Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10e8f4fa-7a7f-3a4e-b06d-2409095ad0ad.roa
File:                     10e8f4fa-7a7f-3a4e-b06d-2409095ad0ad.roa (raw, json)
Hash identifier:          Zb6PFWjmd0snRIpH6BKmS7eiSfQTbi3I7qWkJTKghj0=
Subject key identifier:   28:9D:8A:04:ED:7E:D3:F7:78:E7:BB:66:32:A8:12:B1:77:B4:B8:79
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A03A56894B8F7F9F601B646C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10e8f4fa-7a7f-3a4e-b06d-2409095ad0ad.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     396604
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:68:94:b8:f7:f9:f6:01:b6:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=0424181e-973d-46fb-93d3-3458d2e50c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:27:d3:d1:2e:42:c3:fb:21:58:4e:87:d6:37:
                    b0:a4:73:86:5e:03:52:22:f9:8d:2f:ab:a7:7f:06:
                    72:7c:d5:97:d8:43:33:19:9b:98:6c:5f:84:b6:e7:
                    37:cd:48:f7:e5:e7:ec:a3:b6:a3:ed:55:e9:ff:2b:
                    a6:24:1b:8f:3d:e8:66:cf:2b:1a:3f:e6:64:df:0e:
                    1d:59:da:d1:a0:f9:9e:2d:19:f5:b0:dd:11:8a:c7:
                    f9:92:59:76:0c:70:5d:85:bd:c1:b0:fa:31:e1:bd:
                    17:37:d9:27:e9:53:0d:e4:38:31:d1:08:53:34:d4:
                    16:a8:d2:71:de:dc:e1:59:2f:60:3c:7b:32:eb:e6:
                    fd:5c:6e:c9:07:08:c1:52:fb:57:74:96:e4:33:c2:
                    04:8e:8d:b3:b4:2e:ed:ba:17:b8:65:7e:a1:43:e7:
                    39:61:cc:ba:af:a2:c7:90:51:b6:64:c5:84:90:c5:
                    28:91:4c:6b:dd:47:c7:71:f9:26:8e:cb:6a:6f:3d:
                    7d:23:5d:65:8f:98:1d:b3:12:a8:75:74:8b:45:ff:
                    6f:f5:4f:08:92:58:75:72:70:b8:cf:09:0f:50:25:
                    04:25:a6:52:d7:c8:ec:b4:30:87:4c:4d:bc:c7:d4:
                    6c:a3:88:73:3e:04:52:9b:c9:38:c1:da:87:40:39:
                    b4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9D:8A:04:ED:7E:D3:F7:78:E7:BB:66:32:A8:12:B1:77:B4:B8:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10e8f4fa-7a7f-3a4e-b06d-2409095ad0ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:4d:4e:a2:b7:b5:84:d9:d8:00:fc:d7:9f:1c:b1:d9:da:ec:
         f5:63:b9:80:58:9b:5e:04:13:0e:a2:3e:cc:8f:ab:59:51:04:
         14:1c:d5:e0:ab:ae:35:a8:3a:9d:e1:6a:42:f4:e5:85:a6:c0:
         95:30:c1:17:b1:06:b2:47:72:0c:86:67:5f:c7:65:12:b7:ec:
         11:8e:ed:45:09:8e:1d:20:b4:2a:11:9e:28:2e:af:74:33:c2:
         2f:ee:39:9e:bc:ca:70:5e:32:ea:36:fc:6a:c1:f2:c8:a0:15:
         25:47:fb:c6:4d:94:eb:ad:c6:e8:6c:dd:56:7b:8c:6e:3c:79:
         8a:3c:14:90:05:67:86:d7:0e:a4:dd:c4:ff:cc:68:4d:a0:02:
         f0:8e:15:cc:7c:fb:5c:5b:6f:34:da:c5:4d:c3:7c:2e:c4:f8:
         c5:d4:38:af:3b:1f:a6:76:9a:e6:6e:7f:2a:86:a6:75:d4:95:
         4b:09:dc:5c:7c:c8:5f:e3:36:8c:58:5b:6c:99:36:aa:e4:f6:
         77:e1:5d:e3:8a:54:05:1e:91:b2:4d:60:b1:98:c7:7c:59:66:
         86:fa:bd:55:0d:18:f0:42:57:af:23:32:e5:81:e8:95:47:11:
         54:cb:17:20:2e:18:bc:ca:1e:c2:08:45:35:44:72:1f:30:b6:
         0d:b8:d9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:58:24 2025 by rpki-client