Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95e6c772-5085-3344-8a27-8d54c55f9a8b.roa
File:                     95e6c772-5085-3344-8a27-8d54c55f9a8b.roa (raw, json)
Hash identifier:          XU7ah1/cNjX7P3GpJIA93sOh9mS/gVcmDuNFXOURYnw=
Subject key identifier:   62:0A:BE:7E:DD:D0:D2:15:DE:DA:C1:98:9E:7B:40:7A:F8:BA:CF:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB2B58066491C9C4103A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95e6c772-5085-3344-8a27-8d54c55f9a8b.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36619
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:2b:58:06:64:91:c9:c4:10:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=a1dff074-48ce-4d37-9c9c-9d12d51f0417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:5c:39:b7:51:c1:e2:9c:a1:73:fb:0f:1d:
                    ea:65:92:6b:7f:63:24:ea:7e:00:ae:70:52:97:32:
                    fd:f1:d7:82:a6:51:55:8b:57:dd:ed:e3:30:59:21:
                    d7:cd:1a:d6:3f:47:8c:98:30:99:68:b6:20:02:09:
                    80:8c:80:c2:36:90:6f:d9:fc:d8:1f:a5:c0:1d:f7:
                    9c:75:40:71:09:56:ee:fb:ff:2e:74:38:db:a1:1e:
                    01:35:5e:b0:94:57:2f:02:72:26:41:3c:fd:f6:3d:
                    83:3f:38:b5:fd:f1:ae:d5:50:b3:70:cf:dc:b6:ad:
                    07:f2:50:44:28:ae:7e:18:3d:1f:6e:65:af:c1:ef:
                    30:0e:ed:7d:37:7c:51:fe:10:cc:79:04:cd:dd:eb:
                    82:54:06:54:bb:32:f1:31:b7:fb:82:0f:c5:27:8b:
                    51:2c:c0:26:ae:ab:9b:ae:d5:80:7c:24:cf:d3:82:
                    65:5a:30:93:57:fe:3b:f2:17:af:ba:21:d1:8f:93:
                    89:90:8c:e2:6a:04:bf:ad:ff:34:b5:78:92:60:ea:
                    47:73:20:33:f5:4e:f0:92:6e:a2:cb:6b:83:04:24:
                    9d:70:40:e3:79:a4:b0:ab:d2:b3:3f:1c:92:5d:31:
                    36:b6:07:2b:13:af:c0:0b:b1:ac:8a:e3:c8:b1:0c:
                    5b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0A:BE:7E:DD:D0:D2:15:DE:DA:C1:98:9E:7B:40:7A:F8:BA:CF:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95e6c772-5085-3344-8a27-8d54c55f9a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ff:80:c9:26:9b:91:f9:21:11:a0:ed:3d:05:09:14:a9:27:
         3a:64:a2:bd:b1:ed:76:8d:5e:02:08:06:2e:5d:33:c0:57:f0:
         80:85:d9:a1:2d:64:8f:4e:3d:c2:a7:15:5b:cb:b4:b9:bd:4e:
         6e:b8:76:6a:26:14:47:8e:cd:ca:d4:b6:e2:fa:54:bb:d4:85:
         12:4f:b3:c4:67:4e:69:6c:2d:1f:84:6d:23:7c:d3:66:1a:3b:
         70:6c:67:2d:c1:86:44:8f:85:0b:e9:22:38:70:7d:95:57:44:
         63:2f:8a:cb:94:2d:75:15:a9:a8:fc:7d:7d:bf:6a:28:d0:6c:
         9f:ee:cd:e5:3c:b4:83:dc:cd:c7:ff:f7:20:e3:fa:a8:08:31:
         f2:08:28:87:03:80:af:29:52:39:19:7e:c8:4f:5b:64:cc:99:
         26:0d:94:56:c4:c2:bd:12:e3:3e:ff:60:78:6d:b1:a7:a3:b7:
         a1:4d:23:ba:ea:30:8a:3b:cc:12:b4:d6:b0:90:1d:79:df:77:
         61:da:90:ce:5d:a9:47:f0:47:7b:e4:9d:46:10:1a:ac:4b:88:
         4c:85:8b:d4:b5:05:15:2a:5f:af:87:51:37:5c:62:d1:4d:a0:
         74:0a:08:e4:b9:2d:b2:24:68:bb:dd:b3:58:79:09:02:23:9c:
         91:b5:30:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:44:10 2025 by rpki-client