Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa
File:                     ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa (raw, json)
Hash identifier:          vNRna0cm7J1ydd83WMGW9VFVU1MouvQ69hbtfsxxyXk=
Subject key identifier:   ED:10:84:64:7A:1E:68:C9:49:1D:1B:E1:DC:40:2C:62:FE:06:1F:02
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A18955DEA076587043352DB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     396547
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:5d:ea:07:65:87:04:33:52:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=d8f595f6-b902-4609-831e-7d737cb99dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:9e:a8:1d:b4:4b:f7:10:0b:0c:7f:11:76:
                    bb:1f:c0:46:41:a4:77:dc:5d:6c:0f:cd:da:f4:27:
                    83:91:b8:37:e0:42:74:3b:17:6a:a4:82:5e:ac:63:
                    a8:82:3b:67:c0:22:aa:88:89:38:f0:9d:02:0f:78:
                    c5:c2:0b:6a:fd:18:e8:d9:53:dd:67:b0:3c:a2:8a:
                    b0:70:0e:31:91:02:81:21:5c:3a:7e:bc:93:ae:47:
                    f0:9c:a3:c9:8a:2c:9c:54:9a:13:cf:27:f9:c9:c9:
                    0d:b6:9e:76:03:0a:7e:91:fc:85:e2:66:8a:90:77:
                    36:d6:7c:62:65:e5:13:0f:e5:b2:43:22:57:da:f0:
                    c0:df:a7:e6:8d:94:fe:b3:a9:05:90:d7:2f:04:ce:
                    1c:1b:d7:d3:bf:c8:52:49:88:2f:19:8f:b8:04:87:
                    02:f8:db:8f:0f:38:75:45:4e:5a:c8:fa:53:26:e5:
                    7c:e8:29:26:80:29:80:00:2c:d1:15:a5:22:fd:75:
                    98:fb:d3:97:97:ae:3a:78:15:c3:a4:29:ac:96:ab:
                    e9:ce:c0:d8:ef:f6:37:5f:c2:db:04:f2:73:36:98:
                    5d:0d:cb:15:19:b8:24:a8:05:c0:53:f7:0a:dc:f2:
                    61:b2:19:5c:75:25:60:7a:d1:50:c5:8d:c3:16:9d:
                    22:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:10:84:64:7A:1E:68:C9:49:1D:1B:E1:DC:40:2C:62:FE:06:1F:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:bd:d6:2a:d2:25:b7:3f:0a:99:b9:63:d8:05:99:33:7a:b5:
         47:b3:c7:03:32:70:8f:c9:2e:78:74:56:24:4b:6a:7d:00:b5:
         58:03:92:26:2f:2a:af:8b:da:07:b2:87:6a:2a:3e:fb:ba:11:
         29:19:3b:1c:5b:47:aa:6c:a8:bc:0c:0a:81:21:c6:90:fc:e3:
         76:c5:49:a5:fb:b6:6e:eb:e0:3a:de:7b:6a:c1:54:bb:ae:56:
         b7:e0:55:da:fe:0e:c8:76:c0:19:f5:b1:a6:6c:21:f3:20:30:
         13:b6:d5:3c:91:cb:a8:c0:49:6c:10:fa:08:67:e5:57:4b:d6:
         4f:71:4d:a3:17:91:0f:5c:23:4e:4d:d2:f8:48:2d:c7:65:1f:
         39:bb:0b:52:cc:81:3c:01:76:3a:62:19:53:30:a5:9d:52:f8:
         7a:fa:1c:51:b7:b5:05:8d:be:0b:a7:15:b8:3e:26:1f:61:b8:
         31:d3:20:11:b9:33:e7:93:eb:2a:a9:16:44:5c:cf:73:03:6d:
         28:08:22:b4:2e:61:f6:02:83:36:61:61:60:f6:1a:db:f5:bc:
         51:e5:75:3c:2b:e5:94:3a:d3:b4:8f:ec:d3:f7:4f:29:34:95:
         44:81:e6:7a:e0:32:98:a0:c1:0a:5a:d1:ac:98:54:e6:74:79:
         91:15:7b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:36:20 2025 by rpki-client