Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2dfe13-0d11-3fc3-b1a9-a4e446cfb473.roa
File:                     1c2dfe13-0d11-3fc3-b1a9-a4e446cfb473.roa (raw, json)
Hash identifier:          JIDNL/XBYGwQ8YpcWL9KoyvgIrba95MzmKF9CiTXZM8=
Subject key identifier:   BD:AB:DB:CD:65:4A:15:8C:8E:86:5A:8E:50:89:22:22:35:7F:C9:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A119AC2FE16FE2B79E6982B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2dfe13-0d11-3fc3-b1a9-a4e446cfb473.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     396586
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:c2:fe:16:fe:2b:79:e6:98:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=8ed60e97-b1bb-4b99-aad3-992fedc0da1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a6:1c:c3:34:b5:d8:2c:9e:21:4f:c9:25:19:
                    14:ed:13:04:79:c1:df:01:08:0e:b2:57:3a:b9:3c:
                    29:a7:a7:f2:58:10:fd:3c:e5:a5:75:f5:da:fa:4a:
                    3f:e5:98:bc:82:9b:c3:cf:2d:24:3f:cd:ca:44:86:
                    7a:de:34:04:f2:1a:96:04:8b:db:56:84:db:71:70:
                    09:ac:0c:5e:8d:cd:0e:f2:56:40:91:f2:a3:70:30:
                    c4:5a:b9:f2:8e:69:cb:b4:b1:48:50:84:d0:5a:69:
                    d3:2e:d0:2b:38:ad:6a:9a:56:30:59:f8:e8:0a:84:
                    98:a7:e1:79:0a:d5:00:9f:45:91:16:cb:4b:fb:63:
                    56:06:da:88:d8:bb:56:fb:37:f6:03:fe:ae:f8:0b:
                    f2:d0:82:04:ee:7b:e1:af:45:94:eb:ee:5a:b8:7d:
                    62:4e:c5:ee:ff:77:12:71:a8:40:85:1b:2b:29:f7:
                    ec:7f:db:8b:63:92:08:b5:48:b9:eb:6d:ca:44:81:
                    9a:f5:99:4a:62:8f:b4:c0:c2:3e:68:f7:10:d7:78:
                    14:57:70:15:24:5e:8c:ee:40:8c:09:0b:d2:5e:88:
                    00:07:4f:d7:71:98:69:37:05:4a:b8:41:a9:b9:af:
                    9d:df:d8:8a:e6:7f:cb:96:c1:e2:b1:df:d7:1d:2d:
                    79:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AB:DB:CD:65:4A:15:8C:8E:86:5A:8E:50:89:22:22:35:7F:C9:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2dfe13-0d11-3fc3-b1a9-a4e446cfb473.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:65:ce:eb:0a:53:74:67:0d:6c:5e:cc:de:64:72:25:79:36:
         68:9c:4e:cd:e2:b8:46:76:79:c9:74:98:9a:db:49:42:ec:96:
         b8:29:73:92:ff:39:b1:82:d7:63:1e:31:72:91:85:87:74:81:
         88:8e:1a:2c:57:17:03:59:bb:30:40:7f:72:38:09:5e:19:e2:
         e9:d1:40:e5:91:6c:2b:b3:37:7d:f4:58:23:69:3e:0b:43:2b:
         1b:60:45:d1:a1:08:16:78:e9:35:33:f1:d4:44:a9:7c:e8:3d:
         7f:e8:89:e2:6d:77:db:39:1b:2e:32:f4:c0:42:70:81:eb:65:
         44:ec:b8:d6:17:9b:a6:7f:f9:50:bf:84:73:08:0f:20:ce:be:
         74:b0:10:e5:6a:30:ec:61:41:70:f0:f2:a1:7b:ff:e9:e7:3b:
         88:a6:bc:93:36:7c:88:0a:9f:9f:c8:61:ae:dd:3b:d0:43:15:
         83:f0:83:0a:42:13:88:21:43:32:e2:3e:26:53:26:32:97:d6:
         2e:fc:c8:14:c8:a1:41:48:7e:79:70:1e:46:5e:1e:44:50:8b:
         ef:21:cf:1a:77:46:ab:7e:17:47:19:b5:8a:c1:c8:8c:de:54:
         1a:53:29:bf:57:dd:ff:3f:cb:26:d8:e7:a2:79:1d:02:22:7c:
         c6:62:84:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:36:14 2025 by rpki-client