Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c2f1e85-6134-3f5a-859c-2d1ec965b9d1.roa
File:                     5c2f1e85-6134-3f5a-859c-2d1ec965b9d1.roa (raw, json)
Hash identifier:          CLuLJuBJGpQAsZvD5oGpCdVu3bxN/dGUR4HIKsNutnE=
Subject key identifier:   B6:09:99:E5:F3:5B:65:91:C7:DD:F5:06:CD:EB:56:82:7C:D5:AC:34
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F71540780DD6097CD2317700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c2f1e85-6134-3f5a-859c-2d1ec965b9d1.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396569
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:40:78:0d:d6:09:7c:d2:31:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=f2eb963f-d82c-4054-a45d-1788537eca50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e6:9e:42:8e:4a:0f:09:44:da:be:0d:7a:d8:
                    91:f4:05:3f:6f:7c:50:45:34:33:65:d4:77:e7:62:
                    0d:1c:7a:ef:cc:5f:85:a1:cf:9b:2b:c3:8c:dc:c5:
                    6c:a9:89:3d:8c:ec:b3:b8:90:ef:2a:11:7b:2e:d6:
                    70:9b:b2:f2:35:35:9a:eb:0a:2e:74:50:05:8b:a1:
                    93:15:05:74:80:96:3d:a3:34:e4:8e:4d:ea:91:e5:
                    c4:23:26:cd:d3:74:cb:47:a7:7a:31:a4:5d:65:50:
                    8a:2d:2c:de:c2:bc:ac:a0:a4:6f:5d:01:75:9a:9c:
                    e9:5a:e8:82:ec:36:d8:51:df:a4:46:31:ec:f7:c4:
                    a3:02:38:a8:52:18:8f:71:b2:c4:2f:9e:3a:e0:1e:
                    f8:dc:96:2b:f1:99:cd:f4:17:bc:c6:fd:5b:a4:35:
                    d8:84:c9:2f:9a:3d:5a:99:91:13:79:ef:e2:c9:8a:
                    a7:0a:89:0d:9b:78:f8:d3:f0:3c:66:b4:e1:38:a5:
                    40:73:e1:67:96:ee:a0:b0:86:3e:c9:d9:1e:61:2c:
                    bf:76:b0:43:dd:a2:86:d4:77:12:06:f9:4d:ad:8b:
                    0f:8b:10:d4:ec:59:75:36:15:60:e9:34:ef:c5:37:
                    27:22:6d:d7:3f:32:b9:6a:d4:09:65:e1:d2:b7:7a:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:09:99:E5:F3:5B:65:91:C7:DD:F5:06:CD:EB:56:82:7C:D5:AC:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c2f1e85-6134-3f5a-859c-2d1ec965b9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:1a:95:c4:8c:64:70:f6:0f:b6:73:99:b9:5f:08:32:90:e0:
         d2:d5:9a:20:76:d7:25:75:2c:73:4f:f9:2a:44:f4:96:50:60:
         61:e6:9f:4f:d8:1b:31:19:ca:bd:10:79:26:7f:ac:ef:55:ed:
         b6:be:3f:ab:97:cd:38:6e:6a:db:bf:a2:a2:e9:e0:fc:d1:e1:
         7b:eb:d6:ff:32:b6:ef:39:54:1c:6d:07:fd:51:1a:65:df:70:
         39:a3:e8:67:2d:f3:8e:a9:6f:9e:d7:0d:63:1a:a7:68:61:92:
         91:dd:8f:30:2b:05:80:b6:a3:9e:75:ea:4b:66:df:a9:f9:b5:
         d5:2e:df:cd:4e:a0:43:a3:1e:b6:68:c1:4c:94:ca:d9:63:ea:
         db:1e:ab:25:89:b9:72:6a:fa:5c:57:68:75:e7:d4:46:92:8f:
         48:69:7e:21:99:75:08:77:1d:be:0e:8f:08:84:7c:b0:e8:34:
         8c:c7:43:1a:ad:fc:2a:8f:7d:3c:28:ac:be:78:7b:f5:f4:84:
         c7:ef:b3:27:9a:5b:d7:4a:72:e6:27:8e:71:0d:20:ba:1c:7e:
         ab:fd:8b:58:c9:8b:07:70:d8:ac:4e:9c:d2:5e:15:38:3f:78:
         59:b1:e8:ce:1b:e7:3e:3e:53:2c:fc:83:17:b0:9d:3f:82:cc:
         76:c2:fb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:55:28 2025 by rpki-client