Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bab711-1fdc-38fc-bd8d-74a23887793e.roa
File:                     c3bab711-1fdc-38fc-bd8d-74a23887793e.roa (raw, json)
Hash identifier:          YQ2RH/gWPlPWl7eXy01Zyb9HBuB1+yP2UNAjUBd22TE=
Subject key identifier:   04:0F:2F:2F:4C:76:00:11:17:F1:B5:98:85:ED:6B:93:82:59:E8:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F7153D35B953413843740820
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bab711-1fdc-38fc-bd8d-74a23887793e.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396582
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:3d:35:b9:53:41:38:43:74:08:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=19bb131e-a6af-4d31-a803-1aff50a02fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:0e:be:0d:7e:e8:1f:c4:51:73:d1:d5:0b:
                    fe:b5:9b:2b:41:ec:77:43:a2:dc:10:59:9b:57:32:
                    cc:3a:17:94:b1:1b:9c:b4:e8:cd:6d:cb:e0:6b:06:
                    e8:1c:0a:43:2c:fe:eb:f9:7d:3d:63:63:a6:10:ab:
                    ec:c5:1c:03:b5:c8:d8:41:be:ba:10:a7:ab:1f:61:
                    ef:a7:b0:3d:4e:10:36:cb:ee:ac:62:3b:c8:29:1a:
                    aa:f2:35:67:22:22:64:7e:17:6f:27:36:85:61:ab:
                    4e:d0:9b:0c:14:7f:8f:93:af:e9:18:1d:f5:da:64:
                    01:48:aa:14:db:ef:24:89:99:6a:68:f7:10:2e:22:
                    92:e5:ea:8d:9c:c7:fb:08:8b:f4:04:88:d8:b4:e0:
                    f1:a9:39:c7:e9:7f:7f:d1:9e:f4:88:1b:fe:c2:a4:
                    08:46:41:0c:b0:10:33:da:48:75:bb:c0:cc:17:52:
                    10:df:80:9b:4f:b0:78:44:72:01:c9:16:92:bc:93:
                    bb:f5:4b:6c:cd:8b:5a:19:8e:f9:d8:31:a6:21:60:
                    81:95:93:6d:da:e3:50:7a:cf:46:46:6a:22:74:19:
                    5f:42:3f:88:69:ea:22:4d:8d:fb:10:ee:41:b0:65:
                    f2:27:cf:cc:e5:dd:5e:41:d3:d1:23:06:37:37:34:
                    e1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0F:2F:2F:4C:76:00:11:17:F1:B5:98:85:ED:6B:93:82:59:E8:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bab711-1fdc-38fc-bd8d-74a23887793e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:04:fe:03:c0:88:95:84:6b:d1:43:69:98:9a:06:e6:fd:de:
         e7:7b:e5:02:ed:53:dd:3a:c6:06:2e:44:ae:99:00:ac:9c:82:
         61:db:3e:d5:e5:37:f7:21:a1:fa:27:a6:06:7b:c3:41:04:ed:
         8a:38:0c:79:c6:da:4c:be:81:7a:fb:09:e3:01:a0:22:98:c1:
         dd:76:15:c3:30:f3:dd:bb:6a:d2:83:91:1b:04:8e:52:50:54:
         1e:57:6d:a2:0c:62:ba:83:83:d3:62:de:b7:00:d3:11:31:39:
         61:cb:18:60:d1:f1:85:18:bb:cf:ea:5c:c6:4b:6e:2f:38:57:
         f5:80:3e:c8:69:44:95:e3:3e:db:f7:ba:f8:c1:88:40:de:a9:
         88:21:7a:df:ea:d4:17:96:43:bf:a8:83:0f:50:98:1d:bb:8e:
         4c:76:10:86:8d:3a:ec:7a:9d:1b:dd:4a:83:70:ec:2f:1c:a1:
         47:9f:ca:21:dd:a5:d3:1e:74:aa:0b:73:ee:70:13:75:c9:ea:
         3c:1b:f2:e1:cc:bd:89:da:34:9f:40:ab:05:17:ad:13:ff:79:
         d6:47:e4:07:e9:9a:5b:c4:c2:3d:8f:15:a1:93:fd:f6:4f:3c:
         b2:3b:5d:7b:ea:15:c3:71:dd:05:e8:b4:d4:8a:03:98:30:73:
         f2:a0:45:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:35:18 2025 by rpki-client