Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92c736eb-d40e-3a21-ad3f-ac67dce62b04.roa
File:                     92c736eb-d40e-3a21-ad3f-ac67dce62b04.roa (raw, json)
Hash identifier:          1mfc6GVXzs6ZYWdyXPHFr99D4n8iUR3uIqfqZLyAOfs=
Subject key identifier:   15:D2:FC:FC:79:63:A3:FF:46:DA:60:96:9E:CF:B5:3A:75:39:28:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A18955F198F1AE22AEC3A1640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92c736eb-d40e-3a21-ad3f-ac67dce62b04.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     396595
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:5f:19:8f:1a:e2:2a:ec:3a:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=423b5093-a4da-4707-a6da-57a6f79f9bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bf:0c:c7:7a:ec:e1:86:16:bf:f7:84:33:ab:
                    e5:98:5f:70:9a:f1:16:9c:1d:63:e9:e8:20:b4:46:
                    f5:ad:f2:f6:20:cf:b2:0b:9f:c1:29:46:73:3a:3c:
                    d2:b8:46:e9:89:82:00:f3:07:0c:fa:37:ed:c9:53:
                    2c:f6:20:fa:46:44:5e:21:30:d6:85:89:2b:79:be:
                    86:7c:0e:a5:67:a4:4a:be:af:e2:e8:65:c4:6f:70:
                    54:f2:d7:16:a9:43:35:7c:8a:ed:0a:43:75:bd:86:
                    bf:13:c1:c0:f8:89:67:bd:f0:76:62:9c:1e:3e:8c:
                    7e:3d:e6:1b:95:8b:db:79:f5:f8:19:48:f1:d6:c7:
                    76:fb:19:94:4c:87:fc:7e:55:e0:80:53:31:65:ba:
                    9a:38:15:01:2b:35:42:ed:49:ce:38:93:99:38:61:
                    3e:db:80:23:fb:3f:50:f3:b9:b5:84:54:dc:2a:2d:
                    d6:10:56:ec:6d:3b:ac:cd:5f:66:c2:a3:72:62:44:
                    b9:9b:b0:f6:3c:c9:fa:f8:0a:a0:e8:cd:18:cd:2d:
                    ab:47:3e:f9:87:62:31:1c:bc:fd:bc:d9:51:af:2c:
                    32:01:56:d1:93:e1:2f:2d:f3:36:15:cc:c2:d8:c2:
                    91:9e:c4:69:38:92:6d:98:6a:30:f3:33:d7:47:7a:
                    02:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D2:FC:FC:79:63:A3:FF:46:DA:60:96:9E:CF:B5:3A:75:39:28:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92c736eb-d40e-3a21-ad3f-ac67dce62b04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:51:35:51:82:3d:e1:57:7a:55:f9:11:c6:0b:d2:90:41:ca:
         30:a1:51:89:82:21:82:11:fb:ae:b6:98:97:4f:48:e6:10:e2:
         7d:d6:ef:81:a4:2c:3d:26:8f:e9:83:86:a8:30:02:28:c9:85:
         54:cc:31:eb:7e:21:18:eb:b8:57:42:a7:a7:cd:08:c4:62:01:
         82:36:fb:6f:61:5f:57:af:5c:cf:f7:16:04:f0:a3:eb:f9:9c:
         9a:d9:60:64:06:ea:e4:f1:e7:9f:d2:1d:de:5d:59:8a:0b:6b:
         df:a2:89:43:58:cd:10:ef:47:59:7a:41:32:a1:87:55:a6:ca:
         e0:cc:c0:af:8c:9e:4a:27:0b:62:00:0a:2e:74:c7:55:57:47:
         3a:3a:11:cf:df:19:ce:81:3b:91:4a:93:db:b2:5a:5b:88:a4:
         64:9e:cc:7f:01:55:cc:19:1d:ae:31:9f:1c:35:57:07:7c:51:
         76:45:70:b7:0f:c0:62:fd:c3:aa:f6:d2:89:85:7d:5d:10:54:
         66:c3:0b:96:a2:68:29:d2:e7:08:8e:37:2e:d2:0e:69:b4:86:
         e1:75:c3:07:67:8a:03:14:1c:16:5a:23:ce:79:8b:da:27:53:
         dd:47:71:66:51:be:1a:4c:b1:a9:92:3f:45:e9:8d:78:59:82:
         ca:ab:e1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:19:45 2025 by rpki-client