a9:54:c7:67:ff:8c:a4:2e:98:f9:56:9c:d5:50:
         1e:82:06:8d:34:ed:3a:42:9f:fe:75:e1:b5:f6:ca:18:7c:91:
         cb:a9:31:4e:98:67:b7:86:99:dc:6a:81:46:94:c1:aa:b4:5a:
         4b:77:9e:47:87:ca:d9:43:1c:99:25:93:40:ec:c3:8a:f9:ae:
         1c:34:d4:ee:e4:1c:8c:25:80:61:4f:98:af:8f:a5:d0:d2:45:
         ef:02:8d:44:00:f8:77:35:fa:cc:c7:37:18:86:cf:60:28:1d:
         42:f2:f5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:46:26 2025 by rpki-client