Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74b2c461-aa47-3c3b-b787-5b1cd212521c.roa
File:                     74b2c461-aa47-3c3b-b787-5b1cd212521c.roa (raw, json)
Hash identifier:          V7+JdUL5DrHgzlohGM66pxmc+cdHaBb2JklVd8bwfa4=
Subject key identifier:   40:EA:3A:EA:E0:B8:C5:9C:56:8A:A0:79:85:9C:BB:29:E6:36:37:B5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AABC31E5760004A9D3200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74b2c461-aa47-3c3b-b787-5b1cd212521c.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     36632
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:ab:c3:1e:57:60:00:4a:9d:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=e05b6e84-0817-4065-baa6-e8cb92f13cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:56:b1:58:9c:24:53:9e:47:70:e7:0c:74:d7:
                    4a:3d:56:70:58:28:90:76:5c:cf:78:4b:76:c0:30:
                    53:19:47:ec:bf:dd:88:7e:ca:d5:09:52:65:57:92:
                    ee:03:37:f4:fc:30:d0:00:5d:b4:41:81:79:be:f3:
                    86:4a:ce:c8:d8:31:85:6f:0c:e8:2e:f3:73:85:34:
                    21:05:18:d4:a9:c4:10:a8:fb:b1:fb:a9:39:51:07:
                    55:39:9d:d1:3e:11:dd:ae:01:55:f9:10:cb:26:8a:
                    8f:87:90:8f:c4:fc:50:39:a5:a4:a7:bb:51:aa:28:
                    4d:1f:35:74:f9:e7:21:66:a0:2a:dc:aa:be:79:6d:
                    c8:93:79:74:b8:50:54:c3:20:a1:bf:4d:11:41:f3:
                    f8:f3:70:94:81:34:78:bb:06:ea:50:60:eb:16:f0:
                    e2:e1:46:74:bc:08:89:a2:29:f4:5d:14:6f:e2:5c:
                    37:bf:66:a0:17:af:12:ee:f0:e6:c0:09:94:ed:7e:
                    31:69:98:0b:8b:c6:c5:a9:5f:6c:35:b2:48:24:ab:
                    d8:6c:51:d2:22:f3:5a:38:59:52:0a:fe:75:b5:9b:
                    6f:44:90:2f:5a:aa:a3:f6:a6:ab:b8:61:cd:9a:da:
                    c7:c3:f5:fe:d5:ce:48:e6:bf:7a:59:43:5e:87:d7:
                    f6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EA:3A:EA:E0:B8:C5:9C:56:8A:A0:79:85:9C:BB:29:E6:36:37:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74b2c461-aa47-3c3b-b787-5b1cd212521c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5f:55:3e:90:46:b1:dd:5a:6a:f1:5f:21:e8:3a:5d:3d:c0:
         d1:11:ac:9e:96:22:97:ab:84:9d:7d:97:22:f7:60:ff:3a:e1:
         c2:95:e0:e7:8b:63:18:58:fd:69:e7:d0:2f:06:cd:24:f6:ec:
         22:11:c4:a9:07:97:54:d0:f8:c9:2d:41:95:3f:7d:d0:2a:12:
         2f:17:c0:00:6d:cf:a8:81:12:a1:fb:71:19:c5:3d:5e:3f:47:
         73:b2:2f:98:e1:f6:24:7c:1f:bc:19:15:fa:c0:96:84:ba:14:
         c3:dd:12:33:be:ff:ff:73:b1:7a:46:eb:7f:b1:6f:aa:c2:fd:
         bf:5d:02:eb:46:0a:24:1a:fc:3e:d6:4f:90:c4:c4:d4:6b:d2:
         8b:cf:60:53:6c:50:dd:7e:97:45:55:4f:1d:d4:7b:88:9b:12:
         88:a4:4a:40:79:89:ec:a4:18:27:7e:1b:15:b4:56:de:52:e2:
         72:e7:53:22:bd:55:7f:91:b8:5f:ac:1b:1f:27:d4:5e:37:41:
         b9:02:73:14:97:57:39:ae:c7:b6:34:39:f7:c8:37:b6:fb:d5:
         50:16:b2:f5:5b:53:b2:9d:fc:76:6b:27:2b:36:a9:1e:91:23:
         ed:67:db:ed:57:37:92:09:95:53:47:98:c4:5e:cd:f4:ae:c0:
         56:3e:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:40:03 2025 by rpki-client