Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/757337b7-0336-3ae2-a64d-77ec53564190.roa
File:                     757337b7-0336-3ae2-a64d-77ec53564190.roa (raw, json)
Hash identifier:          ARHfbr3GBjDaABcd5Vg4/4O6xoDBaileRWQ87KfOMWw=
Subject key identifier:   96:DF:C1:50:BC:1D:97:E3:FD:B2:3C:22:60:DF:E5:89:57:FA:76:36
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A18955DCF6B601C9A74EBE510
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/757337b7-0336-3ae2-a64d-77ec53564190.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     36623
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:5d:cf:6b:60:1c:9a:74:eb:e5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=77e484e6-9404-4d94-a840-a9e263d07c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:1e:90:f4:16:62:b9:73:62:87:f3:18:cf:
                    2c:d0:1c:90:d0:8d:83:7e:d3:89:1f:9c:af:2d:ae:
                    20:fd:48:27:28:e0:6d:ac:3f:c5:3f:20:08:07:12:
                    4d:d4:6e:6f:90:1c:d9:74:28:23:74:b2:77:6b:01:
                    ee:ca:3d:da:4b:98:b2:62:17:35:7d:24:47:2b:de:
                    88:41:70:56:b0:8f:c0:25:7e:a2:cd:d4:0a:a1:48:
                    52:04:aa:a0:a3:29:83:47:fc:a1:b9:6b:07:29:8c:
                    fe:d8:6c:00:b5:c9:da:1a:54:62:5a:8a:0c:24:ed:
                    d0:84:a8:9e:bb:9d:00:4d:5a:10:d3:b3:85:ad:c0:
                    22:4e:27:e2:45:86:c4:da:0d:f5:fa:0d:77:f2:85:
                    45:e0:6c:63:44:d7:56:d2:42:a7:c3:ea:5d:c8:95:
                    04:0a:eb:28:c5:d2:d5:bf:a7:78:1c:a0:32:b2:a6:
                    a1:0b:9d:f4:bf:f1:aa:47:7a:d8:a7:88:ab:29:d5:
                    d9:65:cb:c2:0a:27:cb:34:f6:56:66:b8:bb:02:27:
                    98:b6:63:1a:c2:d0:90:fc:63:fa:1c:bf:57:e1:f7:
                    9e:36:62:32:7c:dd:60:18:e0:7f:04:d8:51:2c:77:
                    f4:d6:01:29:61:fb:0a:a8:bc:f5:61:23:84:fe:c2:
                    1d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DF:C1:50:BC:1D:97:E3:FD:B2:3C:22:60:DF:E5:89:57:FA:76:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/757337b7-0336-3ae2-a64d-77ec53564190.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:a5:fc:90:d2:25:b6:d9:0b:05:4c:4f:f8:74:54:20:5a:b8:
         49:db:9a:65:09:3a:6a:1d:aa:2f:52:8d:ab:8d:8c:4d:fa:50:
         da:89:e4:80:44:6f:26:e3:04:22:b1:f2:e4:16:3b:b1:b7:68:
         0d:44:97:22:ad:a6:30:f9:8d:53:cf:c0:00:af:57:b4:5c:89:
         f0:a5:9c:f8:4f:07:b2:12:ca:a1:c8:9d:7a:09:3f:36:b2:01:
         af:5a:82:c9:bd:fd:ec:12:2e:e9:4f:85:dd:f2:b6:a1:27:a4:
         67:95:93:67:ec:b7:8f:26:d5:5c:a3:c3:8a:e9:a1:c6:93:e6:
         c8:c0:df:a9:60:1f:50:6d:d9:1a:95:af:ae:b4:39:0f:fe:fb:
         da:47:38:7b:96:60:8d:4d:9b:9c:f2:a7:1a:74:ef:73:f4:4e:
         d5:98:8e:c9:ba:7d:c5:f3:74:f5:46:59:1d:1d:4b:19:71:41:
         ec:40:52:ba:87:e1:fc:73:58:43:5e:70:bc:d5:13:b5:f8:a6:
         19:de:77:40:a5:38:6d:35:18:be:ee:f3:d0:b9:7f:25:1b:72:
         cd:b9:0c:33:f1:99:ff:64:f8:88:28:60:64:4d:25:74:15:01:
         3c:dc:a4:70:db:e1:f1:ae:05:d8:5f:10:a4:44:4e:9c:19:59:
         9c:fa:71:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:41:37 2025 by rpki-client