Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a9e86cf-0224-3832-ac4a-8cbee1a85838.roa
File:                     7a9e86cf-0224-3832-ac4a-8cbee1a85838.roa (raw, json)
Hash identifier:          Kb/q2wBhttqkNPq25G8/MDINN8+jesjPkwxGIWun6wo=
Subject key identifier:   65:1D:46:DE:10:1B:CB:8C:DA:ED:97:B5:CE:25:16:16:AF:1B:93:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AA746EC30ADE60A47A4C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a9e86cf-0224-3832-ac4a-8cbee1a85838.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     396549
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a7:46:ec:30:ad:e6:0a:47:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=224b912c-6f5f-448e-80d1-99445b10dafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:ee:78:06:a9:8d:3e:86:35:8f:23:3a:7b:
                    a5:c6:4c:d0:fc:42:fb:14:57:26:c9:95:2f:cf:55:
                    aa:61:45:f6:77:38:da:56:93:36:63:e1:29:6c:34:
                    94:5e:56:18:d2:58:14:45:96:89:ad:a8:bb:ff:fa:
                    75:6c:44:a7:28:92:83:5f:6e:1e:f1:9b:13:57:b4:
                    71:eb:12:25:73:f3:43:f0:66:7b:61:9c:b0:0e:8f:
                    74:bf:a5:9e:fb:55:73:cd:22:4e:70:ba:36:c7:5a:
                    98:c0:95:c1:99:03:e1:d6:1d:d4:64:6c:c7:af:d4:
                    24:7a:f1:1d:ac:ca:be:3b:6e:7c:15:84:fe:1d:55:
                    8b:b0:a5:50:48:f9:42:81:bf:a8:d1:10:58:af:e7:
                    29:f5:e1:c4:b9:39:5d:38:83:ec:6b:3c:02:cf:82:
                    ed:7f:e6:57:5f:07:7a:8e:f5:fb:fa:8f:bf:68:18:
                    21:f9:e3:83:90:f7:9f:16:db:55:39:7b:e8:4c:83:
                    16:5a:68:04:ee:04:05:fe:46:b1:0a:93:4b:c6:00:
                    45:48:09:d2:52:18:f3:43:42:30:fc:d9:eb:dd:30:
                    39:b5:70:af:c6:72:09:ae:5d:22:b2:d8:17:58:39:
                    8a:ed:e2:83:12:40:b8:28:95:2d:9d:5e:3f:96:54:
                    5b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1D:46:DE:10:1B:CB:8C:DA:ED:97:B5:CE:25:16:16:AF:1B:93:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a9e86cf-0224-3832-ac4a-8cbee1a85838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:8b:c4:b2:04:bb:73:f1:d2:b9:47:08:68:51:21:25:6e:64:
         8c:73:62:c5:ea:06:47:f8:5a:fb:a6:3f:6f:66:fe:bc:1a:d4:
         93:d8:d8:0d:11:f5:72:1a:7a:c1:46:bc:2a:fc:af:03:86:74:
         c9:d0:88:a1:33:fd:c3:59:f4:b8:d2:7b:27:a2:ff:24:2d:67:
         40:fe:4f:51:23:67:f6:af:a4:09:61:62:5d:99:5a:92:67:5c:
         02:44:0b:1f:1a:07:94:87:3a:ee:c4:e9:0c:7c:3c:8b:a0:8f:
         b5:74:31:11:a7:40:f6:29:78:9e:17:78:b9:98:2a:83:67:9e:
         d7:ae:3c:c4:53:17:1d:6c:15:1e:c8:02:39:96:30:a5:11:f2:
         52:c1:f0:69:ee:52:ee:27:20:3e:5a:39:5d:43:45:d5:9c:e4:
         3d:e3:c5:76:73:1a:8f:95:36:07:6d:39:9d:a0:aa:09:03:bd:
         ef:2e:16:4f:5c:2b:28:e4:b9:59:bf:4a:7a:e9:4e:f3:b8:82:
         a6:c0:e7:12:bd:cf:ce:82:0b:01:4d:fb:b0:d8:98:71:e0:7c:
         26:07:3c:5e:bd:10:77:18:3c:14:6c:c8:47:1f:a1:6f:80:48:
         d9:d4:38:1e:dc:4e:a8:e9:80:50:9b:62:76:d2:c2:44:a1:f8:
         b8:ad:22:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:38:06 2025 by rpki-client