Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dccb56a7-fc83-308a-97bb-134448d5889d.roa
File:                     dccb56a7-fc83-308a-97bb-134448d5889d.roa (raw, json)
Hash identifier:          WcFqwGcGaEBk876sspLeK+fivD9/mIUsnO4wCXLIW3M=
Subject key identifier:   A6:5C:20:D5:1F:99:04:A5:CE:AB:4A:A8:9A:12:7C:5A:73:F4:22:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB257DA7C2239A35458200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dccb56a7-fc83-308a-97bb-134448d5889d.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396555
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:25:7d:a7:c2:23:9a:35:45:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=cae2b692-65f8-4f90-9df0-a771579c5df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:71:20:68:de:1e:36:c5:dd:ec:7a:fc:98:e1:
                    d5:22:ff:50:f6:4c:1c:5c:65:5e:22:83:09:3f:b6:
                    ad:49:7d:cd:6b:39:3d:12:bc:e9:96:5d:d7:f5:fb:
                    26:c2:12:10:99:20:24:48:41:9e:fa:0b:68:27:11:
                    76:e7:c1:48:41:90:12:d6:b5:1e:1c:be:37:4d:81:
                    b5:86:5c:f8:d0:54:98:7a:b4:be:13:70:c7:7c:5b:
                    b3:f5:3e:36:a1:52:d3:b9:91:0f:4d:3b:a4:59:bb:
                    80:9e:6d:73:71:e6:44:13:4d:0d:3d:a4:20:18:02:
                    ca:a6:17:b6:ab:20:a2:44:88:d4:18:f0:f3:e6:6a:
                    27:a8:1b:c7:2c:f1:c2:ad:8a:91:5b:28:7e:57:e5:
                    1f:32:85:68:60:47:38:d3:87:8b:41:f0:6b:cc:5c:
                    25:bc:ba:12:9e:65:cd:63:1f:9e:77:82:cb:0b:b1:
                    14:22:12:f1:4d:46:e7:1a:c8:52:9d:df:28:ef:be:
                    dc:ad:63:5e:49:00:72:07:be:86:c9:30:a0:31:22:
                    ba:c6:a9:78:20:e0:ea:d3:5b:81:81:50:59:7f:a7:
                    90:15:a5:f4:83:54:ff:01:07:c7:14:9d:00:9e:8e:
                    ac:ca:9a:d2:f9:50:a9:89:de:78:03:d7:de:36:36:
                    61:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5C:20:D5:1F:99:04:A5:CE:AB:4A:A8:9A:12:7C:5A:73:F4:22:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dccb56a7-fc83-308a-97bb-134448d5889d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:e8:7e:9a:42:af:d2:68:01:ea:ed:19:57:de:b2:6e:aa:a9:
         99:62:6a:f5:b4:5c:93:db:2f:0f:05:0c:5d:64:52:08:f2:96:
         79:7e:96:fa:a7:6a:13:90:f6:cb:21:03:09:7c:ee:25:6b:68:
         7d:60:72:9e:ac:6d:53:82:86:da:04:12:1a:93:e7:79:5c:99:
         91:84:b9:93:0d:ed:00:19:14:31:87:00:dc:5d:aa:dd:32:19:
         6f:cc:43:e1:c9:cb:68:cd:40:1e:6d:26:10:40:ab:f7:2d:48:
         a9:55:19:02:04:f7:48:28:74:3c:b6:b6:03:81:3c:b9:82:c2:
         22:16:b0:4c:a8:b3:95:53:c3:8f:32:f1:94:c0:18:7e:14:2d:
         b1:35:13:c8:da:87:70:97:44:22:90:26:2e:e3:a6:ce:6c:7d:
         b5:c6:50:9c:75:6c:e7:9f:94:53:c3:1c:d7:6e:3d:af:0a:23:
         3b:e5:81:73:0c:ff:4b:09:3a:63:ca:d5:c9:a5:44:55:8e:a7:
         14:d7:2c:80:28:8a:9e:b9:f4:c2:9b:5c:9b:bd:8c:0f:55:ed:
         8b:66:58:8b:39:5e:d4:74:34:40:3e:6e:91:0b:8e:6d:c5:f6:
         89:83:51:4c:8c:5e:5e:79:1c:94:eb:6f:31:71:a1:7d:fc:1b:
         b4:a0:2f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:40:41 2025 by rpki-client