Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df3a3076-4869-3a4b-b0fa-2b94a1f52fec.roa
File:                     df3a3076-4869-3a4b-b0fa-2b94a1f52fec.roa (raw, json)
Hash identifier:          7Yj3ADmfZJbFy9KLq/a3/2aDCZG0Ja2NhUyHps07ViU=
Subject key identifier:   56:E0:86:66:68:53:D8:06:54:D2:C9:5D:CB:54:DD:17:E7:93:B8:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB269449B821625071C280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df3a3076-4869-3a4b-b0fa-2b94a1f52fec.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36629
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:26:94:49:b8:21:62:50:71:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=59c92213-9f9d-4bbd-bb66-4e2ed1bc4b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:58:44:72:08:f7:b7:f2:a4:e3:31:f9:93:28:
                    87:c9:42:53:5e:c6:fb:dd:7c:59:7b:bd:3a:aa:88:
                    b6:c9:67:cf:b2:f5:ca:03:8b:fe:9a:5a:63:7a:cc:
                    69:fc:7a:f3:4a:e9:20:96:d3:e3:11:13:03:37:25:
                    87:95:ed:13:af:d2:7f:6a:97:59:82:cb:20:6b:fa:
                    f5:49:3c:9e:19:34:d7:0c:44:ff:38:b0:6c:0a:90:
                    08:47:e5:69:29:24:e0:94:82:9a:ef:41:03:88:59:
                    1c:6a:79:a3:02:63:58:ad:5f:fc:c0:09:a9:b7:67:
                    f6:8b:4f:7f:c6:9e:9d:f9:b8:4d:e7:19:9d:9c:63:
                    0a:c9:36:b6:d5:00:a1:ab:e5:de:ee:4e:16:d1:d6:
                    82:46:82:c5:84:9c:82:3c:f0:40:6d:9d:45:aa:6c:
                    eb:b1:e5:4e:f5:12:9b:5d:6c:23:80:eb:12:9d:06:
                    39:32:5e:52:7d:dc:fa:57:dd:9f:13:2c:29:51:b7:
                    45:6b:91:d8:00:7f:a6:c0:78:2c:22:66:d8:37:c4:
                    5a:f9:ba:57:38:62:44:61:7e:87:12:eb:a7:17:79:
                    6a:8b:76:f6:e6:c2:0c:a7:6b:eb:93:db:71:df:f3:
                    b0:b9:b1:b8:0e:24:94:52:31:26:4f:42:9f:f8:26:
                    e8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E0:86:66:68:53:D8:06:54:D2:C9:5D:CB:54:DD:17:E7:93:B8:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df3a3076-4869-3a4b-b0fa-2b94a1f52fec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:47:8d:14:3c:1a:0a:98:63:d4:00:4a:3b:49:09:e7:34:17:
         59:87:68:26:ff:8e:c9:19:04:33:aa:67:e0:fb:5a:24:1b:32:
         e5:71:52:2b:24:63:96:32:05:84:e6:1b:45:73:cf:d1:f9:56:
         2d:d6:53:78:cd:8a:f7:9f:69:70:85:ce:04:1c:5e:80:75:57:
         a4:75:72:2e:0a:f5:5d:f6:ae:42:ed:42:bf:c7:ca:81:8b:2b:
         17:45:74:2b:1d:6d:97:f6:7d:bc:be:15:38:6a:4d:40:d8:7c:
         07:93:f2:95:6e:7f:68:99:49:cb:77:ee:a6:33:75:b1:f6:de:
         7e:0a:bd:86:34:d2:d4:97:42:4d:be:2c:60:19:2a:1f:a1:5f:
         72:52:7c:e0:38:b2:6e:aa:5b:6b:ff:3c:86:f2:a8:d6:68:ae:
         b8:91:92:f6:bd:98:d3:af:a8:70:6d:4b:00:e8:f1:af:a1:e6:
         72:9d:92:32:96:43:1b:46:b4:3f:66:50:26:27:45:c8:83:b0:
         ea:0b:0f:73:9a:0e:13:80:6a:2f:3c:a3:21:cd:22:8c:d9:cc:
         7a:c3:fb:d0:11:bb:b2:06:c0:c6:36:a6:7d:c4:66:f3:21:d2:
         ce:57:94:d3:14:a2:fe:19:70:84:4a:a8:51:3a:64:ea:f5:38:
         c1:39:e3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:22:11 2025 by rpki-client