Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d3112a4-4c61-31f2-9255-ad5414eea87c.roa
File:                     7d3112a4-4c61-31f2-9255-ad5414eea87c.roa (raw, json)
Hash identifier:          AaCF5txQ7x+euwHZeErrNBblZnUaP0L86CAs/JdWtEM=
Subject key identifier:   DA:32:3D:92:44:09:CE:FA:D2:1D:3C:F0:A1:9B:DF:D6:90:28:A4:0B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB1BFB1438AFA74FC4CC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d3112a4-4c61-31f2-9255-ad5414eea87c.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396570
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:1b:fb:14:38:af:a7:4f:c4:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=bb0caad9-852c-42e6-be19-52df88e1cba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ff:14:e4:83:f5:65:bb:b0:bc:08:90:39:be:
                    32:81:aa:10:21:86:3c:2d:2e:6e:11:30:de:f6:4f:
                    b2:48:25:20:88:c6:21:90:d3:68:d9:d2:03:65:8e:
                    d1:ca:ec:fb:29:42:ae:92:82:79:2f:05:d3:b8:d4:
                    5f:78:cc:e4:a2:30:9e:44:59:d7:93:d3:1c:45:03:
                    6d:74:14:7b:25:34:6e:68:b8:6a:d9:86:03:76:70:
                    04:91:44:b9:4a:9b:ff:f1:f6:08:1b:f0:64:19:10:
                    ce:33:d2:e3:f9:3a:d8:b0:b1:94:d0:c1:03:9a:f0:
                    6d:74:ba:37:b8:79:d1:5b:4b:5a:4a:de:70:4c:b2:
                    7a:31:67:8e:1c:06:bc:d9:06:ae:e9:a4:33:9b:4f:
                    5f:49:5c:a7:42:95:30:ed:07:e1:55:05:4f:d4:51:
                    04:d1:66:a9:11:6b:ec:30:e8:5f:88:22:3b:2c:2a:
                    28:c9:cc:f7:9d:18:70:3f:21:8b:11:d5:02:0a:de:
                    e1:d0:b7:fe:c0:45:5b:16:5c:00:88:aa:11:1d:77:
                    ee:db:78:35:1d:97:38:19:d8:9d:86:a0:a8:a0:0f:
                    ac:17:0b:fc:58:f8:a8:71:76:14:84:98:36:36:7b:
                    ed:80:36:42:6a:4e:51:f7:a0:57:57:b0:e9:58:57:
                    7f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:32:3D:92:44:09:CE:FA:D2:1D:3C:F0:A1:9B:DF:D6:90:28:A4:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d3112a4-4c61-31f2-9255-ad5414eea87c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:21:46:70:ae:39:6a:fa:65:3f:94:37:56:f2:50:f2:2c:fe:
         7f:ed:c5:34:d8:3d:8d:78:a0:fa:13:57:0b:f5:7e:48:45:e8:
         ed:fe:9a:50:28:86:37:8c:e8:e8:f7:87:99:a7:ee:82:27:88:
         95:60:cf:b4:c4:19:94:e8:f3:73:4f:06:24:98:96:b4:61:78:
         f0:96:28:83:04:ef:8d:0e:d8:ff:4e:69:f2:ca:e6:4e:0c:00:
         4c:62:35:d8:3a:6e:bc:2f:ae:ee:c9:ae:9c:99:6f:5c:13:8f:
         d6:5c:ec:ae:43:1c:99:d8:61:e8:73:df:f9:09:cb:dd:82:5d:
         73:47:01:64:55:f4:29:2a:6a:2d:28:3d:e1:e7:f0:17:63:6a:
         74:db:84:ee:ab:6e:36:02:70:c4:da:05:61:ce:35:81:8d:8e:
         db:ae:42:ab:8f:22:25:45:b7:8d:3c:30:2c:d9:79:8a:2c:d2:
         92:48:be:c6:7f:55:a6:09:bb:cb:9a:8b:f0:6d:cd:18:5a:da:
         18:28:ad:57:71:88:e1:a9:29:d7:0c:0f:b1:02:53:15:7b:77:
         6c:fb:dd:47:8e:6b:24:00:ca:45:68:b8:e9:a3:ab:99:c6:c0:
         5f:61:ee:9c:0a:74:92:84:73:4f:cf:4d:0b:98:6d:20:5e:2c:
         0f:6c:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:46:15 2025 by rpki-client