Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58ca162c-cfe0-3a51-b71d-58b6f242ffbc.roa
File:                     58ca162c-cfe0-3a51-b71d-58b6f242ffbc.roa (raw, json)
Hash identifier:          G31H3AU1Cnrc6OI0/x6JniVvVfyPW41fFei1rISUnhA=
Subject key identifier:   81:62:02:95:0C:D0:E5:00:F6:B8:80:8C:B8:5D:3E:D4:60:49:72:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB2A4A9844E62ED159B000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58ca162c-cfe0-3a51-b71d-58b6f242ffbc.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396559
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:2a:4a:98:44:e6:2e:d1:59:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=d5da0c6f-f2da-4e86-9198-fa22e03de402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:03:8a:05:8d:15:07:83:9e:cc:c4:af:7d:14:
                    95:16:c5:52:e9:98:c1:88:19:8e:90:38:22:13:dd:
                    f5:72:d0:f5:f9:b3:95:f5:11:72:fe:41:ac:95:4c:
                    a4:14:7c:58:a3:a0:68:b2:84:d1:e4:22:fb:37:19:
                    23:69:22:3a:bb:ec:6a:fd:e2:67:b7:68:bf:b4:27:
                    21:b4:e1:cc:87:9c:33:93:17:d0:cd:c3:03:c2:de:
                    47:be:86:e2:0d:b8:f1:4c:91:e8:f5:06:04:d3:93:
                    f5:ec:91:3f:28:ec:5c:fe:33:29:38:5b:9d:9f:90:
                    da:a3:68:92:ec:63:f0:03:41:c7:c7:0f:58:4a:30:
                    35:b4:af:19:18:0e:fe:9b:2e:7b:6a:3e:79:cf:3d:
                    ee:57:fe:97:ef:62:ca:9b:7f:f6:d2:8d:7c:6f:8c:
                    0d:40:d7:d1:9a:bf:b1:15:31:d5:84:b6:98:26:7a:
                    1a:c9:9e:85:13:fd:03:f3:0e:9d:8c:80:92:a9:aa:
                    b6:fd:6e:ca:d3:16:87:aa:cd:66:63:97:39:4d:99:
                    91:23:4e:c8:2c:92:69:e3:a9:4f:5a:e9:bf:b7:f5:
                    70:cd:c5:43:7e:2d:8d:d4:f4:d8:c2:ed:3e:53:5f:
                    25:2f:e5:ba:08:b9:74:a0:c8:98:89:9a:92:e7:db:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:62:02:95:0C:D0:E5:00:F6:B8:80:8C:B8:5D:3E:D4:60:49:72:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58ca162c-cfe0-3a51-b71d-58b6f242ffbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:43:8f:b0:a0:11:d2:98:4e:52:60:87:73:4c:fe:b6:0b:52:
         a4:9d:cf:e7:f3:82:08:15:8d:6c:f3:d4:9c:07:e2:f6:f2:41:
         c6:34:02:94:c7:53:eb:17:84:a1:39:a1:f7:47:14:bd:36:cd:
         f6:38:54:02:8e:9f:5b:96:a9:c9:03:5f:6f:1d:f7:82:8a:f1:
         cd:2f:87:7c:b3:83:e0:5a:18:a8:4e:fd:2f:54:eb:f8:68:aa:
         1c:a2:10:23:5e:56:5a:c4:6d:90:48:9e:ff:2c:b7:76:d3:b5:
         49:b1:c2:c8:35:3d:f6:b5:8e:5a:b7:fe:63:fd:ba:98:a5:c9:
         74:65:74:76:82:5b:b7:6f:0b:14:66:c8:37:21:77:f0:83:b6:
         dc:5e:d2:08:f9:a0:ae:2a:82:de:33:4a:54:0a:48:1a:97:7d:
         0d:ce:1f:f6:b0:e5:ab:cf:25:4f:6a:0d:b2:13:4a:c6:5c:6d:
         4a:31:e9:34:d8:2f:d0:8a:03:d2:2e:af:94:21:85:e5:3a:63:
         57:62:a1:9e:5c:31:82:60:23:be:f2:8e:1f:60:3a:78:63:47:
         5e:20:fb:4b:bb:9f:65:66:88:fe:36:b7:9c:c6:82:20:2d:a1:
         0b:1f:9b:13:bb:71:2b:b6:1e:40:b1:40:48:e9:37:65:e7:d4:
         eb:81:5f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:27:22 2025 by rpki-client