Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09924c2d-e088-33e4-9fcf-a9c79eaead6d.roa
File:                     09924c2d-e088-33e4-9fcf-a9c79eaead6d.roa (raw, json)
Hash identifier:          w1WvYR54ftPnb/93pnXyqoYJVrS1/ZbLwXZ6VI5fsAI=
Subject key identifier:   73:34:26:58:14:DD:CA:C3:4F:EB:49:78:76:B9:63:49:90:54:6E:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD5D5CB56465522E576380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09924c2d-e088-33e4-9fcf-a9c79eaead6d.roa
Signing time:             Tue 01 Jul 2025 13:48:35 +0000
ROA not before:           Tue 01 Jul 2025 13:48:35 +0000
ROA not after:            Mon 29 Sep 2025 13:48:35 +0000
asID:                     397212
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:5d:5c:b5:64:65:52:2e:57:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:35 2025 GMT
            Not After : Sep 29 13:48:35 2025 GMT
        Subject: CN=2c8c4f94-6a83-4304-96c3-86b649d1894e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f6:e2:23:85:4a:6b:17:a4:bf:d9:8e:9a:c3:
                    95:47:9b:19:a6:37:50:b1:e3:8e:87:66:d2:dd:4c:
                    f7:f9:51:73:b3:2d:a6:c7:76:d2:55:0f:79:73:5a:
                    e4:b1:f0:9f:76:20:12:dc:f9:35:97:df:98:5b:89:
                    6b:1c:d9:5e:c8:c7:5b:bd:69:99:7d:9d:53:ab:17:
                    7b:58:05:ae:85:44:d0:ef:76:fc:6d:fc:74:03:92:
                    c6:46:1e:54:1f:29:2e:16:b7:ce:22:ee:3a:c4:89:
                    ad:7e:cc:59:58:bc:2a:05:c9:36:c9:cf:44:1c:70:
                    5b:84:79:3d:7e:63:00:46:62:82:2f:16:83:d1:d5:
                    82:0a:c6:65:fc:da:3a:80:90:b7:eb:0f:c9:08:b8:
                    5e:42:f4:91:1c:bf:fa:4e:20:47:3d:a6:0c:ef:09:
                    da:90:e9:f8:d2:8a:c2:fa:78:49:2c:bb:0d:05:67:
                    1b:25:5d:fa:02:b3:9b:ab:ac:08:26:93:43:8a:8f:
                    73:90:fa:89:c6:01:3d:bd:e9:c6:df:da:a8:b0:87:
                    d6:65:d3:f0:ea:94:ea:55:e8:50:ec:e2:73:70:ab:
                    e4:b0:51:0a:9e:4a:6b:60:b1:00:52:f7:1d:19:f5:
                    06:5e:a7:c5:f6:34:0b:73:dd:24:31:59:aa:e4:a6:
                    88:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:34:26:58:14:DD:CA:C3:4F:EB:49:78:76:B9:63:49:90:54:6E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09924c2d-e088-33e4-9fcf-a9c79eaead6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:4c:11:61:cd:19:a3:bd:d8:1b:1d:01:01:62:9d:66:a8:aa:
         32:c1:7f:54:9d:fd:87:46:c2:c2:05:af:7f:4d:fc:03:7d:cc:
         25:0f:7e:da:62:47:d0:9e:a7:f3:87:26:09:64:5a:4d:83:be:
         f1:e2:4f:db:19:c1:72:3b:41:73:43:98:3f:e2:f4:b9:93:ea:
         ae:5a:fe:08:7a:db:98:af:eb:c4:d1:c0:de:f8:4a:cf:23:dd:
         68:05:d2:23:d5:3f:90:97:bd:20:ca:80:e2:78:39:bd:81:d4:
         67:3f:4e:62:95:98:c3:90:1a:f1:4e:29:bd:f6:c9:85:7a:b1:
         cc:3e:c4:9e:30:99:e2:1a:57:86:68:09:ee:21:06:96:9e:4f:
         11:d5:72:98:0f:b6:a6:f3:0f:10:e5:00:66:21:23:ba:4f:ce:
         ac:81:dc:37:65:fb:11:f6:5c:b2:d8:4d:87:8a:e4:f8:98:b0:
         3c:64:0a:da:54:1f:b2:69:68:a1:b6:ef:b6:19:ab:41:26:f0:
         27:5e:d9:ec:ae:a3:99:7a:b4:b7:c5:6a:dc:e8:12:69:10:5d:
         3d:ce:23:71:f7:60:5d:a4:dc:09:e8:31:13:24:3a:83:7d:a6:
         99:36:f6:34:39:d1:17:2c:cc:6f:d8:d8:e3:06:66:57:f7:4f:
         46:55:2f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 04:20:58 2025 by rpki-client