Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3f7b05-ec57-3876-bf16-52189983e82b.roa
File:                     cf3f7b05-ec57-3876-bf16-52189983e82b.roa (raw, json)
Hash identifier:          bpMEzmoOiQpJ/ngF6Bm1wbYJOmnq6OGGGWM+/8NANys=
Subject key identifier:   EA:C3:37:90:91:4C:46:EB:CE:57:79:16:13:ED:FA:8C:72:93:65:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AAAD1D757354861AA02C8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3f7b05-ec57-3876-bf16-52189983e82b.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     19836
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:aa:d1:d7:57:35:48:61:aa:02:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=61c443ec-c7fa-4033-b8c8-c47e3d9a59c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e6:dd:b7:6d:43:dc:22:5c:c3:78:62:ff:18:
                    e0:12:ed:29:99:3e:86:9e:8c:d0:ad:e6:32:6e:c6:
                    b3:9e:80:ff:79:fb:a8:3b:7d:b1:7f:5a:30:1a:6a:
                    76:a2:55:ad:96:fb:2a:68:80:5a:33:ef:13:52:3d:
                    f4:39:38:35:83:45:8e:7c:16:a8:73:bb:56:73:cc:
                    7a:df:aa:06:d5:d6:13:06:2e:5b:48:30:d1:4f:28:
                    5d:19:0a:c7:66:c4:2c:33:a4:6e:f7:95:12:0b:d8:
                    38:f1:e2:63:9b:a7:a1:c1:f9:a6:fc:95:c5:ba:e5:
                    d7:17:57:14:1a:73:59:f7:72:46:1f:be:87:bf:41:
                    c1:01:c4:c1:8d:7a:8c:3b:89:08:e2:63:23:73:6a:
                    5f:0b:e3:13:b6:43:0a:7c:cf:a9:94:bb:dc:b2:00:
                    75:eb:ca:5a:3e:a7:0d:44:28:43:82:64:e1:4b:9c:
                    c2:71:b8:31:a2:e8:d5:f7:d8:91:19:d7:c5:68:b7:
                    2b:8b:30:81:90:5e:5a:d8:6b:ba:01:21:18:93:ce:
                    0b:12:0a:db:e9:1a:ee:91:e5:79:f0:76:97:0e:dc:
                    d9:f3:c6:0c:14:88:7e:61:0e:77:a8:15:39:c8:27:
                    db:31:cc:22:4e:0a:a1:47:4e:da:c6:10:35:78:82:
                    9b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C3:37:90:91:4C:46:EB:CE:57:79:16:13:ED:FA:8C:72:93:65:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3f7b05-ec57-3876-bf16-52189983e82b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:10:c6:a4:f1:4e:56:12:08:01:3c:8a:d5:b7:8d:55:ed:87:
         39:e0:05:7d:71:ad:19:37:bf:66:a8:81:fa:85:01:1a:f4:82:
         91:7d:0d:ef:cb:c9:26:df:5c:1d:f4:55:bb:f6:4d:05:16:f5:
         83:e0:e8:4a:2e:27:29:4b:e4:43:83:a3:a7:68:80:c8:50:56:
         cf:9a:e7:61:cc:97:af:82:21:50:48:4e:a9:b4:28:b9:fc:a5:
         87:6d:a8:67:9c:17:e4:26:e2:12:67:0d:89:3a:84:b5:ad:d2:
         ce:ae:d1:d0:cf:93:0b:d5:0a:ed:5a:51:91:23:aa:60:8e:32:
         c1:fd:41:5f:4e:9e:f6:ea:24:f2:9b:1a:a8:43:a7:1f:ca:a0:
         2f:ef:fa:0a:53:c2:8e:49:d1:ef:1d:fb:64:47:3f:ca:77:54:
         84:6b:40:25:8c:1f:16:a1:ab:34:45:fc:8d:0c:49:f2:5d:11:
         bb:59:a8:44:5f:34:4d:19:90:6b:e9:ff:bb:9e:d1:c4:55:1d:
         75:1b:c7:4d:43:13:25:ba:56:b7:29:d6:0e:dd:1b:d8:9e:a1:
         36:a6:a0:c7:3b:a3:c0:dd:62:eb:05:e5:84:0a:ec:1f:86:45:
         ba:65:c5:2b:57:90:2d:ae:ed:6f:70:af:e6:16:d0:bc:55:5b:
         21:ef:69:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:02:21 2025 by rpki-client