Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef53d30e-227e-35f7-99cc-b35fcb5fec9b.roa
File:                     ef53d30e-227e-35f7-99cc-b35fcb5fec9b.roa (raw, json)
Hash identifier:          +sxEiRnDzBXZPNa/Q3IG8x6WcZsCmi/Xy6sWf1HAECo=
Subject key identifier:   9D:EC:88:15:C7:7A:59:3F:D7:9A:87:75:CF:5F:6D:A0:4E:67:21:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DAFA0D81488D1FF27F9D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef53d30e-227e-35f7-99cc-b35fcb5fec9b.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396581
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:fa:0d:81:48:8d:1f:f2:7f:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=c8a0491a-23c1-4bd9-b63a-4a87ba00be5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:6b:75:ae:3b:9e:fc:d8:a2:ac:fe:70:4e:
                    05:2d:d5:41:d2:e8:51:07:e1:a8:ef:db:13:05:a7:
                    46:d9:a8:11:2f:3b:22:f4:75:75:b3:8c:48:51:94:
                    d9:00:01:5c:14:4d:72:be:1b:0b:c1:d9:62:a6:02:
                    f1:11:cc:a3:3c:bb:3a:a1:89:7b:96:95:a7:97:18:
                    13:95:7c:65:a7:7e:15:84:41:bb:14:64:95:bc:73:
                    65:c7:97:ff:4d:70:f2:53:92:14:13:59:ad:45:55:
                    ed:1b:33:da:f5:94:19:1c:8b:8a:47:85:13:d9:82:
                    7f:6c:d6:cc:6a:33:a5:dd:19:30:e6:50:24:1f:a2:
                    39:34:44:4e:68:0d:03:6e:56:7b:53:c2:67:e3:1f:
                    19:e8:49:3b:0c:0b:df:e9:45:be:c2:5a:45:c1:7f:
                    0b:41:9b:f6:dd:3b:3b:14:00:cd:cf:47:c7:92:85:
                    e4:3c:b1:d2:e3:1b:b0:b7:10:59:7d:df:84:22:cc:
                    ce:49:ba:88:5d:50:c1:5f:8d:ab:21:0b:b2:20:87:
                    6b:9a:ec:40:55:79:d0:5b:c3:2a:ea:c2:e2:ae:03:
                    18:2d:df:0b:a1:ed:f1:f4:71:d2:84:b6:a2:36:2e:
                    01:ca:e8:f5:1e:ee:9b:e1:37:d7:b2:d8:c2:88:16:
                    08:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EC:88:15:C7:7A:59:3F:D7:9A:87:75:CF:5F:6D:A0:4E:67:21:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef53d30e-227e-35f7-99cc-b35fcb5fec9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:8a:84:f3:fd:d8:f8:cd:5a:bf:69:f9:1c:2a:89:35:08:b4:
         6c:dc:28:14:9c:4c:1b:70:17:d9:1c:36:9d:19:98:a6:d3:f9:
         7b:01:a0:95:e3:5d:47:b1:53:7c:56:04:d1:c7:95:4a:80:a5:
         26:2a:cc:42:fb:ff:17:25:54:9c:45:6c:cb:ea:6e:e4:57:e0:
         20:cb:51:cd:a0:49:ed:53:97:b1:6f:ad:2f:4b:54:2c:ce:d8:
         07:25:e2:66:0c:f9:3e:9f:aa:4e:2e:9f:88:3b:d2:23:81:36:
         f9:83:c0:8d:68:ce:96:11:67:53:ea:b0:7f:05:ee:7c:34:3e:
         f7:0a:e2:c9:cf:59:95:6d:16:31:25:1f:da:8d:d9:24:c8:7d:
         ed:3d:5e:7e:2a:56:98:c7:79:69:60:b7:61:dc:61:d4:e3:bd:
         cc:39:6a:93:9b:bf:1a:b6:38:cf:cb:4b:90:fa:45:ba:97:94:
         5e:40:8e:03:51:42:80:03:f6:15:45:6c:cf:1b:0b:4e:1b:ef:
         df:af:67:59:b7:a4:e9:e9:4d:42:69:0f:94:30:7d:4d:e0:67:
         f9:2c:fe:d8:c3:36:d7:af:6c:a1:97:da:b2:53:58:30:74:06:
         be:15:10:3f:93:46:f7:72:db:19:7d:c4:0a:df:cd:59:4c:28:
         5e:35:e2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:01:07 2025 by rpki-client