Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/917b6b75-0a59-30cb-bbf3-3762643ffdae.roa
File:                     917b6b75-0a59-30cb-bbf3-3762643ffdae.roa (raw, json)
Hash identifier:          pwD7Z+os44/mkU319aiLPFvqQwK6ZSP2JzkNnCjFX+0=
Subject key identifier:   3F:21:7D:1A:30:4C:14:A7:F9:E7:91:43:A1:C5:42:8E:54:55:73:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6290805B6A4775E61C2A1100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/917b6b75-0a59-30cb-bbf3-3762643ffdae.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396577
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:80:5b:6a:47:75:e6:1c:2a:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=9349b671-b073-4063-b4dd-c403f6f6d3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9c:73:cf:9c:1c:da:66:9c:ab:29:1d:23:fe:
                    07:b4:ab:67:df:b3:d3:e6:fe:90:13:d9:09:0d:ea:
                    ab:ba:34:05:4b:0f:26:c1:02:81:86:bb:91:93:62:
                    82:f8:60:c5:dd:c5:91:02:ab:7c:d2:76:0c:3d:26:
                    57:9c:c3:a6:98:5e:29:d1:df:14:cd:d4:c3:f5:91:
                    b4:62:2a:3d:47:6b:e2:ad:1d:72:87:78:76:f9:5d:
                    3b:be:31:dd:98:9f:68:8c:82:9b:14:20:9a:53:d1:
                    9c:cb:00:71:71:5b:47:8b:22:67:e3:2f:47:19:86:
                    08:77:01:67:65:21:af:83:ec:7d:c3:6a:20:2c:ea:
                    8f:4a:de:c2:8a:01:97:a5:76:3c:db:b2:f5:87:ba:
                    8f:a6:c4:61:f8:87:59:bc:77:69:b4:ee:5b:dd:f5:
                    eb:66:16:fa:78:47:de:1a:0f:b3:65:c3:22:c4:3c:
                    4e:53:a3:cc:19:70:cb:22:30:8b:f9:96:1f:de:b7:
                    8f:be:59:2b:65:d7:5e:3e:bd:13:f8:2b:65:d2:c9:
                    9b:35:b2:dc:11:fa:77:4e:9f:da:c3:93:dc:5e:08:
                    e9:44:c2:f5:06:b2:d5:92:4b:99:04:d1:ae:c9:8b:
                    0d:0e:e0:d8:2a:0d:98:62:b6:7f:5e:20:46:5e:64:
                    08:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:21:7D:1A:30:4C:14:A7:F9:E7:91:43:A1:C5:42:8E:54:55:73:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/917b6b75-0a59-30cb-bbf3-3762643ffdae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:b2:9b:ca:da:4c:51:10:a0:e6:09:d2:4f:8c:1c:fa:31:d6:
         10:1d:74:02:ca:1e:8f:ac:1d:1d:68:8c:23:a3:f4:44:30:55:
         8d:54:f4:b8:5f:63:63:6d:20:14:19:de:50:e4:74:12:82:85:
         61:45:c2:b2:3f:58:0c:ab:a2:2a:5e:d5:68:82:d9:ca:4f:e5:
         e4:37:b4:7a:4a:46:86:ea:8a:63:6f:16:85:03:f7:26:3d:f6:
         9a:66:b5:3d:95:f1:76:a2:c2:22:db:9b:fe:a7:ae:c0:77:45:
         fc:ba:f2:e3:2d:f3:d0:e5:fd:f1:1d:c3:41:ac:45:0a:0c:14:
         50:9e:a0:3a:33:d0:62:7e:d2:d7:e4:9a:91:a3:ce:eb:75:bd:
         ef:4c:3c:cc:ed:7c:85:2a:c6:f6:16:04:19:9d:b6:81:bd:3f:
         fb:80:6c:41:70:9c:0f:fa:ff:56:c8:c4:ed:d0:c8:6e:a5:bb:
         30:11:6d:dc:9a:81:81:9e:74:45:ff:ff:60:d3:a2:45:4a:75:
         49:dc:b2:9a:8c:a2:e2:03:2e:bf:05:81:f8:38:7e:5c:f0:b4:
         05:a2:d5:1b:57:4f:76:b4:3c:a2:64:27:74:4b:32:24:67:01:
         d4:d6:19:34:31:6e:a7:8a:77:d4:9f:e3:79:e8:68:c9:c3:2b:
         fd:2c:fe:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:19:36 2025 by rpki-client