Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c9933d2-6e93-358a-ae77-cc83e107cd67.roa
File:                     2c9933d2-6e93-358a-ae77-cc83e107cd67.roa (raw, json)
Hash identifier:          iaby0qhYSUDn7jA+7BBhaE0sQAroaWVXio2fQO/ixUs=
Subject key identifier:   B7:82:8C:2A:EA:FE:D5:28:DE:77:40:63:4A:7B:80:BC:29:DD:5C:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6290D60C9B792B9DBD60C140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c9933d2-6e93-358a-ae77-cc83e107cd67.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396595
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:d6:0c:9b:79:2b:9d:bd:60:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=1b2e1c06-f49c-48a0-a163-9f17adc7b07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:eb:ff:8a:72:c0:e8:16:7a:d9:23:b2:38:a1:
                    b8:af:39:2b:77:94:e6:f3:37:7a:4b:3a:a5:c0:9d:
                    a6:77:97:64:ef:e2:ae:19:46:a4:f5:d6:13:1b:3c:
                    d8:fc:0d:0d:8b:a7:67:69:a4:f7:a9:b7:38:38:99:
                    70:ef:fc:b8:33:fa:f3:3f:65:ae:62:c4:f8:14:c7:
                    17:fb:39:0e:8f:02:13:7f:2c:93:f4:7a:6c:da:f9:
                    8a:61:e7:d2:1c:41:f9:1a:ed:36:08:51:fb:0e:f9:
                    d3:aa:d5:b4:4a:23:0c:d4:11:4d:42:06:2a:8a:9c:
                    bf:89:64:0f:6a:06:00:75:be:be:d1:85:25:c2:e1:
                    f2:ff:ae:1b:e7:98:45:a0:ce:fd:f0:db:ef:02:49:
                    8d:09:a3:ae:5f:8e:5f:fb:bf:49:7e:36:92:e1:cd:
                    cb:9f:c9:88:81:77:4c:a2:94:1e:f0:bf:44:81:6b:
                    fc:7f:d7:99:f0:4e:f0:27:e4:c4:80:c6:b2:05:e8:
                    9c:58:93:8c:cf:34:cc:e3:83:0f:47:63:e3:77:92:
                    f0:22:f0:03:a0:1a:95:2c:df:fd:a5:19:58:57:b5:
                    c6:3b:9f:3d:06:81:00:70:3a:fb:3d:32:75:cc:30:
                    c2:e2:26:86:81:51:a4:8d:1b:90:75:35:bd:0d:b6:
                    d9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:82:8C:2A:EA:FE:D5:28:DE:77:40:63:4A:7B:80:BC:29:DD:5C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c9933d2-6e93-358a-ae77-cc83e107cd67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:93:0c:44:54:f6:ca:68:d7:1d:42:20:ec:3f:9d:12:96:a5:
         9b:90:6d:77:e0:06:14:63:17:d1:d7:6d:dd:ae:03:15:95:b4:
         10:77:8c:f5:0b:ff:ad:db:5a:f8:2a:e1:c6:2d:bb:e9:6c:8c:
         80:8e:dc:71:e0:19:69:bb:68:07:7d:a0:5f:4c:c7:2e:b4:27:
         24:e7:f6:b2:ea:ae:fa:51:93:98:bf:6f:f2:cd:03:fb:22:c5:
         44:e4:b2:94:17:2f:2e:79:dc:19:09:5b:78:8a:07:a7:b9:4e:
         74:a6:cd:51:6a:a2:0c:43:9b:ae:95:bd:06:f7:61:2e:20:01:
         75:4f:44:2e:db:a9:ac:ff:d2:06:a9:35:c7:c6:69:d9:2a:3a:
         e1:08:9f:ca:a2:4f:b5:83:c6:43:77:64:3c:a3:0a:7d:64:63:
         3c:88:5a:ab:b8:eb:dd:d7:39:9a:b0:3e:21:ef:aa:7a:40:8e:
         9d:19:0c:e2:0a:b2:e4:fb:43:ae:57:6b:95:87:4c:31:53:91:
         aa:2a:6b:e9:0d:7a:1b:4e:b6:85:b8:a7:d8:1d:f3:61:dc:68:
         5d:b9:d2:7c:8c:68:61:be:a4:5d:1b:9e:14:28:9f:47:a8:82:
         73:6b:4f:94:79:b7:7c:6a:0e:2d:e6:9d:ee:93:ef:f4:52:37:
         81:ab:02:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:18:09 2025 by rpki-client