Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ea17f1a-3190-3717-93f5-2f67bf505718.roa
File:                     2ea17f1a-3190-3717-93f5-2f67bf505718.roa (raw, json)
Hash identifier:          yUGJbkGs80qpcbva7GrjWD+R0Fx5MnGsQxBbcGP48hM=
Subject key identifier:   C4:A4:94:C5:18:B7:20:FA:87:49:48:BA:80:30:4A:BA:69:45:61:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DAF9611EB9B8E06EFFA1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ea17f1a-3190-3717-93f5-2f67bf505718.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396561
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f9:61:1e:b9:b8:e0:6e:ff:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=c4e1281e-ed68-44b8-b90c-7394b1ab0a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:33:18:c5:2e:b9:db:86:9c:c3:fe:76:ff:54:
                    66:bc:c9:a4:28:27:4d:3d:28:10:45:1e:e0:91:92:
                    b6:6b:87:b8:67:df:f5:d0:6a:1d:f4:9a:2e:e2:28:
                    48:bd:a6:5f:d9:4d:cd:7b:d8:89:e6:7d:59:1d:ca:
                    46:97:d7:fd:10:ac:fb:df:64:d3:5e:0e:1a:03:19:
                    3f:b2:9f:90:6b:ba:30:65:51:2e:b0:44:bd:ed:d5:
                    a5:33:61:4e:dc:cd:99:f4:67:06:f6:65:7b:a5:6b:
                    de:78:27:08:3c:4e:09:bf:a6:a9:ca:f3:cf:b4:87:
                    d3:cb:5a:17:61:6c:7d:f0:a4:91:a7:14:f2:8d:10:
                    32:82:18:23:84:52:55:40:60:5b:cf:de:70:7f:4b:
                    14:b6:76:0d:a9:ef:a2:20:b2:fb:c2:e9:d4:3a:60:
                    0d:ab:73:2b:df:11:8a:3d:ef:b4:e1:25:fd:c8:07:
                    61:b7:83:df:34:5b:53:e2:e2:82:16:da:af:c2:a1:
                    73:29:c0:4f:8e:6e:8f:b2:7c:5f:a4:f8:ac:78:f9:
                    53:1e:af:38:27:5c:c4:d9:20:82:ac:60:86:37:6b:
                    be:3d:86:69:b5:7c:55:71:e2:6a:b7:23:77:d5:ee:
                    fd:0b:01:16:e6:02:7b:82:87:a0:32:6d:6c:c4:2b:
                    e0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A4:94:C5:18:B7:20:FA:87:49:48:BA:80:30:4A:BA:69:45:61:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ea17f1a-3190-3717-93f5-2f67bf505718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:70:0c:88:01:1a:bb:42:0a:1b:02:0b:49:8e:3d:41:ee:a0:
         66:8f:db:82:cd:d5:3d:d2:15:31:99:00:ca:80:4b:ad:a8:41:
         7e:ca:63:e7:23:fc:6e:67:f3:0f:9e:f9:27:2c:7e:9c:d5:36:
         fd:0f:63:95:5e:8e:ce:45:05:7a:a6:c5:e6:3d:b8:c5:a5:cb:
         a5:f1:74:63:fb:ca:9b:1d:67:36:c8:15:52:87:93:f7:8c:4a:
         fa:c0:ed:fa:c2:60:5b:50:74:fd:35:ac:73:5c:96:c8:59:25:
         c5:48:68:a0:a7:b2:f3:26:af:b3:17:8f:e7:5e:17:7d:f4:8b:
         be:27:8c:e9:92:7d:11:87:9b:1a:32:cc:ab:1e:49:55:7c:d6:
         4d:6e:4b:b9:e4:86:a9:f4:83:13:e5:83:bf:2c:30:f6:63:9f:
         8a:83:ca:53:11:a2:db:22:6d:2b:dd:1f:af:46:1d:7d:c6:d9:
         b6:45:67:15:e7:65:df:a3:f0:62:15:cf:98:67:83:6a:34:3a:
         05:b5:6a:78:7b:41:6c:8a:4f:71:3a:63:92:40:37:80:56:c5:
         f1:a2:b5:37:55:d9:e6:16:d0:9b:50:86:bc:e6:04:30:8d:ae:
         d8:cb:6b:13:71:70:0f:4d:f0:fe:a6:10:0d:eb:62:2e:a2:7b:
         ff:c3:62:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:35:46 2025 by rpki-client