Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c497899-28a6-344f-9f3b-685d71f55bb6.roa
File:                     9c497899-28a6-344f-9f3b-685d71f55bb6.roa (raw, json)
Hash identifier:          hRK9KVPx7PM5iGp9dGsOzs8ZOzQnPE79eANHf73+Yk0=
Subject key identifier:   18:55:2C:AD:9B:E7:6C:1A:A8:15:95:02:5A:6C:52:6E:9D:C4:E9:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F715440A0422E1996286A2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c497899-28a6-344f-9f3b-685d71f55bb6.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396600
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:44:0a:04:22:e1:99:62:86:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=ba444b3e-00d0-4087-ac14-1b4bea0ff04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:8c:c6:4d:55:9a:51:d2:64:9e:90:68:cd:
                    11:7e:8e:86:f9:6f:39:1e:bd:c2:58:b7:55:1e:e7:
                    f1:2d:92:cb:0a:60:b0:a4:23:ba:ec:72:54:1b:83:
                    84:78:c1:7c:0b:52:9e:95:9f:98:57:ea:af:d1:6a:
                    75:7f:87:4c:1e:31:f5:31:fa:19:3f:64:75:ca:58:
                    32:b3:40:1c:1b:d7:96:92:6c:d5:2e:b4:b6:35:38:
                    d6:d1:fb:2c:3a:d2:0e:95:29:1d:5b:25:50:f8:fa:
                    db:cc:81:97:ee:91:df:b6:54:a1:f9:69:75:ee:ab:
                    35:04:a8:cd:28:5f:a6:08:7e:83:01:33:3a:c2:f8:
                    b2:0c:72:89:25:14:8c:e5:77:0b:2e:0f:e3:2f:e5:
                    62:78:fb:88:d9:93:63:2c:22:8a:89:b6:ef:06:0c:
                    95:e1:b4:86:c4:76:c5:8c:4e:68:ee:d4:d5:d4:49:
                    06:80:f0:bf:8a:4e:a8:34:8c:24:ec:c9:86:74:65:
                    bd:7c:9f:7d:05:c4:05:71:b5:a9:09:0d:2e:36:18:
                    2d:da:ec:98:d8:1e:da:ef:58:98:47:80:ab:9b:c8:
                    b9:d7:ee:1c:42:bf:2c:78:57:b5:86:2b:f9:0f:f9:
                    f2:a6:4b:1e:7d:40:64:08:d6:b1:fc:61:fb:80:88:
                    d3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:55:2C:AD:9B:E7:6C:1A:A8:15:95:02:5A:6C:52:6E:9D:C4:E9:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c497899-28a6-344f-9f3b-685d71f55bb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:0e:22:71:6d:92:c5:72:27:f4:99:e9:ff:f6:24:1a:50:fd:
         18:da:12:7e:a1:da:08:32:b5:3f:eb:ec:08:22:8c:06:0d:55:
         59:94:f3:ef:b1:e4:45:59:d9:86:e3:2f:80:5e:b2:95:8d:0b:
         9b:cd:7b:eb:12:52:2a:75:cb:7c:8b:5a:7d:b6:09:b7:3c:68:
         45:de:6c:9f:c9:8f:5b:00:2e:bf:7f:ff:d8:57:8d:2c:fb:a9:
         b1:52:40:8e:6b:d8:43:ec:0f:a1:29:48:8a:4a:18:cd:25:82:
         a7:ef:0f:a6:f3:31:70:55:c0:92:69:bd:55:79:ee:ac:b9:23:
         85:1c:f5:ef:2e:9f:7e:40:c2:ea:d0:65:53:54:95:0d:49:0e:
         61:6d:db:ce:00:9a:a8:09:91:6e:60:c8:77:83:13:b8:b2:9e:
         7f:f5:3e:76:ba:4c:8f:38:66:5a:60:fd:a8:ec:78:92:13:06:
         49:00:33:6d:c2:28:55:c9:77:7e:84:3a:97:20:88:92:b2:60:
         bd:f2:c0:80:0d:82:e8:0a:e2:e2:6b:30:d6:2c:54:0e:9d:14:
         49:fc:ce:46:2c:ff:af:d2:2f:26:d2:2e:77:ac:4a:8d:58:77:
         4f:0b:f3:9d:52:0f:7f:17:5a:d4:23:bb:97:e4:21:b3:1e:35:
         3a:b2:20:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:34:54 2025 by rpki-client