Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/030a7939-ad4d-308f-a302-ed1e17d7c744.roa
File:                     030a7939-ad4d-308f-a302-ed1e17d7c744.roa (raw, json)
Hash identifier:          EaZhEU6pmxXQTkB+lohJmwWo6Bzmfo1rcIuZ6iGukvM=
Subject key identifier:   49:BB:53:D8:BE:44:4F:FB:24:F8:A1:53:ED:B9:23:9A:6A:0B:FC:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A86CFA1CC3C7A0320E197D640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/030a7939-ad4d-308f-a302-ed1e17d7c744.roa
Signing time:             Tue 15 Jul 2025 12:37:26 +0000
ROA not before:           Tue 15 Jul 2025 12:37:26 +0000
ROA not after:            Mon 13 Oct 2025 12:37:26 +0000
asID:                     396570
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:cf:a1:cc:3c:7a:03:20:e1:97:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 12:37:26 2025 GMT
            Not After : Oct 13 12:37:26 2025 GMT
        Subject: CN=c782a8ba-1859-433f-a35c-321ade5caec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d3:f9:4e:78:18:4c:c3:01:d1:19:95:91:2e:
                    51:07:d5:2e:f6:ea:b9:2e:16:95:6d:74:bb:f5:91:
                    82:7c:db:f9:da:dd:71:57:9c:ba:ba:9a:48:be:c2:
                    4c:63:c2:70:5f:88:b7:02:ba:7f:44:3b:66:7c:d4:
                    db:f0:f8:a7:45:94:d9:8e:80:2f:12:2f:22:8a:16:
                    81:7a:c7:57:33:f8:1a:e7:06:bb:d8:ec:cc:33:f2:
                    d0:9e:ae:a4:f3:c5:de:dd:90:34:89:bd:6a:5d:a4:
                    de:da:b8:76:4c:2c:2c:d5:ea:c3:81:96:04:69:74:
                    26:5c:08:27:dc:56:a2:2e:ba:75:52:26:74:6d:4a:
                    09:3a:fa:ba:14:35:ef:73:91:a9:1d:a8:f0:4b:ee:
                    f2:f1:0f:fa:9b:20:ff:cc:be:6a:71:41:eb:6e:b2:
                    7e:1c:ac:c0:ed:8f:a3:5a:ab:bb:40:c3:3e:25:20:
                    46:c7:68:81:88:83:28:8a:42:a0:1f:17:01:a9:e9:
                    8a:99:ba:c4:06:23:f8:87:96:ad:48:32:8f:0e:26:
                    30:90:d6:1c:a8:ea:09:05:ed:91:68:b9:3f:2d:00:
                    bd:02:ac:1a:b7:3c:93:50:54:6b:f1:f3:d8:22:62:
                    39:35:83:8c:47:54:09:d3:c8:bd:55:4f:cc:7a:af:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BB:53:D8:BE:44:4F:FB:24:F8:A1:53:ED:B9:23:9A:6A:0B:FC:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/030a7939-ad4d-308f-a302-ed1e17d7c744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:27:8e:11:a1:2f:72:a8:f6:15:9f:31:97:b1:4a:37:7b:c0:
         b7:7f:0d:af:73:f9:74:8e:c5:7f:de:7b:40:bb:1e:7f:00:8e:
         fd:de:8a:a0:e7:19:77:5c:83:82:97:ec:09:4f:3b:47:3d:b9:
         98:14:da:0e:d9:8a:f8:05:5a:b6:1b:e8:99:fd:34:de:e7:73:
         91:b8:4a:27:85:3c:47:ba:d4:63:24:a6:de:4e:1c:9e:82:f0:
         11:b2:69:6c:aa:65:2f:be:35:3f:e6:2f:8a:00:22:d2:87:80:
         e7:ff:4f:d7:ce:79:0c:22:cc:be:5a:ab:09:22:34:d3:c3:2d:
         63:16:f5:c9:f3:a0:12:7d:1f:f2:57:26:2a:89:ce:90:97:68:
         98:8f:ed:f1:12:cb:b5:8c:ba:9c:40:23:97:16:20:02:35:b7:
         d6:cc:bf:c7:d7:19:47:09:a5:ca:99:e9:63:69:f2:e0:bc:c2:
         92:c9:fa:2f:fb:06:b8:56:51:a2:d4:ad:f8:84:46:e2:f2:d5:
         e0:10:5c:77:6e:67:d4:c1:1a:22:20:37:66:d3:7a:41:19:81:
         8a:12:28:b2:3c:1a:1f:d2:fe:55:49:37:c6:af:31:f7:18:48:
         a1:ad:ff:6d:51:03:a4:9c:ad:ed:9b:db:79:48:ca:df:93:46:
         72:21:de:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:12:02 2025 by rpki-client