Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44c3a828-8854-3388-98a6-9470e9226043.roa
File:                     44c3a828-8854-3388-98a6-9470e9226043.roa (raw, json)
Hash identifier:          Rd1Ae1x067rndbBo9sAwRnVGOdTj5sb8zquDujmjdGU=
Subject key identifier:   57:37:92:47:36:33:2A:8E:68:14:16:EB:EF:F7:5D:F9:88:47:AC:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1895610174BA4AC835332640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44c3a828-8854-3388-98a6-9470e9226043.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     396594
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:61:01:74:ba:4a:c8:35:33:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=c98ed6d9-3ba4-4e32-978e-4fd3819656ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e9:91:6f:f3:4a:96:44:79:ed:c8:82:f5:cc:
                    c3:f3:8d:f7:1f:c7:0c:2c:1d:ec:e0:5a:b2:c3:26:
                    7a:eb:22:43:dc:aa:74:82:e7:70:39:06:be:dc:34:
                    75:83:c5:d4:48:b2:fb:5e:8a:1f:e5:9a:1c:5d:f9:
                    d2:8d:10:d4:dc:dc:a1:ba:e0:58:29:5a:4c:aa:96:
                    a2:55:b5:58:c6:b8:1f:24:78:47:f8:43:5f:b3:a9:
                    c1:83:55:95:32:2e:8c:f7:d4:7e:78:88:dd:94:e4:
                    3f:cb:d2:39:dc:50:4d:89:d5:a0:be:24:54:9f:48:
                    99:92:5e:85:5a:54:bf:9e:13:ec:01:19:90:ba:36:
                    93:8d:47:e1:02:69:e2:8a:b5:7b:b4:40:ae:8f:72:
                    5d:21:43:9f:cd:5d:9d:fd:07:f7:00:c7:ac:a5:fb:
                    e8:5b:0f:b4:10:c4:1f:11:bf:70:a3:05:fa:9c:21:
                    69:d6:39:69:bf:32:13:38:cd:84:4d:fd:74:6f:79:
                    aa:04:41:03:83:2c:22:bb:e1:50:63:f4:51:39:48:
                    bf:1d:a8:e5:99:82:bf:76:cc:65:83:fc:65:a6:47:
                    08:04:f7:c7:91:f1:e9:c4:ee:a7:cc:22:5b:2b:d2:
                    de:bc:da:c2:49:05:c8:75:1b:39:cc:6c:2a:21:7f:
                    23:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:37:92:47:36:33:2A:8E:68:14:16:EB:EF:F7:5D:F9:88:47:AC:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44c3a828-8854-3388-98a6-9470e9226043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d7:af:54:36:28:b3:01:1a:05:20:6c:e6:32:27:68:28:d0:
         e6:31:cc:f9:cc:51:41:66:90:04:47:38:f2:bb:0b:0f:87:03:
         8c:70:86:e4:cf:2c:a3:55:3f:55:4c:e7:22:b3:3c:53:a3:80:
         a5:0e:7a:2d:a0:b2:49:6e:5e:62:2b:2d:cb:cd:bd:a3:ad:00:
         b3:ca:f4:03:35:10:a4:93:81:7f:d3:7f:86:b8:62:35:a8:b3:
         c8:28:65:b3:d3:c5:bb:79:40:d1:85:f6:b5:0b:8e:31:c5:21:
         39:db:95:b3:4b:06:a4:f8:d2:c5:a1:61:4c:a9:0a:b9:e3:9d:
         7d:90:13:c8:bb:a1:da:6e:db:e3:b0:c9:61:d8:18:a0:de:55:
         9e:88:6b:17:e9:2f:47:6e:f8:13:b2:39:87:c9:19:90:87:95:
         93:b7:62:cb:a8:b3:04:b8:b7:23:c5:13:70:aa:f7:6d:ee:3f:
         02:20:8b:47:a3:f6:08:b6:ec:f4:46:e5:3b:ad:fd:cb:4d:c1:
         e7:cc:f2:35:09:28:17:f3:0b:5e:cb:8b:01:a1:75:6c:82:81:
         b7:79:e3:a4:0d:7a:ef:1c:66:49:ca:72:a0:5f:95:07:22:eb:
         75:b0:ec:da:21:04:92:a7:aa:ca:82:3b:71:4e:a2:82:4d:13:
         d6:54:99:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:51:55 2025 by rpki-client