Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/167d3ddb-9087-3d81-8f86-c36adf6a26e0.roa
File:                     167d3ddb-9087-3d81-8f86-c36adf6a26e0.roa (raw, json)
Hash identifier:          VA+P5cZHHbwrZ459nyxzHPfoJ24ab3N9VxohC5FFFos=
Subject key identifier:   D5:06:5F:78:F9:A9:25:19:6B:F6:3D:71:B2:96:0A:CB:01:5D:0F:39
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5CFDEB88FF7D6C77B3D8F880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/167d3ddb-9087-3d81-8f86-c36adf6a26e0.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     396586
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:eb:88:ff:7d:6c:77:b3:d8:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=e48ac54d-fc30-4dec-9bf6-45817679e4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:2c:23:31:4c:49:1a:f2:b3:b2:34:9f:48:
                    86:16:77:44:d9:81:d3:6b:c9:8f:ba:b5:f7:06:1e:
                    1f:71:0f:3d:bc:16:e6:5a:a1:a0:0f:6b:d2:e1:c8:
                    d2:ad:a8:af:82:5a:98:b1:44:8c:c4:46:02:5e:7a:
                    36:0c:db:57:1b:07:a0:79:45:94:ed:24:cc:51:17:
                    26:dc:ab:09:6b:08:84:d3:ac:8b:6d:42:73:da:bc:
                    ff:38:e2:71:bd:8a:ab:4f:f2:9a:62:08:3f:26:05:
                    fb:e5:cc:f7:2a:40:2b:91:0f:b0:d8:2b:83:da:8e:
                    2e:5b:0d:ca:9d:a6:d9:91:7f:6a:76:da:80:09:11:
                    40:12:34:36:67:c4:58:06:a3:27:9a:73:22:ff:b6:
                    ba:cb:c7:f3:89:cd:5f:c2:a6:1c:ea:3b:31:7e:88:
                    21:78:77:9b:46:b4:5c:d7:90:8b:89:bc:aa:7f:71:
                    a6:70:92:e1:d9:54:4a:5b:de:06:25:81:4e:15:ff:
                    ba:d8:37:7f:d8:2e:fa:f5:37:da:d6:1d:14:a5:4e:
                    af:d2:77:34:cd:1e:6b:5a:eb:6c:dd:28:13:89:9a:
                    cc:29:43:10:98:b2:d5:b1:87:63:69:60:39:07:41:
                    68:0d:fd:93:3d:51:80:d8:25:bf:22:c2:15:c6:b7:
                    19:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:06:5F:78:F9:A9:25:19:6B:F6:3D:71:B2:96:0A:CB:01:5D:0F:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/167d3ddb-9087-3d81-8f86-c36adf6a26e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:a9:0a:d9:47:96:5a:d7:a5:9b:a2:35:75:72:03:4c:75:a5:
         ee:8c:c5:a9:2e:a7:88:8d:ee:08:17:e5:28:fc:a2:67:44:15:
         50:8f:01:21:66:ea:bc:da:60:6d:e9:d0:57:e6:79:17:5e:48:
         41:54:a8:57:4a:7f:d8:90:38:b0:3f:48:8e:93:94:33:03:b4:
         34:66:53:f3:90:fb:fe:e5:f6:86:4b:ff:3c:2e:c6:fc:9b:38:
         b8:ec:99:52:5d:75:ba:ca:c1:fb:68:0d:2b:b6:ed:05:34:fa:
         a2:db:e1:50:16:1b:97:32:34:20:f8:eb:4e:2d:98:b3:5a:0c:
         ad:a2:a3:91:15:36:15:06:f2:cb:4b:a6:1f:2f:4b:02:74:a5:
         3e:f9:34:6d:dd:48:78:c0:da:f7:8a:58:22:c4:e1:16:1f:fc:
         b7:24:c5:1a:d0:26:8c:92:3d:73:04:95:2f:95:90:9f:a0:e9:
         b8:02:ee:e7:97:50:93:35:bb:78:d5:ba:28:69:52:29:4a:48:
         a2:b0:02:8e:e4:fe:6f:17:f5:e9:6b:18:ac:68:de:f2:da:ef:
         04:e2:03:a9:80:89:9b:61:f9:94:eb:27:cd:b6:ca:b8:b7:96:
         5b:a6:bc:f5:76:df:7a:a8:05:d5:73:b9:54:30:6a:d7:75:7d:
         6a:21:37:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:13:55 2025 by rpki-client