Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878b7987-5a90-3d1f-8353-c3365eaec1f5.roa
File:                     878b7987-5a90-3d1f-8353-c3365eaec1f5.roa (raw, json)
Hash identifier:          LLg0A7xdZ+2ZaozT+RExoAugNUYby/Eh8RcnpAeuI5Y=
Subject key identifier:   AF:09:D3:80:3D:26:8E:A7:31:D6:2C:4B:D3:9D:A0:87:23:48:26:D5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A18955E2ED443ED6B8E5BB3B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878b7987-5a90-3d1f-8353-c3365eaec1f5.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     396593
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:5e:2e:d4:43:ed:6b:8e:5b:b3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=e0d9157c-edb7-4d02-a5d8-0e232501aa6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:67:13:d8:77:a2:0d:de:84:c2:84:d8:f0:
                    14:e6:e5:7a:ac:30:43:c9:00:5f:87:a8:cb:b8:2b:
                    d9:95:c6:0b:8e:13:65:ab:fb:f9:78:74:f1:1e:dc:
                    5d:53:cc:84:5a:98:e4:af:1d:9d:d3:07:cd:1a:c5:
                    b6:d7:57:0b:53:23:8e:92:e4:89:46:48:8f:79:62:
                    a9:f7:22:e8:38:a8:0e:c1:80:7e:07:6e:d3:f8:6e:
                    09:96:7d:7f:94:38:75:06:82:39:67:8b:85:be:d8:
                    ff:48:8d:0c:f1:dd:ef:73:4d:54:72:0b:b9:c1:f8:
                    c6:07:0c:bf:b2:53:81:2a:61:7d:be:1c:94:2a:69:
                    14:b6:61:f8:73:c7:60:03:f4:5c:16:26:d7:3c:a0:
                    f0:6a:56:f5:30:04:c2:fc:92:72:40:3a:96:0b:ab:
                    91:3d:a6:6c:cd:0c:b3:c7:ad:01:35:a0:b3:d6:42:
                    06:8b:b6:92:b8:4f:f3:39:7b:e8:ac:7a:87:e0:43:
                    df:23:0c:7c:ef:c0:16:c5:ab:e2:a7:27:66:99:87:
                    8f:8e:c2:59:69:14:51:fe:16:ec:b9:c6:a2:f0:ce:
                    98:16:d5:ce:70:55:c3:f6:0a:21:c3:e8:05:18:0b:
                    e0:ce:32:f9:c3:d3:33:3e:2b:c1:3b:f5:8b:fb:4d:
                    84:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:09:D3:80:3D:26:8E:A7:31:D6:2C:4B:D3:9D:A0:87:23:48:26:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878b7987-5a90-3d1f-8353-c3365eaec1f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:54:83:57:fa:30:d6:38:db:53:3b:8e:67:30:08:79:05:6a:
         4c:2d:66:92:7a:0a:5a:af:e3:1d:e6:7f:c8:04:4e:5d:d7:d8:
         ba:35:54:77:01:96:51:f6:33:54:43:05:c5:70:78:80:6f:0a:
         b7:70:5a:5f:77:78:b5:44:b8:77:47:af:7b:00:82:02:e6:e2:
         55:58:fe:b2:90:71:d5:26:18:f7:fe:22:75:5e:02:4b:60:3e:
         47:f2:6a:6a:8b:cd:4e:3f:1a:f8:4b:f5:fb:3a:91:3b:01:8c:
         bc:90:0b:00:73:2c:75:44:72:81:c6:95:c1:42:93:67:d8:13:
         8c:f8:8c:b5:bb:6c:6e:b4:58:90:54:35:8b:ed:f4:6d:4d:1d:
         d8:ce:06:0e:db:ad:0a:a0:f7:67:60:7c:c1:fd:55:3d:49:34:
         89:5d:25:36:d8:b1:df:47:16:a0:47:fe:c1:d6:ed:8f:87:f1:
         d6:cc:fa:7a:9e:c1:e4:02:09:93:38:97:48:b8:94:8c:3a:15:
         33:75:9f:f7:8a:1b:fa:61:eb:fb:56:40:b9:15:b6:a9:9b:98:
         73:f9:04:af:5e:8e:11:5b:c5:0f:c3:a5:31:cd:08:5a:2a:7e:
         2f:3f:83:ab:91:2a:f0:00:be:de:59:63:e6:57:5b:68:3b:75:
         43:99:ad:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:33:11 2025 by rpki-client