Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8260b40-a72c-39fe-8fe9-a3a782ad6148.roa
File:                     e8260b40-a72c-39fe-8fe9-a3a782ad6148.roa (raw, json)
Hash identifier:          r6bb/Uneeljloan1e2u22CYNZyPGkC03eTHbKvqqjnA=
Subject key identifier:   FA:98:A1:7A:BC:DE:4D:66:83:01:FF:E0:F4:7C:94:57:FB:C8:BC:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AAC087D45F070A9683680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8260b40-a72c-39fe-8fe9-a3a782ad6148.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     396599
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:ac:08:7d:45:f0:70:a9:68:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=6da6c2a0-e402-46dc-9e01-5c8c7927904c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:37:a2:58:28:e7:08:4c:d0:e7:e1:62:36:a8:
                    77:f1:5a:9e:05:a2:78:fe:f9:2e:2b:1b:71:f2:13:
                    9c:18:a0:b6:d7:1d:5a:d2:69:a3:29:9f:17:8b:d5:
                    7a:f9:02:44:dd:41:b8:19:10:39:07:a1:e7:5a:5e:
                    10:ca:9f:f4:f2:2f:da:07:34:1a:59:9a:f9:a6:4b:
                    19:6d:67:8c:2b:4b:8f:c7:98:37:b3:8e:3b:80:4d:
                    36:b0:b8:45:d1:f2:1e:fe:80:01:89:95:eb:f8:ac:
                    33:05:5f:c9:b4:ee:a0:a1:d5:c8:50:92:04:6c:0d:
                    3a:46:60:f4:9e:10:35:4f:a2:a2:e2:a5:6e:dd:42:
                    04:f0:ca:a6:ff:31:96:ed:16:23:de:ef:7c:a7:d0:
                    39:5b:97:2b:ba:21:6f:a3:4f:ae:6d:11:a7:a4:aa:
                    bc:00:6c:d1:31:95:cd:60:13:e1:4f:30:13:9d:71:
                    59:87:36:e2:ca:1b:56:0a:5f:6a:b8:75:68:1c:bc:
                    9e:89:9d:0f:41:50:50:96:5d:4e:3b:fe:1b:f4:b5:
                    cb:b7:fa:c7:38:03:e6:4c:6a:27:32:63:e3:53:4e:
                    80:e4:fc:dc:40:a3:22:cd:fb:f4:75:0a:ae:e7:5d:
                    f9:e4:52:e9:2a:1e:74:c8:de:05:cf:a6:7f:43:1c:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:98:A1:7A:BC:DE:4D:66:83:01:FF:E0:F4:7C:94:57:FB:C8:BC:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8260b40-a72c-39fe-8fe9-a3a782ad6148.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:f4:f9:9f:63:3e:d9:7d:cc:62:f9:e6:e2:bd:e5:c7:c6:35:
         7b:c7:35:4e:8b:be:f6:22:b1:7f:fa:70:34:87:27:12:9c:1a:
         60:a4:8e:38:fb:cf:0c:9a:ba:08:86:98:9d:85:cf:98:97:27:
         43:fe:ff:8f:9f:8b:60:e8:46:d6:91:99:ec:53:da:a3:65:ba:
         b8:6f:59:fb:42:66:74:29:e5:7a:10:40:f0:58:41:16:0d:49:
         80:85:58:a3:c0:09:8d:2b:c0:7d:92:20:f9:9b:d6:d3:73:7c:
         29:c7:e9:9f:f7:c1:46:cc:bd:f9:69:7c:da:31:e4:3e:74:e7:
         cc:68:21:d4:0b:84:e6:57:31:f2:33:89:93:2a:91:a5:85:8e:
         16:08:2e:0c:59:34:ff:6f:5e:49:f4:d3:01:fc:af:9c:57:f5:
         a3:0f:7b:90:10:97:5b:b1:43:52:27:3a:25:a9:ab:71:7c:6f:
         ef:50:dd:e8:86:27:f0:10:42:e1:9d:4a:90:d2:c6:91:e0:8c:
         69:f3:eb:5b:ec:f1:46:2d:ea:be:21:54:06:30:6e:98:52:17:
         b6:2f:53:ae:37:e9:22:f5:e7:4b:e7:21:6b:86:8d:b9:a7:02:
         e3:ec:bd:d6:dc:2b:91:9f:ec:e4:c4:ee:3d:dd:a7:2c:dd:38:
         d2:45:ed:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:14:38 2025 by rpki-client