Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbc90a26-c772-3421-9661-4d4303ec6b8f.roa
File:                     cbc90a26-c772-3421-9661-4d4303ec6b8f.roa (raw, json)
Hash identifier:          lvgx8H/GIMrCAblyqVzPure7ltxCNOiQ/SS5AaSUj7A=
Subject key identifier:   4E:37:3E:58:B3:40:18:85:50:D6:81:AB:68:03:C0:D0:C3:14:93:97
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F715439238A27B34C7ED8600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbc90a26-c772-3421-9661-4d4303ec6b8f.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396616
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:43:92:38:a2:7b:34:c7:ed:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=b819a647-3300-47a0-a241-57136f7e4c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ae:ef:09:65:98:44:ee:4d:d5:ca:ba:85:68:
                    1c:f1:e9:d1:a7:1e:6c:0a:94:91:4d:7f:c1:4e:95:
                    78:8c:a0:b6:c8:8f:55:d7:ec:81:21:61:a6:55:70:
                    dc:e0:45:dc:78:d5:60:6c:1d:d5:f3:fa:2c:5b:b8:
                    d1:30:f5:fe:3b:0d:90:9c:21:59:00:e5:67:f2:5a:
                    b7:8b:bd:2a:bc:08:6b:36:15:67:01:0e:a0:f3:cd:
                    07:a9:ff:07:e1:86:24:a9:20:20:23:d9:29:b9:89:
                    83:9d:74:bd:e5:25:c8:8a:1c:de:ff:1c:48:78:e0:
                    bb:52:3f:d3:9a:0f:87:e8:61:29:b4:fc:b7:be:f5:
                    2e:9e:3f:a4:7e:83:2f:dc:b4:20:25:0c:6c:c9:32:
                    44:0a:f1:49:e6:2f:dd:52:ea:c7:78:a2:69:b7:6a:
                    2b:be:22:10:a7:6f:f4:b2:e2:4d:5c:43:43:a7:76:
                    19:ee:5e:7f:d5:4d:ce:0d:d1:64:f3:aa:a5:aa:f3:
                    91:f8:91:76:f3:cf:6e:2f:de:6f:2e:82:07:3e:d0:
                    4f:a6:36:e9:a2:99:4a:95:e4:36:a0:44:da:a4:44:
                    58:00:23:6d:b4:27:c8:2b:ab:7e:55:86:5d:e7:02:
                    2e:b1:46:82:4a:ab:20:ea:4c:45:06:fb:7c:6e:a3:
                    4a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:37:3E:58:B3:40:18:85:50:D6:81:AB:68:03:C0:D0:C3:14:93:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbc90a26-c772-3421-9661-4d4303ec6b8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c0:3d:d2:81:10:19:2b:38:d5:d5:27:98:d2:c2:51:27:9b:
         da:aa:af:4f:21:9f:ba:88:16:c8:84:7d:3c:9a:3b:b4:08:aa:
         73:cb:2b:b1:2f:83:1e:91:6f:50:61:77:68:cc:99:a3:70:13:
         c2:18:7a:8a:0c:9a:b3:fd:9a:59:aa:95:35:e1:a4:e4:e1:22:
         15:21:fe:d5:47:8c:1b:26:86:e4:a8:8e:41:e1:6f:bc:37:1f:
         2d:c7:33:f3:93:e0:0c:8d:0c:7e:35:f9:ec:ac:94:fe:65:25:
         7d:26:4e:df:9c:40:7d:d1:77:f0:0f:01:69:dd:d7:4f:ef:cd:
         19:1c:49:ae:19:a8:2c:59:d8:27:e8:61:78:31:29:8d:5e:77:
         21:8c:ae:ac:36:ba:50:0a:16:4c:f7:9f:c1:ea:f8:1a:aa:bb:
         92:0c:09:ea:46:6a:d8:67:08:38:9c:6e:f9:df:34:a3:80:ea:
         1a:92:d2:6e:1b:78:de:29:ab:67:c4:aa:37:7d:28:d5:53:1c:
         cf:df:60:fc:63:f3:09:7f:af:a7:85:0a:64:45:19:f4:09:c7:
         0c:12:b8:08:39:2d:45:0a:2c:53:9c:3c:e7:0f:ad:1d:95:f1:
         04:e9:4e:8f:ea:02:12:f7:a1:af:8d:29:9b:c4:9d:83:2b:46:
         fb:24:ef:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:42:49 2025 by rpki-client