Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57241840-7779-393e-aa0e-8657fbe304a3.roa
File:                     57241840-7779-393e-aa0e-8657fbe304a3.roa (raw, json)
Hash identifier:          gNfjA0j6vEwI0sPdYdlItmsQ8bcj0qLfRohoHBGTcM4=
Subject key identifier:   0C:2C:21:43:E7:84:BD:AD:C6:25:CC:D1:D7:ED:26:65:9A:B2:B4:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F7153D27AA2E7925BDACFE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57241840-7779-393e-aa0e-8657fbe304a3.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396567
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:3d:27:aa:2e:79:25:bd:ac:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=f664f2bb-57f7-4477-8db6-371b9de3e72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:cc:e0:7d:6d:b7:d4:44:6c:04:3a:ef:da:
                    8e:cf:a5:be:fd:b8:1a:4f:9f:e2:3d:80:7d:cb:14:
                    2d:84:35:70:27:ce:27:82:d3:03:54:a8:ec:f9:89:
                    09:07:ed:c3:34:5e:da:21:32:51:dc:50:dd:b5:dc:
                    f1:0f:18:01:68:e5:b3:a5:bb:76:26:11:d3:34:8d:
                    76:bf:bc:82:33:d1:77:13:4b:c7:9d:44:71:cd:61:
                    db:6b:fd:b2:5f:b1:5a:e7:62:7f:09:38:a2:70:3e:
                    22:40:01:75:e3:80:ae:eb:05:84:12:39:e5:e3:a5:
                    ae:89:23:14:35:5c:73:31:6a:ed:e5:4a:15:e2:b6:
                    61:f6:8b:73:72:12:5b:48:6f:f3:35:87:43:97:ea:
                    79:f9:bc:93:59:b4:fd:45:b0:b4:2f:bf:a9:b7:ef:
                    05:d9:c9:e1:40:b5:49:3f:9a:0e:89:88:e8:b6:13:
                    39:87:b7:92:d7:1f:67:54:46:90:71:98:24:c6:1b:
                    a7:d8:1a:f0:9f:d2:51:b0:5f:eb:be:46:5b:53:2e:
                    58:f1:8a:f4:2b:1b:79:7f:4c:4f:0d:ea:8c:cd:a9:
                    48:55:8c:e9:9f:50:d2:87:84:7c:b3:08:7d:f4:5f:
                    36:8c:fc:b8:2f:04:f1:c6:10:4c:fd:45:07:a1:bf:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2C:21:43:E7:84:BD:AD:C6:25:CC:D1:D7:ED:26:65:9A:B2:B4:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57241840-7779-393e-aa0e-8657fbe304a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b4:39:8b:b9:44:90:00:67:3f:bc:e0:f3:08:1f:dd:15:e1:
         38:45:79:5e:58:54:85:d5:8f:9c:0b:44:40:07:10:ea:13:a6:
         f4:f8:44:a8:54:21:d0:cc:14:26:b3:9e:13:bf:e3:cc:d7:94:
         e5:30:c5:9e:8d:77:dd:da:df:04:c6:df:38:03:6c:97:be:d5:
         fa:db:18:d3:e0:8d:d9:d6:b0:72:39:6f:c4:32:f0:22:2c:e7:
         22:9b:f3:92:e0:97:e1:ca:c1:63:4b:a8:5a:4b:b0:7d:d2:24:
         c0:77:86:a4:f4:a5:7e:3c:1b:25:3a:f5:55:24:43:90:ad:0d:
         ed:5d:7a:63:36:95:84:93:00:b4:0f:bd:f8:11:b2:48:b5:99:
         ae:a3:97:47:aa:85:4f:a7:6a:19:42:01:00:c8:88:30:de:c8:
         16:3f:84:07:b7:b8:c4:ad:6f:39:14:58:43:5d:06:07:f9:3d:
         b4:a3:60:f4:e8:65:c8:b8:c4:2b:ec:df:e3:4d:d9:56:ee:64:
         a1:21:a7:c7:a7:01:9d:db:bd:aa:c0:7f:e7:f2:fe:77:bf:a4:
         7a:d9:2b:42:67:cc:94:45:01:40:a3:04:70:4b:dd:98:e1:45:
         5c:93:fd:9c:8c:68:8e:c3:07:86:1c:6b:03:99:66:0a:50:1c:
         de:33:7d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 09:40:27 2025 by rpki-client