Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a773969-54d9-3bb6-a5f1-c7d428400972.roa
File:                     3a773969-54d9-3bb6-a5f1-c7d428400972.roa (raw, json)
Hash identifier:          VfngbDAklADwnFAKVFhUxqi7BtJPEcm8oDj+S7dYDlY=
Subject key identifier:   7B:0C:8D:F3:F4:1B:0B:49:BF:17:C1:3B:9C:F7:E1:94:BC:A3:91:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AA5F53701095570D3B380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a773969-54d9-3bb6-a5f1-c7d428400972.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     36631
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a5:f5:37:01:09:55:70:d3:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=57f12d6a-41fc-4e67-b97e-7c47b35b54cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:8f:25:36:48:e2:2a:94:36:54:6b:a0:64:
                    03:85:89:a6:7c:3e:c0:0a:ab:70:8e:b2:2b:8d:ff:
                    3a:ea:ac:1e:d5:f2:43:21:d4:24:5e:15:4d:98:ae:
                    f6:e0:41:ed:19:bf:39:58:0f:4a:c2:08:72:02:30:
                    4c:49:4c:e0:42:0e:fe:87:fb:7f:5a:e8:43:b3:86:
                    03:4c:91:99:97:26:b1:94:67:d6:ff:10:ae:be:13:
                    ce:48:1a:c3:38:4d:46:4b:26:8a:7c:a3:ea:e5:f7:
                    11:2e:2a:f7:ce:cf:6f:1f:00:0c:b5:6b:34:28:55:
                    32:93:e8:0c:db:3c:e1:37:77:22:13:60:53:22:7a:
                    98:40:0f:74:34:9c:26:12:b5:14:62:90:69:9f:84:
                    3e:41:4f:c9:79:13:2f:fa:31:56:e1:84:7c:fa:fe:
                    46:20:56:b5:24:c8:90:b3:86:80:05:70:09:21:17:
                    a6:07:ee:69:66:bb:20:19:7d:ac:46:d1:8b:b6:cf:
                    47:8b:5f:6c:30:56:41:6a:84:34:35:06:98:4b:46:
                    39:49:2b:aa:62:f0:16:ea:78:04:ec:fb:c2:cf:5d:
                    33:24:6a:6c:80:62:5a:de:3d:b1:2d:62:0a:0a:49:
                    3a:47:eb:5f:cf:62:e8:c2:83:0c:38:63:7a:10:50:
                    2b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0C:8D:F3:F4:1B:0B:49:BF:17:C1:3B:9C:F7:E1:94:BC:A3:91:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a773969-54d9-3bb6-a5f1-c7d428400972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:48:20:04:7f:3a:94:20:72:e1:6d:5a:44:fb:72:90:85:b0:
         51:20:b2:5e:12:df:a3:29:24:66:dd:31:83:19:e0:65:7b:f4:
         4c:96:0b:e9:aa:ed:be:6c:06:0e:66:49:37:38:63:91:99:ea:
         49:b4:86:71:27:e7:0e:44:e0:82:12:b5:67:ab:0c:72:0d:8e:
         7f:3f:6c:ef:0a:0c:57:c0:78:96:01:df:fe:00:61:a0:7c:ae:
         5c:ba:9c:2b:e0:c5:2a:37:d8:6f:67:55:5a:f8:97:e3:fd:d8:
         33:a0:7d:9e:17:87:0e:e8:77:59:be:55:3c:ec:3c:ba:af:26:
         82:65:6e:74:d6:7e:62:68:e2:f0:9d:58:ae:d0:9f:cf:58:54:
         f5:36:41:9b:09:f3:fc:a6:17:fa:20:f9:63:ac:77:ea:0a:b7:
         39:a0:b8:c4:a5:85:c5:35:9d:c8:3e:e4:0e:61:8d:a4:02:05:
         f4:0a:c4:2c:6b:40:6e:b6:33:d2:61:27:46:0e:13:60:36:61:
         04:15:4c:cf:e0:98:bc:51:6a:1a:e3:f4:1f:24:93:be:f8:c2:
         d0:f3:90:6a:38:3d:be:5f:b3:0e:7a:e7:d3:62:d8:7c:bb:42:
         ac:3f:55:e1:74:f9:5f:31:25:4d:77:79:d5:3a:1a:44:b9:93:
         1c:0d:fa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:51:04 2025 by rpki-client