Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/521f0e1d-bc5a-39e1-887d-5f0d3a6f08ae.roa
File:                     521f0e1d-bc5a-39e1-887d-5f0d3a6f08ae.roa (raw, json)
Hash identifier:          PhsrfOKLk1UGkbiHiZIA+1y2evBiPxgB7TyJXo9J/ZA=
Subject key identifier:   EF:6C:8C:F1:50:C2:91:2B:10:60:8F:DB:47:E6:9E:13:D4:06:F2:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A62909B1204EA6AEB01412F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/521f0e1d-bc5a-39e1-887d-5f0d3a6f08ae.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396588
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9b:12:04:ea:6a:eb:01:41:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=7833adaa-8b5e-4417-8894-dbaa5f6fcbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3c:99:3e:59:a3:a3:26:c5:a2:15:41:a9:b4:
                    1e:68:57:f3:13:73:61:90:bc:c3:96:7d:87:4f:a6:
                    76:ec:3a:05:95:a5:63:cd:00:2b:c8:8f:63:2c:84:
                    52:61:5d:c7:d6:3c:d6:b8:ae:7f:b1:71:95:2e:2b:
                    89:42:d1:11:95:24:b4:23:bb:1d:fc:30:0a:48:dc:
                    d3:0f:c8:98:80:2e:a2:5e:92:cb:23:ae:49:95:39:
                    2a:02:1f:b1:50:68:4f:9a:0f:2c:18:18:09:bd:69:
                    dd:be:55:b3:7f:83:65:97:cc:51:ad:a4:52:4c:66:
                    e8:3a:9f:eb:66:29:b9:25:76:17:98:48:86:45:1e:
                    c8:d4:a1:b8:15:51:78:c2:fd:3a:07:2c:5a:0e:bf:
                    c2:00:58:67:9a:52:81:64:a8:45:55:e7:45:1b:89:
                    6a:2a:c9:bb:7b:59:90:ec:0c:33:98:f8:f8:e9:45:
                    c6:9d:dc:e0:52:79:a2:d8:2b:81:f8:d4:dd:3c:ae:
                    44:11:00:d6:38:04:6f:f2:f2:e8:57:2b:5e:dd:bc:
                    8c:42:f5:63:1b:70:4e:79:d9:64:47:0b:d8:b9:ca:
                    01:78:7d:f9:4b:41:31:57:d4:6d:84:db:5d:7d:e9:
                    f6:d7:27:e9:f7:20:0d:a9:0f:e5:ee:e5:f5:75:f7:
                    ab:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6C:8C:F1:50:C2:91:2B:10:60:8F:DB:47:E6:9E:13:D4:06:F2:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/521f0e1d-bc5a-39e1-887d-5f0d3a6f08ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:1a:86:29:8c:8e:50:52:43:2d:5e:73:fe:99:8d:63:62:e1:
         97:33:31:24:5c:e7:18:ea:0f:5e:87:d2:f1:13:e8:34:00:ae:
         0c:7c:2e:24:ed:3f:3b:a6:2c:96:b9:8e:ef:c9:2b:b2:ca:38:
         83:89:ce:39:b5:21:7f:9f:4b:a2:b9:bd:bc:10:f5:21:05:f7:
         ec:34:fe:ce:2b:c8:80:0d:0e:62:75:e5:95:6a:3e:21:90:a1:
         fc:c6:ea:f9:11:d5:de:be:db:61:4a:1e:84:55:5f:f0:eb:a9:
         0b:6f:d8:a7:72:04:ee:2e:38:17:35:e9:11:d4:6f:53:6a:f5:
         d0:19:59:dc:63:3b:42:7f:50:b0:0c:0a:5d:8d:a4:eb:7f:49:
         47:65:a6:b7:6c:91:56:0f:42:5f:d7:68:e2:b3:ea:99:1e:94:
         fc:44:d2:3d:d7:08:55:7d:be:b5:6e:9e:74:4a:7a:fd:f1:d9:
         c5:ab:34:7d:a4:4f:5b:f6:57:0e:ae:2e:8e:aa:58:e3:1a:8f:
         5e:06:a9:92:3f:e2:a9:ae:05:07:ae:e0:1a:a2:5d:61:e5:43:
         9c:3e:7a:1a:6b:d4:be:f1:7e:bd:d9:6e:16:4e:43:ca:eb:0b:
         8f:50:47:e0:46:db:1f:49:1e:95:f1:71:ce:7e:9f:ca:f8:7c:
         b3:d7:09:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:23:23 2025 by rpki-client