Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/255f70c4-b400-3ba5-a363-e9ec374f86f0.roa
File:                     255f70c4-b400-3ba5-a363-e9ec374f86f0.roa (raw, json)
Hash identifier:          1xlkwYE795LF0zVw9DyFKcLPJHbIMNpkQIdbjCg921g=
Subject key identifier:   18:CC:63:BE:51:0B:A9:8F:CF:45:A9:50:C8:FD:7B:A6:27:B7:6A:FA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5CFDEB2F0204130443D793A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/255f70c4-b400-3ba5-a363-e9ec374f86f0.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     396608
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:eb:2f:02:04:13:04:43:d7:93:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=1fa0b506-269c-4c0b-acd9-e81704348fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:41:97:ce:6c:13:17:3c:26:9d:00:cb:a4:f4:
                    c1:8d:1e:aa:46:d1:a0:3a:0a:a7:31:1a:13:da:36:
                    d9:d3:31:51:da:b8:e0:6e:54:68:e1:1c:04:3a:1c:
                    05:6a:c2:91:62:d3:e4:f4:ac:1d:88:c5:08:67:8a:
                    82:64:d8:c3:82:21:e5:34:75:ce:07:b2:ac:7f:7f:
                    cb:b2:36:88:32:7f:1e:ed:52:1c:68:b7:2a:92:16:
                    11:af:fa:be:81:32:a5:79:9e:87:a2:a8:e2:31:62:
                    ff:46:c1:ce:14:4c:f1:4e:9f:17:5f:d6:8f:af:e6:
                    c5:5e:81:c0:79:f0:01:21:22:4c:fc:16:d4:b4:a1:
                    a5:af:62:1c:38:f6:d6:7f:0b:26:7e:7c:55:43:93:
                    a0:fe:2b:03:60:e4:b6:29:4c:2b:89:c5:a8:df:75:
                    af:6e:aa:be:3d:4b:b5:03:d6:e2:f9:23:73:0e:c4:
                    73:bd:ad:26:6d:7a:78:fc:99:47:1c:23:7b:1b:c6:
                    94:57:00:4d:1e:43:e9:62:7c:2c:ec:f5:7a:03:36:
                    dc:9d:b4:b3:16:04:be:af:35:00:0b:21:41:ba:cc:
                    bb:16:5d:bd:36:37:5d:0c:f4:cd:ec:60:a5:82:8c:
                    23:6e:b8:79:93:7a:1a:ef:20:4f:53:32:14:4e:8d:
                    17:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CC:63:BE:51:0B:A9:8F:CF:45:A9:50:C8:FD:7B:A6:27:B7:6A:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/255f70c4-b400-3ba5-a363-e9ec374f86f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b9:0a:4b:a3:c0:63:29:68:e3:89:35:de:3e:6d:1a:81:83:
         dc:69:2b:52:31:f8:31:07:97:11:5f:6c:a8:93:d0:24:71:af:
         71:5a:52:31:fb:33:61:c6:f8:ea:c1:3c:11:b4:c6:51:e4:98:
         89:8a:df:77:90:95:92:ed:de:eb:ca:f2:a1:2c:55:37:6d:79:
         21:f2:3b:9b:33:f3:9c:55:d5:fc:7c:f5:35:17:f8:53:f7:56:
         db:15:40:0e:7e:63:4e:d6:f4:6f:60:7e:f5:41:4f:4a:7c:93:
         c0:8e:d8:0a:cc:87:08:00:f9:82:e4:a2:6c:36:2c:93:37:53:
         ce:51:1c:85:50:73:12:44:4d:e2:7e:c9:bc:6c:9a:64:ec:c4:
         dc:b3:8c:6e:e6:78:63:d4:81:9a:b0:01:68:b7:81:b8:7c:2a:
         fc:1d:22:a4:b0:01:b6:15:23:5e:c5:4e:ed:33:7c:66:a7:e8:
         3a:a0:ee:ec:68:54:49:3a:fd:17:17:bd:e7:a6:11:51:46:ab:
         97:1d:37:1a:1d:49:d7:63:f3:b8:ce:b2:6e:68:82:d3:8c:d7:
         24:ca:2b:40:7d:7a:24:88:5b:b9:87:c3:90:f1:6d:81:7a:10:
         6c:0f:51:4d:d4:6c:3d:f9:df:46:be:94:28:88:86:f8:7e:25:
         9a:0b:d8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 10:55:32 2025 by rpki-client