Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53db66ac-6a18-3801-849d-20f1f36c2143.roa
File:                     53db66ac-6a18-3801-849d-20f1f36c2143.roa (raw, json)
Hash identifier:          R0SU+l3CXjH00+OXYNM2GEnOog4sgahxOwV1WoqZjGg=
Subject key identifier:   B4:0F:24:C8:B3:BF:1D:7C:79:D9:20:55:46:D7:57:1E:D6:36:63:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DAFF6908111C1222CD5640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53db66ac-6a18-3801-849d-20f1f36c2143.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     20362
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ff:69:08:11:1c:12:22:cd:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=61dcf5c6-92e5-455f-900a-3fda6f8e7d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:79:b9:95:57:b8:ff:4a:41:80:96:fa:51:e8:
                    bf:d5:f7:87:7d:1a:8e:56:25:d6:25:36:cf:c9:b9:
                    fa:36:f4:ae:5e:9e:cf:eb:f1:11:dd:a6:0d:22:54:
                    c0:79:a1:a1:9c:bd:c4:eb:12:f3:d0:25:e5:bc:3a:
                    1f:2b:bf:7b:f8:3b:dc:0a:fc:40:9c:3b:d5:1e:72:
                    ac:fc:66:17:ea:59:2a:ab:10:38:94:cb:37:f3:f8:
                    8e:c8:3d:ec:c9:ac:27:45:30:f7:20:1d:99:f1:66:
                    1b:c3:fa:82:18:92:8c:22:44:5b:b8:93:bf:a0:e0:
                    79:93:4c:c2:6d:ed:fe:3f:1f:7e:52:de:e4:e5:fa:
                    75:d1:ec:44:18:23:a5:99:53:c8:5c:0d:62:a5:cf:
                    c1:41:6c:2e:32:b5:18:e1:92:4f:24:b5:d7:9d:98:
                    aa:5d:99:1f:85:02:e1:f0:5c:c2:65:1c:9b:89:93:
                    cb:0d:c3:85:cd:56:4a:41:22:8e:38:c7:d8:e4:16:
                    ef:0b:55:c2:71:5d:e9:0c:68:7b:2f:2e:60:21:1b:
                    57:d6:0a:d0:d5:af:60:62:c9:d3:a4:e8:f7:44:4d:
                    1b:e9:83:e1:cf:34:c1:51:11:39:23:a4:46:33:5d:
                    f1:4a:2b:11:52:67:73:11:7f:93:4d:39:58:9d:8a:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0F:24:C8:B3:BF:1D:7C:79:D9:20:55:46:D7:57:1E:D6:36:63:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53db66ac-6a18-3801-849d-20f1f36c2143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:cf:2d:d1:ea:fa:4e:79:09:3f:67:fa:d5:0d:c1:89:3b:87:
         39:61:a7:46:83:91:cf:38:2d:2a:ec:98:47:cb:3b:cb:88:f8:
         83:61:97:db:76:66:cc:8b:71:fb:84:8a:80:74:6a:68:25:d9:
         6d:87:c8:ba:93:a7:d4:9b:62:a4:56:03:fe:3b:45:a1:ae:52:
         04:98:3b:22:8d:09:86:a8:2f:61:fe:de:27:65:ba:de:9c:17:
         91:a4:4e:3b:5b:ed:15:d7:c3:49:93:15:56:cc:58:d8:0f:76:
         c2:69:6e:ad:ee:e3:b0:7d:c1:a7:c8:f8:f5:ee:30:55:31:2a:
         32:e4:9a:4e:ed:24:eb:63:87:16:db:47:a7:f9:8c:9b:d7:40:
         87:7f:67:13:d0:5b:1e:8e:39:59:59:f0:6c:c0:98:0c:24:06:
         6a:84:25:cc:7f:79:40:81:73:52:0e:95:3a:4b:02:b3:a9:de:
         ef:e0:b2:48:ba:7b:cf:46:63:63:a8:5c:8c:6e:91:ba:ce:5c:
         f0:cf:e2:22:b6:44:04:10:f0:3d:30:63:59:b3:36:77:13:6f:
         43:75:ed:b2:80:34:26:c5:91:c3:6c:57:87:ab:9e:1c:82:aa:
         e0:97:93:8c:67:69:85:28:68:c6:71:80:d9:00:00:3f:f7:e2:
         d6:1b:df:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:53:00 2025 by rpki-client