Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f9d7ff7-5a01-3469-b972-6e43af533947.roa
File:                     4f9d7ff7-5a01-3469-b972-6e43af533947.roa (raw, json)
Hash identifier:          DPU0GNttcGwRaZ0nzp97dx+9rlx5fwRhRcZLx61n3hs=
Subject key identifier:   68:78:84:2C:F0:3F:D3:F2:2E:45:F6:33:96:08:D5:14:46:D5:E0:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB1B552AA8C575DB34E780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f9d7ff7-5a01-3469-b972-6e43af533947.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36631
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:1b:55:2a:a8:c5:75:db:34:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=3cd23ed0-dc4b-443e-8fe2-bb8d65d14298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5f:f1:9d:7c:0a:34:69:7d:f5:2b:20:39:28:
                    16:17:24:cd:b0:49:50:92:06:b1:02:f8:c7:7f:04:
                    c7:9d:de:c8:18:9e:0f:2d:eb:58:ce:de:aa:20:85:
                    78:39:2a:59:5c:c2:28:05:d5:c7:10:48:98:ac:45:
                    d8:cd:e6:30:03:35:ba:77:13:aa:bf:df:b1:f2:75:
                    77:12:03:10:f5:8f:54:ce:2e:9c:fa:12:c6:9f:88:
                    81:b8:68:7b:42:23:0c:c6:06:e0:3f:bd:45:21:22:
                    3e:54:f9:3b:fd:24:2b:f7:46:1f:ae:e6:4d:cc:6c:
                    b6:ba:23:da:d6:a0:3e:3c:e3:1e:71:ee:05:eb:57:
                    9e:81:04:de:ef:b2:ae:b0:1d:9c:12:c6:b2:3b:a4:
                    22:29:a5:87:cd:65:e2:81:b9:07:1c:61:ec:49:e9:
                    7a:85:e0:e2:22:dd:90:9b:c1:30:52:33:51:ca:1d:
                    d2:28:87:01:92:e0:4e:24:79:ef:9f:1c:73:67:58:
                    9d:62:f7:32:34:a6:66:6d:c6:44:3b:6d:77:e4:d6:
                    55:41:4c:81:19:c6:0f:c5:85:fb:d2:69:7a:72:5c:
                    2b:e2:10:80:ca:ff:40:cd:09:bb:8e:03:41:e1:39:
                    41:76:82:51:91:e5:ef:5a:af:33:cd:32:4e:32:39:
                    8a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:78:84:2C:F0:3F:D3:F2:2E:45:F6:33:96:08:D5:14:46:D5:E0:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f9d7ff7-5a01-3469-b972-6e43af533947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:77:98:dc:a9:09:73:61:33:ce:4b:f5:17:5c:6a:1d:15:35:
         24:39:0b:86:b5:c4:b9:80:bd:91:fb:2e:30:87:e2:00:9e:89:
         87:f5:97:7e:97:d0:d5:7e:58:47:6f:b3:dc:06:10:b7:8a:00:
         63:45:18:9e:58:ac:a5:92:7c:f9:e2:1e:19:d2:f7:f4:b4:d4:
         91:38:97:12:63:59:f2:dc:a6:a1:82:36:f4:29:10:ef:23:da:
         a4:c6:42:e1:ba:39:3f:6c:48:c3:8f:4a:f3:f2:a1:5f:5b:d3:
         d1:db:22:f6:ec:a1:25:16:85:37:ec:3e:1b:b1:ea:08:16:45:
         72:7a:26:87:ae:67:23:65:87:69:30:a3:c0:11:33:48:e2:5f:
         79:e6:90:a8:e6:47:ac:2b:ae:82:64:a3:fe:1d:57:a9:89:2d:
         8f:79:56:27:f0:bb:b7:fe:94:1a:66:f0:e6:40:c2:fa:50:83:
         4f:18:47:9c:9a:dd:1a:87:1c:a0:3d:5a:45:09:d5:ed:d4:ae:
         9d:f5:bd:15:5f:dc:03:4f:e5:8d:5d:1f:18:3c:a9:e1:ff:ac:
         1d:5a:3c:b4:3e:ac:45:9a:8c:cf:ed:46:c0:98:82:7b:09:c4:
         d4:46:52:99:7a:c1:cd:7a:90:35:76:c7:9f:64:68:22:23:0b:
         57:72:48:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:34:35 2025 by rpki-client