Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaded49c-d5a7-3976-9d65-3eb3fec36ffb.roa
File:                     aaded49c-d5a7-3976-9d65-3eb3fec36ffb.roa (raw, json)
Hash identifier:          afcXq/ld9WYkBDfyBCB066e9gohuN04rQETdanrBYDU=
Subject key identifier:   63:DD:2E:47:D6:F4:A7:D8:FF:84:27:4E:F6:25:E6:CB:67:5D:8B:F8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB234AE9BF3E90131E9880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaded49c-d5a7-3976-9d65-3eb3fec36ffb.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396564
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:23:4a:e9:bf:3e:90:13:1e:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=7f8d9271-bc60-4ced-885f-3a967d2d0d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7b:83:95:ff:8e:c4:d2:72:c8:a7:a6:25:1d:
                    92:44:5a:9a:a1:46:db:6f:a6:bb:c4:c3:4b:01:e7:
                    33:bd:a5:d3:2c:76:1a:66:83:a4:a6:5d:bc:d4:b5:
                    38:b4:a6:3f:19:ba:f4:9a:d7:fc:0f:af:60:d5:d5:
                    2e:0d:59:b9:4c:e5:5e:b4:3d:20:13:30:14:9a:cc:
                    ea:fd:02:5b:98:8a:45:67:75:1b:fa:91:2d:95:27:
                    cc:48:43:6e:c6:f4:b1:71:c8:b2:9f:37:ac:08:19:
                    fa:cf:2e:c0:74:5a:84:c8:56:cc:89:f9:a9:dd:f1:
                    1e:f6:db:c1:b9:64:28:51:40:1a:61:eb:a3:53:13:
                    bd:3a:e5:4d:47:57:39:96:da:87:7a:38:16:de:38:
                    33:32:eb:4f:86:35:9c:17:a0:c9:3c:41:38:2b:fd:
                    ef:ad:57:45:98:ef:a4:14:14:17:e8:00:ae:e5:52:
                    fb:5c:ca:d5:fc:17:3a:40:93:4f:53:dc:b7:27:6f:
                    44:32:4b:a7:76:ff:03:ca:35:76:5d:70:28:3f:22:
                    54:e0:6a:e4:2a:6e:ed:24:c2:23:8d:18:9c:bb:ec:
                    27:23:61:25:0a:32:79:0e:d5:70:b7:8c:38:60:1a:
                    e5:4f:a5:58:7f:23:ff:8b:df:92:09:75:db:6b:90:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DD:2E:47:D6:F4:A7:D8:FF:84:27:4E:F6:25:E6:CB:67:5D:8B:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaded49c-d5a7-3976-9d65-3eb3fec36ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e0:4f:71:e5:92:a6:16:4b:4d:3f:2e:8d:ce:a1:ec:61:fd:
         de:f3:e1:2a:98:7d:fb:45:b9:84:1f:8f:70:6d:09:54:f0:00:
         ef:21:76:80:f1:20:c7:3f:e3:c7:2f:dd:e2:7e:c5:e2:d1:d8:
         6a:0d:08:01:0d:3e:f8:27:2e:4a:d7:ba:aa:dc:7e:0d:6e:d9:
         9a:eb:f6:a7:56:61:0d:f1:40:f9:80:76:6f:25:c0:54:1e:72:
         d1:08:d0:cb:fc:2c:96:45:f8:25:8b:cf:4d:fa:d4:cd:2f:1a:
         dc:05:ba:92:85:f0:4c:ea:1b:97:7a:0f:ca:1a:d2:11:45:9b:
         31:c2:96:48:18:f7:99:a3:e0:e8:b8:5b:91:50:20:cb:36:7d:
         a7:c3:04:e1:d8:84:b2:41:0c:89:35:7e:ba:02:d6:bc:1a:20:
         2d:08:de:c4:97:5f:61:8d:a6:15:77:62:5a:95:95:31:7e:b9:
         c0:9e:f2:24:cd:1e:20:09:04:8a:c2:c5:24:e7:4c:ee:3d:23:
         31:95:84:5d:b4:a5:3f:05:7f:e2:84:d1:89:19:a2:fc:c5:f1:
         07:6b:6a:b7:db:c4:f2:8e:4c:68:26:7e:9e:cb:43:3c:c7:ca:
         5f:9b:09:87:90:cb:34:84:3a:f8:72:40:07:91:b7:d8:87:e6:
         a2:e5:96:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:00:08 2025 by rpki-client