Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a400303b-a366-3b94-8f72-419cb8f7387b.roa
File:                     a400303b-a366-3b94-8f72-419cb8f7387b.roa (raw, json)
Hash identifier:          NiCgZgVINYd8+pvfE3U9JNWHk444N7PnNRcfFmeGaZo=
Subject key identifier:   26:D9:C8:69:53:D7:26:76:A7:9B:7F:44:5F:76:EB:39:1F:9F:3B:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A18956314B9964E341982DB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a400303b-a366-3b94-8f72-419cb8f7387b.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     396551
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:63:14:b9:96:4e:34:19:82:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=dd0e1545-892c-4cec-8fa9-7bc2a9216609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:cf:06:43:e8:ed:54:92:23:15:f8:85:2a:
                    74:2c:0b:98:9c:88:20:49:ef:83:b9:20:b1:a9:36:
                    84:6b:f9:c2:df:22:d0:8c:a5:2d:0a:95:87:3a:63:
                    58:9f:f2:c6:d8:1e:af:e6:38:0b:2c:62:6f:38:5f:
                    ce:e4:a7:93:d4:a0:ca:e5:ab:00:df:7b:de:ac:89:
                    78:b2:67:a3:cb:55:65:38:f7:03:d7:0d:4f:e9:f7:
                    a8:b5:de:8b:da:7e:97:fb:66:10:32:6d:fe:e8:5c:
                    55:83:6c:17:e6:71:66:b0:60:e9:d8:13:b9:3d:52:
                    06:e3:2c:2e:69:21:6d:56:3d:07:2f:d2:18:77:fa:
                    8d:47:c0:1d:36:91:bc:ae:1c:60:24:c3:7a:62:c6:
                    af:a8:fc:ac:e5:34:0c:34:f6:85:21:1f:96:e1:67:
                    bf:28:59:4b:1d:9e:c0:8f:d9:7e:d9:d4:45:06:9f:
                    b8:11:d9:c9:55:a1:c8:63:93:a5:7a:41:52:a5:da:
                    46:14:ef:64:6e:81:f0:85:9a:af:74:2d:45:fa:4c:
                    0f:22:b3:cd:d1:6d:6f:08:b8:51:91:82:94:97:5b:
                    fb:4e:05:5e:68:2b:f5:20:48:a2:8f:2e:1e:41:43:
                    57:18:e1:51:71:01:09:ad:fc:a9:7b:d5:2f:14:f1:
                    41:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D9:C8:69:53:D7:26:76:A7:9B:7F:44:5F:76:EB:39:1F:9F:3B:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a400303b-a366-3b94-8f72-419cb8f7387b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:76:bc:44:57:52:e8:48:58:7e:c0:8e:61:33:cb:72:e0:53:
         23:41:3c:62:0f:9a:7a:a3:1b:e2:27:86:73:59:16:3e:d5:a7:
         94:13:e2:4e:f4:07:30:d7:02:7b:cb:f4:e8:57:3d:d8:ae:f2:
         0e:7d:7b:9c:2a:e1:be:f2:f7:bc:ed:17:aa:58:a0:84:3b:db:
         b5:48:9c:5d:af:0e:a2:8c:09:bc:b0:8a:98:5f:9b:e6:d3:f2:
         e1:34:94:9c:3f:94:ec:c2:51:91:03:c9:8c:30:f7:0b:ed:19:
         bc:50:8a:a6:07:e1:df:bf:1b:f7:49:17:31:02:2c:12:c6:5c:
         5b:39:40:c2:a9:3f:66:e7:20:04:b1:0b:3a:15:09:73:bd:79:
         62:e3:65:96:14:6c:5b:5f:ce:4b:f2:53:99:f3:85:f4:40:d0:
         0d:b7:39:b5:17:a1:a0:9f:ae:d5:71:92:01:47:ad:94:3e:e3:
         a0:1f:f3:31:f0:c8:79:af:3b:82:c6:48:b9:aa:5c:e0:87:a1:
         39:4f:ac:78:e7:37:bb:8e:c8:81:73:d2:c3:c3:b4:b7:81:a3:
         a4:04:9f:74:c5:8f:3e:57:8a:30:e8:38:9d:9c:8e:02:6e:fa:
         90:43:a8:da:dd:16:14:83:d9:60:1a:75:3a:21:f9:a7:71:82:
         82:25:6f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:03:13 2025 by rpki-client