Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2840d5cb-8d0f-3170-99da-f80722695d4d.roa
File:                     2840d5cb-8d0f-3170-99da-f80722695d4d.roa (raw, json)
Hash identifier:          t3qUZjF/QPlG+n2ktL8bj6KxLpThFslK2a+c99uCUv8=
Subject key identifier:   3D:FA:C3:17:03:AB:58:E7:5C:9B:4A:44:E3:D2:7F:7B:B2:13:31:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AAB58D8A4CF1AC48AB200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2840d5cb-8d0f-3170-99da-f80722695d4d.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     36626
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:ab:58:d8:a4:cf:1a:c4:8a:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=c9da1d8e-b001-4ccb-9505-0675a1b758b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ba:e0:cf:27:1a:ca:c4:39:71:e2:3a:57:05:
                    20:39:1a:d9:b7:12:b2:f2:01:f8:42:78:28:ed:01:
                    30:2b:cb:ef:d1:7c:df:8f:65:3c:1c:40:31:82:1f:
                    2d:f6:44:be:75:55:93:e5:17:42:1f:b9:e2:c7:55:
                    5a:f0:29:be:24:16:a6:dd:18:14:27:aa:c3:ae:a3:
                    85:f7:28:37:a2:58:1e:79:9f:1b:77:d1:ec:f1:55:
                    40:2a:d2:12:15:05:25:f7:e4:23:66:54:84:b4:4d:
                    d4:27:a4:be:de:96:fa:5c:c3:8a:5e:e9:5c:49:aa:
                    ac:de:e1:1a:9a:b9:0a:73:28:45:0b:ed:5e:5c:f3:
                    4e:4b:b1:d8:4d:b6:43:da:26:0a:fb:4c:d8:c4:68:
                    e5:3e:83:fa:c2:af:c2:92:db:2d:44:99:64:a7:08:
                    e0:ab:85:65:61:3d:ad:b4:15:61:48:e1:36:87:dc:
                    85:37:a6:00:51:48:d2:dd:b0:ed:b9:2b:d5:c9:33:
                    d0:70:94:24:62:8e:86:89:dc:72:87:1a:a0:c3:c8:
                    e4:36:0f:83:62:ed:7e:f2:cb:a4:87:5e:6b:67:6f:
                    d7:fd:10:9a:d6:e9:15:0a:c6:fb:e5:d2:5b:7c:ea:
                    8c:17:ac:08:b7:2d:54:11:06:cd:e6:3d:26:2c:49:
                    3a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FA:C3:17:03:AB:58:E7:5C:9B:4A:44:E3:D2:7F:7B:B2:13:31:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2840d5cb-8d0f-3170-99da-f80722695d4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:74:9d:bd:55:9e:aa:d0:2e:0a:9e:ec:0e:96:71:e8:c9:6a:
         e5:d7:ff:01:a4:f1:b2:fe:ae:ab:e5:2d:b2:7c:8c:cd:33:c0:
         65:0d:59:79:fe:c0:a8:2c:5b:82:f2:86:63:8a:5a:91:6c:4a:
         ad:c7:cd:5d:5c:ce:8d:90:b6:79:26:b9:91:0c:93:86:4d:bd:
         93:40:cb:9f:b6:dc:07:27:86:7e:72:40:3e:44:74:4b:e6:ba:
         05:4e:37:96:22:dc:54:6a:78:ca:cf:41:72:7d:de:4d:26:a9:
         31:99:ee:86:48:10:ff:e6:29:8c:5c:3a:40:13:f8:40:ba:cd:
         96:9d:b1:7f:bd:0f:28:bb:b7:f3:a7:14:b1:45:e3:14:8e:3d:
         b2:9e:be:c6:a9:3d:5a:0c:1e:53:9b:53:35:3b:b4:82:6b:c2:
         a9:18:7b:e3:44:5a:69:46:a7:e9:5a:2e:81:46:f7:40:9d:5b:
         ba:51:2f:e5:0c:bd:af:9d:05:58:b1:11:da:ac:7e:e1:f4:10:
         60:84:90:09:ce:64:a6:e5:8a:6d:72:9c:a0:59:c1:d6:a7:0d:
         84:8d:35:35:f2:17:05:64:ea:5e:af:c6:75:1e:71:ed:2a:8d:
         07:b3:a7:96:a4:fc:5c:80:6c:5e:bf:d7:83:73:9e:70:26:57:
         59:88:04:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:33:55 2025 by rpki-client