Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd8370be-7559-327e-b24e-3701ae63ac64.roa
File:                     bd8370be-7559-327e-b24e-3701ae63ac64.roa (raw, json)
Hash identifier:          3VHroTdqhgNdU7C8zvFIcnz/e6SFVghfovbXcNAHHok=
Subject key identifier:   E4:62:1C:E8:D3:F7:7F:6F:39:A2:25:FD:59:95:E5:47:DA:F0:42:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A03A5626A257F0E67ED691280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd8370be-7559-327e-b24e-3701ae63ac64.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     21313
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:62:6a:25:7f:0e:67:ed:69:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=ab949038-3d67-436d-8767-9b536f0ad625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1f:8f:a7:d9:4e:f4:5a:f9:91:f6:82:c0:1c:
                    61:b7:7f:53:70:8c:71:d4:18:64:91:32:6c:49:c6:
                    2c:6a:99:87:b9:9a:a1:be:43:e9:c1:30:98:a9:7b:
                    0b:b4:55:a2:89:34:38:89:0f:b8:f6:12:60:1e:00:
                    10:fe:fb:dd:d6:29:aa:31:c3:90:1d:1b:96:90:96:
                    5f:30:44:02:63:a2:dd:c8:9d:81:7d:a1:50:6c:57:
                    88:7b:d1:c4:eb:c2:9b:c4:94:b8:c1:b3:e1:d5:5a:
                    75:a6:26:7e:da:5e:53:6d:7a:30:ec:b8:9b:40:bc:
                    3e:9d:1c:6e:c6:cc:cc:35:d3:cf:d8:4b:76:a5:92:
                    e3:4a:d1:4a:45:b1:f2:0e:a0:43:e7:86:6e:0a:3e:
                    c5:82:05:4b:3a:d3:29:b4:22:76:e8:4e:3c:1c:40:
                    de:4d:83:98:89:c6:cc:cf:4c:ec:eb:87:6d:55:31:
                    40:13:a5:5f:a1:40:54:24:10:11:08:69:50:1f:bf:
                    50:fe:2e:bc:05:1d:92:7e:ca:8f:35:01:c9:8d:20:
                    63:94:a5:92:be:45:8e:da:81:a7:98:16:1d:0d:9f:
                    46:ce:0a:aa:0e:a4:21:c3:dc:2c:87:58:9b:d0:45:
                    69:a1:fb:1d:a4:ee:a3:cd:b0:de:da:0a:e1:60:c0:
                    f9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:62:1C:E8:D3:F7:7F:6F:39:A2:25:FD:59:95:E5:47:DA:F0:42:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd8370be-7559-327e-b24e-3701ae63ac64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d6:d5:93:57:49:14:d5:fc:0c:42:89:29:05:c0:0e:4e:7c:
         72:69:14:14:d3:78:c5:f7:d4:fc:03:9f:c0:8e:a0:05:bc:0c:
         62:2a:03:66:c1:b1:aa:ac:36:a5:eb:6b:de:2d:89:6a:f6:17:
         4a:33:ee:01:39:d1:cd:4f:a6:d3:6a:14:fc:65:4b:ac:18:f4:
         23:74:5d:32:3a:df:99:6c:3f:ae:74:4d:6c:e1:f9:0c:d6:e6:
         7d:cc:c0:f1:61:d9:d4:0d:bf:ee:03:3b:3e:40:80:b0:b9:83:
         d0:01:fe:2d:9a:c6:fe:b7:6e:a4:ee:8b:8c:e0:db:36:60:91:
         b2:db:fc:e9:5b:6e:8a:c9:ec:9e:bf:2b:51:9f:d4:47:68:f1:
         47:f5:b8:fc:c8:76:1a:be:09:5a:d2:65:aa:d0:71:cf:c0:60:
         26:7d:f5:cd:74:96:0a:40:f7:fa:a3:c7:eb:d7:da:99:4f:0e:
         dc:31:96:39:20:49:54:b3:5b:f7:3d:f8:45:09:75:1c:15:5f:
         0d:1e:7c:3c:f7:bc:47:4e:6b:da:cb:89:a0:fe:e3:1f:26:1c:
         c0:aa:30:ad:4a:78:79:ed:08:38:b4:bc:6b:30:24:39:df:44:
         e2:a6:de:d4:ba:ee:80:c9:8b:ed:4d:71:89:d2:d9:3c:90:12:
         30:4e:f4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:31:48 2025 by rpki-client