Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3008bdb1-9f79-34fc-88d6-2982a3603d83.roa
File:                     3008bdb1-9f79-34fc-88d6-2982a3603d83.roa (raw, json)
Hash identifier:          lF7CTpBCvQxd/kVCNJccjpTdxTi/h4YejcVrIF5zKXA=
Subject key identifier:   29:2B:C5:EE:29:11:C0:20:8A:AB:F6:0F:D5:67:FD:D0:14:E9:EB:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DAFE8E06B87B6CF2951780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3008bdb1-9f79-34fc-88d6-2982a3603d83.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     397205
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:fe:8e:06:b8:7b:6c:f2:95:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=e22bdda8-fa28-45ed-8a6b-d4b9ecbfa98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:58:70:a7:bc:2e:0c:a4:7c:6e:1b:20:8e:81:
                    47:0d:70:7d:d9:4d:15:31:90:ea:99:cb:ba:58:aa:
                    aa:5f:cc:8d:39:5e:6a:12:e9:19:ea:4c:f3:5f:7d:
                    c9:f0:c7:fa:98:2b:0c:4e:22:a6:9e:b0:f3:9a:3e:
                    55:2e:f3:b3:ad:1a:1c:1d:90:fd:e7:96:5f:7e:25:
                    21:b7:cb:e6:cb:00:35:8c:7b:87:e7:f3:d3:1d:13:
                    c0:27:17:79:03:c1:04:d0:dc:89:9b:8a:f8:68:00:
                    cd:9e:7c:89:5c:00:46:74:45:de:ee:62:ca:fd:57:
                    a0:93:a5:2a:cb:1a:53:cc:eb:dd:79:5f:1b:8c:49:
                    a1:05:9d:23:d0:2b:e3:0d:9e:d0:8e:08:2c:41:f9:
                    70:fe:0d:45:29:08:95:8f:99:0f:4d:33:c4:75:17:
                    50:f0:b1:39:b6:26:4d:e3:82:b7:73:ee:9c:24:4f:
                    a5:bb:71:a8:53:4c:ba:2c:ea:6a:1d:8e:28:4d:dd:
                    66:66:00:d8:75:c3:19:a8:96:41:a2:e3:3a:39:1c:
                    81:43:a1:67:7c:4e:82:8d:1c:e4:11:a7:82:52:05:
                    a2:5c:ec:d9:ec:c2:6d:4d:4c:6c:16:bf:2b:30:72:
                    02:64:ca:ca:5f:81:29:2c:7b:c5:8d:d0:ba:27:5d:
                    70:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2B:C5:EE:29:11:C0:20:8A:AB:F6:0F:D5:67:FD:D0:14:E9:EB:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3008bdb1-9f79-34fc-88d6-2982a3603d83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:8b:cc:c1:4c:e2:a1:a9:a8:1a:9a:3c:ce:e2:3a:87:03:89:
         88:9c:8a:d2:5b:bd:03:e3:13:21:24:34:6f:d7:16:8b:f1:cb:
         24:d9:bd:d4:32:80:a0:3a:54:31:db:7a:22:49:e1:54:70:1c:
         27:97:88:d5:f5:a6:ce:be:09:5a:b6:8e:ef:e3:f2:13:76:58:
         0a:d3:d6:71:6b:93:41:e7:43:c5:5a:6c:0c:0a:7d:ce:0b:17:
         d6:b0:b0:03:8d:b2:bc:04:c5:86:74:95:b7:83:11:a7:2d:b9:
         79:fa:8b:aa:cb:16:28:c1:15:9c:4b:8a:7e:85:6b:bf:47:ce:
         a4:7c:d2:82:ee:af:56:6d:37:4a:41:ff:0a:0c:16:e1:71:9c:
         ec:da:c7:fa:0d:d0:3d:e3:00:8c:ad:d4:c7:ae:71:a0:a1:2c:
         0c:8b:8f:69:59:d3:e1:1c:c4:28:27:ff:86:04:78:30:06:10:
         d4:b4:69:bc:89:8d:1e:b1:db:84:5e:38:ec:98:3a:84:d9:66:
         e2:8c:82:9c:d7:4d:f8:bd:0b:57:4d:ab:dd:a1:e3:8a:21:ac:
         fd:7a:e5:54:5c:79:cc:e0:62:c6:f2:c8:4d:f0:d1:eb:a5:9f:
         56:e0:46:99:6c:5e:18:76:24:4c:60:8b:3b:eb:49:aa:b8:a2:
         b5:8b:64:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:46:11 2025 by rpki-client