Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bcbfac0-6c81-339c-b207-a27ae54bbbe3.roa
File:                     3bcbfac0-6c81-339c-b207-a27ae54bbbe3.roa (raw, json)
Hash identifier:          QeYdU2l08xyA6pIirtr58hwRMakBM2aflc/yq/jgAPA=
Subject key identifier:   14:62:16:3E:7D:E0:F6:53:82:EE:53:F5:E8:74:E8:05:3A:04:ED:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB1B31F3C1ADDD64BA9280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bcbfac0-6c81-339c-b207-a27ae54bbbe3.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     397197
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:1b:31:f3:c1:ad:dd:64:ba:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=b60b6ba5-5ddf-4753-93d9-8d80f432d237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4a:58:f8:6e:a6:70:51:0e:27:ee:da:30:c3:
                    f4:ca:39:ef:b1:8c:41:a0:ba:75:4f:4e:78:4b:77:
                    a4:21:f2:d4:a6:c1:6c:3b:5d:15:95:3e:49:f5:b6:
                    1c:e9:40:18:61:bf:68:d2:5a:86:9c:e1:0e:45:c3:
                    1a:e4:ae:20:f4:7a:5e:a4:b1:81:33:1d:90:5e:7e:
                    e7:ba:ca:c7:de:9a:a8:05:d6:91:e9:be:22:7a:28:
                    59:12:22:94:8f:9a:d6:4c:f1:6e:c3:da:32:bc:5c:
                    8d:e3:9d:d5:66:69:e0:94:ef:50:aa:9f:1d:2b:82:
                    88:72:72:29:a2:83:72:78:48:c9:f5:79:65:a2:57:
                    62:aa:37:61:81:a1:03:3b:2f:0a:72:a9:b3:98:48:
                    08:01:fe:63:64:5b:28:1e:4b:c3:01:bd:ec:8b:ba:
                    66:00:ef:71:bb:4f:f1:44:c9:5b:78:5a:84:b9:02:
                    10:32:9f:76:a0:f4:c9:b1:a7:b0:09:c9:db:82:14:
                    3e:c7:ea:8d:75:61:3f:e2:e3:37:44:bf:bd:51:7a:
                    78:20:e1:a4:20:f2:41:f7:37:74:2b:51:fb:0f:af:
                    d3:6a:fb:29:9a:d2:e4:cd:4d:f6:45:53:9e:1f:73:
                    61:39:b2:24:b6:cc:fe:71:ce:98:16:37:ef:15:fa:
                    03:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:62:16:3E:7D:E0:F6:53:82:EE:53:F5:E8:74:E8:05:3A:04:ED:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bcbfac0-6c81-339c-b207-a27ae54bbbe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:53:e9:45:ea:85:1d:3e:d3:53:4a:0f:02:dc:c5:83:e5:32:
         3b:bc:9c:ca:ed:3b:f1:8a:b6:99:94:c4:51:5b:a9:77:4e:1b:
         34:a7:53:31:7e:cd:7d:ca:74:4c:53:11:88:f1:4d:fa:8f:56:
         71:41:32:a7:35:fc:7d:03:ae:00:18:04:d4:f1:b2:9d:9b:d9:
         fe:d5:e1:7b:aa:15:6b:80:36:03:3f:69:9c:be:66:f5:8c:a6:
         c1:ca:ec:50:be:69:86:4b:5b:eb:86:8b:67:00:2d:b9:6d:f1:
         9d:92:10:9a:b3:a8:65:d7:25:6b:a4:2d:9d:d6:e8:56:dd:26:
         7b:ab:b0:ce:5b:b0:23:c6:9c:2c:5a:0b:14:a3:51:77:83:c9:
         88:4d:ff:ff:c9:77:cc:14:aa:17:1e:2d:99:c2:8e:ad:7a:b4:
         c4:92:08:d8:5e:96:61:93:fe:7f:7f:01:1e:a6:7b:9e:d8:8d:
         dc:0d:ff:a9:b0:78:23:a8:79:af:f8:20:5d:86:26:3d:74:5c:
         5a:15:b2:e3:4a:14:78:f2:b9:e7:16:04:33:e1:87:a0:fb:89:
         7c:16:19:64:83:0a:fc:b0:f3:51:e7:35:69:d1:8e:aa:b3:46:
         00:63:bd:7d:36:54:8d:27:96:7a:c5:81:d0:8f:69:57:0b:a8:
         30:f2:3c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:52:05 2025 by rpki-client