Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7644bdae-5e30-3662-beb2-5f7b376dde7a.roa
File:                     7644bdae-5e30-3662-beb2-5f7b376dde7a.roa (raw, json)
Hash identifier:          dMh1H6BJSp9UPRlt0fr2OjBbhWfw8MeDv0Qqo8Gri20=
Subject key identifier:   0F:03:8F:6E:BC:F5:5C:74:91:52:54:4F:91:4E:BD:52:A9:0F:F9:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F7154089F3729614E7F7AB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7644bdae-5e30-3662-beb2-5f7b376dde7a.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396566
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:40:89:f3:72:96:14:e7:f7:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=4362c013-efd3-4250-ae51-3cb27516e64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b7:86:75:ea:19:d2:db:c7:1e:a6:e0:1f:b5:
                    f0:01:d3:05:1b:3e:b9:1f:84:39:e4:c5:05:dc:46:
                    83:2c:83:88:bd:f0:d1:5e:11:24:ce:8e:f1:4c:4d:
                    4c:1f:a5:ba:61:72:74:8e:59:28:e6:16:e2:36:80:
                    81:dd:78:4a:2a:c8:8c:72:79:b5:22:18:00:fa:f3:
                    d6:44:a9:51:72:a6:a4:cb:0f:25:a4:57:70:98:d3:
                    bb:6d:7f:53:2e:9f:cc:2a:66:34:17:f3:b5:53:2d:
                    e8:43:fb:70:d8:9d:ff:93:76:65:e0:50:de:d0:0b:
                    57:b7:3c:d3:3b:dc:56:98:5c:01:23:af:f0:ec:95:
                    44:34:57:0f:1e:ca:6e:f4:5f:57:8f:d4:be:f4:35:
                    95:a6:d9:60:76:2c:f2:67:6e:9a:e3:b9:13:c7:ea:
                    6c:9e:c5:fe:ed:2d:3a:a7:2d:6e:dc:30:17:d6:c3:
                    74:22:f3:a2:66:9e:0b:48:ee:e7:92:3b:87:b9:22:
                    3d:18:dd:56:44:0e:ae:a4:3a:bf:2a:b8:29:00:e4:
                    b2:74:d0:38:4b:30:00:0e:45:ee:f1:38:99:45:65:
                    ff:2d:c7:b1:61:62:ee:ca:8f:ba:b3:f8:a0:79:30:
                    76:d7:56:3b:c1:49:db:7b:23:6c:8b:34:4b:7b:6e:
                    3d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:03:8F:6E:BC:F5:5C:74:91:52:54:4F:91:4E:BD:52:A9:0F:F9:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7644bdae-5e30-3662-beb2-5f7b376dde7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:4f:36:1f:8c:c2:69:91:63:93:d7:12:f0:0d:f5:fe:97:16:
         e6:12:c9:f1:f8:08:3f:2e:a5:c3:e4:36:d7:93:6e:59:ce:f1:
         39:9d:43:3d:63:60:c6:7a:16:81:c3:54:2d:50:63:f8:82:d2:
         39:36:94:f3:37:da:0e:b7:97:ec:b9:93:94:0b:65:09:52:d5:
         cb:3d:fd:b0:e0:fa:fb:e1:68:b4:a4:56:ba:8a:56:44:0c:6f:
         29:95:04:f7:36:a5:f7:dc:fe:e6:e5:2a:40:e9:00:3d:b1:b4:
         75:f7:4f:69:c7:57:0e:f7:8f:bc:7d:87:8a:6d:1d:1e:ba:aa:
         71:c8:87:3e:13:63:a2:f5:0a:6b:a9:3b:83:32:16:eb:5e:a3:
         4f:c1:b3:c3:14:02:97:52:f8:f0:2b:d4:af:ec:bf:42:68:1e:
         c8:15:07:cb:48:f6:93:64:c8:13:80:3a:7a:6b:8a:42:1b:fe:
         56:7f:b2:3e:12:26:18:84:6a:97:3d:c2:8a:ac:4a:7e:21:1a:
         bc:20:8b:ef:c9:f7:f1:95:af:22:ff:44:c4:2d:5d:fe:2a:16:
         84:6c:e3:a5:6e:a0:3d:9e:a0:97:22:79:b0:c4:c7:e1:f1:5e:
         55:33:c2:86:71:c1:42:ba:1b:22:5c:2d:f7:60:34:f4:71:e5:
         da:9f:63:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:46:04 2025 by rpki-client