Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5002f4f3-5e56-38c2-8338-a4689a9f155c.roa
File:                     5002f4f3-5e56-38c2-8338-a4689a9f155c.roa (raw, json)
Hash identifier:          pdhMrwDtX3rIfWX8h4SO7HybuskxjhZZXCJyJeCVN+s=
Subject key identifier:   D7:D8:87:1D:72:D6:63:71:A6:E9:BB:4A:DB:45:2A:FB:F6:32:E5:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB12A34EB470F3F4888E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5002f4f3-5e56-38c2-8338-a4689a9f155c.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396582
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:12:a3:4e:b4:70:f3:f4:88:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=4eff91a6-6952-4b3f-b490-872c229cb3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:da:3d:af:b5:cd:10:ba:d1:a7:c7:61:36:cf:
                    b2:b1:4e:f7:e4:d2:cf:4a:2d:97:d1:6a:19:c3:bf:
                    2e:2e:d6:e7:77:a4:a5:c3:3f:f3:7c:d6:df:27:3a:
                    aa:52:d1:81:90:09:b8:d2:9c:c4:79:2d:4b:c5:44:
                    14:06:cb:50:e0:8e:67:0a:ed:3e:6c:7b:58:26:f7:
                    cd:88:6a:05:bd:8b:a0:50:82:0f:44:ca:7e:d3:bf:
                    a2:91:dd:39:c3:f5:78:34:75:e2:41:24:09:e9:b6:
                    0f:55:42:72:5f:33:dd:c5:f4:05:72:b1:4d:3d:64:
                    74:37:fa:3e:f3:84:e1:fd:01:f6:0c:9b:cb:f1:53:
                    ac:64:63:3a:cb:c3:6a:68:34:a4:a2:a8:d1:2d:66:
                    f2:f7:c0:00:16:39:f2:c5:a4:88:b9:8a:bd:88:1f:
                    fe:f6:2f:f9:62:a0:98:d5:40:12:ed:30:f0:e7:c1:
                    74:7d:58:b0:34:b6:1a:44:7f:14:10:3f:31:3f:84:
                    5e:80:6f:18:a1:33:69:a9:d9:c7:50:6c:5a:35:a7:
                    23:65:a2:5f:d2:0e:83:84:c8:51:b7:30:4c:c2:84:
                    83:3c:80:a5:e6:8b:e4:ef:17:4b:7e:72:6a:b1:92:
                    bc:cf:e3:15:2d:d0:01:de:55:dd:8f:03:fe:e4:15:
                    69:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D8:87:1D:72:D6:63:71:A6:E9:BB:4A:DB:45:2A:FB:F6:32:E5:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5002f4f3-5e56-38c2-8338-a4689a9f155c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:98:14:da:64:65:6e:c2:fc:85:e7:2e:37:76:e1:59:99:af:
         f5:e0:5a:58:48:d6:0a:0e:58:d8:ea:81:df:25:7a:c7:e3:7c:
         0e:ef:8e:1b:95:18:46:ff:ee:e2:09:1a:a7:45:e7:ce:7e:ab:
         bc:6f:1d:be:a3:2d:5e:ff:57:31:3d:29:c0:e9:ce:3e:e4:d8:
         56:32:d9:87:85:17:3a:d6:73:82:f4:d7:95:5a:70:4a:88:2f:
         5d:de:e7:ec:cc:a0:c0:5f:26:8a:48:28:1d:22:81:d3:f3:11:
         f8:59:20:11:79:9c:45:f2:29:c1:a4:62:27:8d:35:a5:e5:77:
         93:58:19:92:72:c3:74:93:30:a3:bd:bf:40:f0:e8:9b:bc:86:
         53:4f:cc:db:4c:55:b9:4d:51:20:9c:8c:37:0d:88:1c:90:7e:
         41:29:34:39:58:84:9b:5c:e7:56:c3:97:a1:e2:c2:10:fd:68:
         f6:b8:49:92:ae:14:19:44:0d:9f:7f:f1:36:1a:12:00:0c:f9:
         a0:1d:be:63:e4:4a:25:a2:21:67:37:6f:65:2d:81:7e:8b:ff:
         87:d5:f4:2b:6c:26:53:9c:f5:89:23:8e:6f:9a:56:92:ea:44:
         c3:d0:88:18:05:cd:cd:e6:91:d1:32:a2:13:3d:33:d1:91:c4:
         a0:87:ae:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:45:57 2025 by rpki-client