Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69982846-d431-3208-8a35-e36d380d66bf.roa
File:                     69982846-d431-3208-8a35-e36d380d66bf.roa (raw, json)
Hash identifier:          f7ngxBMcCA3wWfJDO2SX8KXIa6dkVIiIVI5yi56ylOs=
Subject key identifier:   A8:E5:B1:1C:05:2B:97:F5:A7:23:ED:62:76:B3:02:FD:D3:8D:88:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB26A3F8B2B763CB707180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69982846-d431-3208-8a35-e36d380d66bf.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     397201
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:26:a3:f8:b2:b7:63:cb:70:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=d4469426-f738-43a1-acb5-506a83ae4811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:1f:71:43:76:1d:b1:1b:c4:fe:de:1f:4b:
                    eb:0a:ba:ca:89:55:ae:5b:74:c2:e1:6f:80:f9:04:
                    da:ac:36:93:30:52:9f:44:2b:63:d5:cd:2d:c9:a1:
                    bf:65:d8:ce:c4:5d:86:fa:4f:49:62:89:60:05:da:
                    7b:25:0a:57:59:17:a5:52:31:cc:4d:4f:59:a1:2b:
                    19:61:b3:78:22:e2:16:fd:4c:4c:f8:ff:27:25:5e:
                    31:89:aa:b9:1a:e2:79:93:e8:85:bd:75:3c:5b:24:
                    86:80:8b:9d:29:76:62:77:00:50:1b:d3:99:a6:4a:
                    b2:5c:2d:91:e1:65:fe:5b:01:eb:fd:88:bd:b6:ca:
                    37:38:fb:33:40:e2:f1:2c:db:98:42:c0:2a:05:2f:
                    89:b1:5b:31:71:e8:1b:80:49:8e:00:97:03:c2:4f:
                    9a:4a:5b:fe:9a:27:70:54:17:63:86:73:9b:bf:47:
                    32:5e:75:85:c6:19:12:f1:dc:d9:ab:69:21:59:33:
                    60:03:ef:c0:d3:b9:cc:87:05:ec:2c:a7:1c:8e:f3:
                    ad:df:86:80:86:5e:ab:52:9f:9c:02:d0:33:02:34:
                    c2:20:68:66:44:6b:d0:d9:16:4c:5a:a7:a9:fd:5d:
                    07:e6:e7:2b:c7:8e:9e:ed:bd:da:17:1c:3f:13:cd:
                    48:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E5:B1:1C:05:2B:97:F5:A7:23:ED:62:76:B3:02:FD:D3:8D:88:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69982846-d431-3208-8a35-e36d380d66bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:3a:5f:af:b3:33:bc:5b:c7:65:60:79:d9:c4:73:17:cd:5e:
         b9:f3:1f:59:22:69:54:07:7f:ea:33:0a:c0:a9:15:49:e1:43:
         4a:6b:42:65:d7:ed:fa:df:9c:a7:a5:e2:6d:bd:d6:f4:fd:29:
         12:69:70:6c:44:e2:07:c2:f3:da:7d:d2:2c:53:b9:91:bb:45:
         76:b9:7a:87:af:a3:51:2f:d3:e3:bb:a9:05:3d:d2:e2:b0:96:
         9e:6d:ad:81:e5:93:18:59:e7:83:cf:d0:e3:f5:53:05:ac:a5:
         92:ed:4b:b3:fc:f6:b2:14:7a:4f:4a:a7:c9:88:6b:22:5a:34:
         04:36:e3:4a:cb:9b:6a:a4:c4:8b:3b:08:f6:90:fc:e4:7a:3b:
         2f:a3:c3:74:80:b7:ad:dd:6c:e3:91:de:03:ce:14:4b:c0:34:
         60:0b:d9:f0:6c:b2:33:d0:34:30:38:8b:a6:a2:4d:7e:45:0a:
         08:73:35:86:eb:3d:17:12:ab:a9:54:49:c8:51:d4:26:6b:00:
         98:1d:29:5f:83:2b:e9:ea:61:77:31:c2:e0:18:4c:4c:d7:29:
         8c:1d:6a:dd:67:63:a9:27:25:00:b5:eb:99:56:4a:a5:b0:b0:
         36:e7:cd:7e:0b:d4:0f:13:18:25:25:49:73:ff:54:fb:e7:94:
         8d:69:74:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:43:04 2025 by rpki-client