Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a56f50cc-4006-3487-b22e-23c0be29eb04.roa
File:                     a56f50cc-4006-3487-b22e-23c0be29eb04.roa (raw, json)
Hash identifier:          dvnQ0ZsNJftAcbWqR0+clEoVGZusQHdstIuLJd9e56g=
Subject key identifier:   25:13:26:D7:10:CB:13:5A:68:9A:7D:06:B5:0C:F5:B9:D8:E7:48:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DAFD02D9A8CA820A847D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a56f50cc-4006-3487-b22e-23c0be29eb04.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     397196
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:fd:02:d9:a8:ca:82:0a:84:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=1cacef36-533d-402a-bc5e-323fea6c2118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:25:d3:c1:da:82:cd:58:23:d7:c6:f1:b7:49:
                    d6:62:4a:5f:bb:d3:aa:6b:df:93:fe:a6:42:54:9c:
                    c1:95:df:db:ed:2a:be:a5:b1:fb:5f:a9:3f:bc:da:
                    b5:ff:d7:cb:13:7a:2c:c5:da:0c:3a:7a:26:e0:8e:
                    ec:cb:9b:2c:5e:2b:96:68:48:19:c0:49:ff:38:46:
                    99:8b:ed:4b:0b:aa:3f:4a:b1:09:13:1a:7f:d7:48:
                    4a:2a:a6:4b:a0:ea:a8:c9:eb:80:67:cd:45:d3:5a:
                    5e:82:36:a3:e9:f6:bf:03:f9:f3:2a:a2:35:98:fc:
                    0f:a1:dd:1d:aa:46:eb:9d:26:3a:d9:d3:86:77:c2:
                    eb:8c:5a:2c:30:23:6e:44:5e:83:b7:63:3f:24:d7:
                    3f:7a:e6:9c:de:59:68:77:c1:c5:e5:30:91:3c:76:
                    bb:52:d9:b8:7a:8d:19:a8:fd:6c:5e:0d:0f:11:a0:
                    b9:99:a8:65:54:aa:e3:82:a2:42:97:a4:bb:7d:94:
                    18:30:7f:45:8a:da:b1:1e:79:d8:3b:21:c5:bc:72:
                    0e:58:2d:ab:a2:de:0d:da:eb:e9:c9:26:02:f8:02:
                    30:b2:ba:63:e6:a1:0f:52:06:c2:66:44:69:e8:d1:
                    bb:cd:6c:c1:0f:63:04:6e:b2:b8:49:11:af:9c:cc:
                    0a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:13:26:D7:10:CB:13:5A:68:9A:7D:06:B5:0C:F5:B9:D8:E7:48:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a56f50cc-4006-3487-b22e-23c0be29eb04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:4b:c3:2b:a5:42:ed:66:96:1b:22:d7:54:a5:ef:71:37:a3:
         3f:7a:5e:86:a1:3d:91:d8:95:e9:c3:dc:50:d5:50:42:67:36:
         24:55:c3:40:7d:0e:77:bc:bd:19:2a:97:af:90:40:e2:b4:68:
         54:97:a2:70:ff:57:bf:72:34:7b:07:a5:d5:0f:38:2f:79:52:
         0d:af:29:64:b9:e2:60:91:4e:ee:4b:9a:81:be:70:0e:70:ec:
         3f:46:b9:34:60:19:64:cc:45:ab:7f:37:c3:ea:7d:b8:86:14:
         31:38:4b:02:aa:e6:41:0f:51:c7:70:9c:5d:bb:21:14:a2:24:
         a6:b6:e3:51:3d:20:1b:43:b3:55:6a:7b:ec:ff:03:66:62:ca:
         92:95:84:22:5a:28:ef:ad:4f:b1:86:2b:7f:10:18:ec:8a:27:
         9b:e6:56:f6:d4:37:67:0a:54:2d:0d:8f:a1:46:e7:ad:1f:cc:
         5c:36:67:ec:fc:45:87:e3:48:37:85:3b:55:a6:3d:f3:60:f1:
         39:52:c6:33:ca:ea:06:6b:67:79:06:97:56:b5:9e:33:1c:85:
         d2:dc:e7:76:cf:8c:10:47:27:4d:fd:2e:3b:07:e6:cd:50:bc:
         e8:92:07:8c:2a:74:70:ba:0f:f7:52:5d:13:0e:d7:08:63:b4:
         9c:b2:fb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:40:29 2025 by rpki-client