Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad2a6468-f7aa-3116-8f11-4d47c81bc1fa.roa
File:                     ad2a6468-f7aa-3116-8f11-4d47c81bc1fa.roa (raw, json)
Hash identifier:          haKhhbizeJGtig/b9/AsawCSU3S8guZpsWoApt2//cE=
Subject key identifier:   FC:4A:CD:A1:7F:69:05:69:2E:DD:70:03:09:DA:8D:59:5B:78:FD:4E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB0D8DB2934B4941DA78E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad2a6468-f7aa-3116-8f11-4d47c81bc1fa.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396826
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:0d:8d:b2:93:4b:49:41:da:78:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=a62012b4-5f11-485b-9973-7bf8581b8b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:11:12:4e:8c:77:23:2f:b4:b4:a5:2f:d5:8a:
                    d1:02:b1:72:99:46:e1:cf:eb:e6:ce:e4:91:02:aa:
                    a4:93:14:ae:2d:3f:a7:b9:14:91:75:bc:6f:ef:49:
                    5c:89:4e:11:3b:c1:08:19:78:02:4a:26:69:a0:51:
                    15:54:6c:df:77:d7:6b:b6:45:76:0c:40:1f:ab:3b:
                    2f:95:5e:49:01:7c:88:21:33:31:dc:33:d3:47:56:
                    53:e5:71:1b:b5:dd:45:c2:38:2e:de:73:d2:25:70:
                    66:36:7e:02:58:30:82:38:92:e8:f1:7c:be:9b:55:
                    26:07:ec:ae:c4:ef:09:78:fb:a8:10:1b:ae:70:50:
                    d6:d7:88:8a:e3:a1:30:05:aa:94:c8:8d:11:8c:d4:
                    ef:c2:d4:8d:8e:dd:31:6f:7e:e8:9f:4a:5d:c7:ae:
                    c1:8d:15:06:bc:19:c5:ec:19:6a:99:24:90:19:85:
                    1a:7b:1f:96:fa:af:ae:0a:35:03:2f:e2:4b:71:5d:
                    22:29:ba:d6:57:a7:d1:3f:dc:d7:61:d6:f6:b2:2d:
                    29:81:66:9a:6f:45:0b:f9:03:f9:64:ec:aa:c5:fb:
                    5c:5a:51:84:fc:0b:c3:3e:d5:ff:0b:ae:18:c8:5c:
                    82:5b:93:67:50:df:0f:1d:63:0c:b3:25:32:89:8c:
                    77:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4A:CD:A1:7F:69:05:69:2E:DD:70:03:09:DA:8D:59:5B:78:FD:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad2a6468-f7aa-3116-8f11-4d47c81bc1fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c4:50:b1:cf:10:0d:92:04:65:ed:8c:4e:6c:d6:97:6b:3c:
         38:aa:ee:15:85:2b:48:97:77:e2:28:9b:64:2b:7a:47:03:1d:
         86:00:a5:c2:d9:2f:5d:c0:53:f5:f3:da:76:1f:ef:14:fb:e5:
         d7:41:c7:0b:76:9f:6d:9b:6a:1a:7e:2c:8d:97:10:22:c1:a3:
         f4:fe:62:a5:4b:a7:4a:1f:22:50:a3:f3:97:03:27:6e:35:f7:
         77:11:7e:27:55:74:c4:59:72:ce:3d:57:d2:f4:44:3b:97:36:
         22:a4:ef:2a:3b:7e:a7:81:f1:51:67:b5:61:64:20:36:73:b5:
         3f:54:df:4b:31:7f:d6:6f:9c:c3:74:0e:06:b9:be:e1:fd:38:
         e8:e0:c3:5d:5e:b6:fb:22:32:9f:3e:0b:13:1f:0b:24:9f:22:
         92:b6:09:51:be:33:82:00:3c:09:b9:04:b2:85:e7:97:7b:93:
         70:f4:3e:42:44:02:7d:76:90:b7:63:04:fe:17:a9:bb:d8:94:
         e6:f1:7b:95:94:46:2e:fa:ca:f9:03:6d:f3:63:f4:e6:1c:3e:
         8a:15:45:69:04:3f:31:9b:53:e4:39:46:5b:57:0e:0e:55:fa:
         c7:28:be:58:65:12:bb:d0:0d:c9:ba:5c:6b:83:52:dd:a8:d8:
         f7:57:2e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:45:55 2025 by rpki-client