Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6740e279-47b1-349f-a51f-df58c2ebb861.roa
File:                     6740e279-47b1-349f-a51f-df58c2ebb861.roa (raw, json)
Hash identifier:          22i3qAu2Kbr8/+VrK3xOpl4egaQcBrblz1nTqDjXxa0=
Subject key identifier:   EB:64:C6:D6:A3:B1:5C:1D:5B:20:2B:4A:D6:AB:22:1A:B4:67:00:79
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AAC7D0CEA146EA1BBA000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6740e279-47b1-349f-a51f-df58c2ebb861.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     396568
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:ac:7d:0c:ea:14:6e:a1:bb:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=d5d3cf86-fcd2-42a5-8890-101478acd7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:95:ed:50:68:81:b5:b7:15:23:3b:65:de:
                    18:c0:2b:69:db:e8:8c:57:97:56:ca:26:b4:ce:69:
                    36:21:4b:72:b9:ca:2a:86:72:86:f0:80:7d:36:50:
                    24:62:14:57:c0:ac:6d:e5:63:47:70:31:b7:26:84:
                    bf:6a:44:77:2f:62:b0:e8:df:99:64:f4:37:73:56:
                    90:34:95:df:1d:1c:7a:f9:87:c0:f0:69:61:2d:01:
                    3d:e8:44:cc:8f:7b:af:38:8a:a0:38:25:e1:9f:92:
                    1b:0f:7a:27:d6:77:82:83:be:db:42:d2:bb:50:2a:
                    74:48:c9:64:2e:17:96:5a:b5:8b:dc:73:a0:14:c5:
                    8e:6c:5e:aa:89:77:d9:8c:ae:c5:93:cf:f8:03:90:
                    6c:d2:b0:a1:95:ff:60:60:9e:80:bf:9b:5a:e7:44:
                    13:42:bc:ec:f3:d1:2c:f9:a6:cb:0c:62:85:28:d8:
                    83:76:35:5a:cb:dc:6c:f3:16:02:df:97:98:e2:86:
                    11:e3:83:a8:60:70:e1:71:4c:e0:55:d5:45:1e:19:
                    8a:9e:68:0d:49:f2:e6:e5:1a:ac:ce:9c:fb:7f:24:
                    26:fb:ac:f5:51:76:0d:e5:cb:38:7f:35:20:fe:47:
                    92:b3:56:1a:05:9a:6c:10:43:12:3c:91:b6:d2:0f:
                    39:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:64:C6:D6:A3:B1:5C:1D:5B:20:2B:4A:D6:AB:22:1A:B4:67:00:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6740e279-47b1-349f-a51f-df58c2ebb861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:73:0c:9c:dd:94:9e:90:0f:ce:96:14:ef:81:51:c9:f2:e1:
         9e:07:9e:22:c7:02:fe:be:b8:53:6e:32:cb:72:15:48:06:19:
         eb:90:1d:b0:42:f5:e1:45:df:a3:9c:78:7c:43:71:6b:41:33:
         35:d0:c1:a3:5a:91:f9:3f:f4:07:9c:32:de:fb:77:0c:1e:4e:
         98:d4:ae:1c:c9:79:71:5c:18:d5:a0:2a:31:52:e6:48:0b:10:
         bd:be:b9:0f:6c:e9:64:ab:40:37:cf:a2:72:b8:52:16:e9:84:
         13:f3:73:12:3f:00:ee:35:b4:3c:82:3c:28:9a:d9:73:15:09:
         af:b7:c6:ab:39:96:9d:03:a0:93:88:28:53:c7:a2:43:87:8a:
         03:60:57:5e:f4:1a:d1:52:e8:e0:1c:b4:9f:37:ed:53:1d:01:
         5c:4d:63:bc:ab:65:51:ed:f0:95:64:37:55:33:95:c2:a3:ad:
         66:b7:42:2f:1a:8e:6c:9c:13:3e:bc:24:f8:bc:67:b6:a8:e0:
         85:6d:1a:9c:49:c2:09:b8:91:56:54:9f:1c:f9:b2:b3:b1:9c:
         09:5d:13:29:8f:82:ed:69:ab:0a:16:37:3a:cc:17:53:8a:d4:
         52:1c:97:4f:f8:8d:c2:5e:74:42:fe:66:4a:1e:00:ea:e3:db:
         d1:d6:b6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:33:32 2025 by rpki-client