Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/344f65ef-c2f9-37a7-abd5-c18a92d7e543.roa
File:                     344f65ef-c2f9-37a7-abd5-c18a92d7e543.roa (raw, json)
Hash identifier:          n8ro38JNxnd7r3uTHDA3q9HPLP3LX5hZLaTOBgGjLEw=
Subject key identifier:   30:7E:C0:D0:84:E7:38:EE:65:3E:B5:7C:FE:F4:4C:27:A6:98:52:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD6036F1BA9C1C2E0AF180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/344f65ef-c2f9-37a7-abd5-c18a92d7e543.roa
Signing time:             Tue 01 Jul 2025 13:48:36 +0000
ROA not before:           Tue 01 Jul 2025 13:48:36 +0000
ROA not after:            Mon 29 Sep 2025 13:48:36 +0000
asID:                     396614
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:60:36:f1:ba:9c:1c:2e:0a:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:36 2025 GMT
            Not After : Sep 29 13:48:36 2025 GMT
        Subject: CN=1a0c8d0a-d4bc-4380-94a5-c0ba909d9352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:1c:6e:63:b5:25:6b:6e:12:e4:ae:1e:be:
                    22:cb:25:81:e1:48:d0:88:98:b2:b5:b3:0a:e0:be:
                    a8:1a:12:e4:58:50:cb:e8:56:88:69:ca:3b:81:da:
                    b0:a0:75:09:93:4d:a7:76:51:2a:10:aa:c9:2e:06:
                    95:6b:7e:9f:d2:f9:f0:4b:a8:67:1f:63:f7:78:5b:
                    48:4d:73:2e:33:60:43:07:c5:07:8b:3f:22:d5:0f:
                    c1:30:fd:fa:36:c7:26:7f:f6:e0:8b:b8:10:42:f5:
                    49:95:3b:6c:c3:a4:ce:f4:32:70:8d:84:4b:a9:77:
                    47:75:8e:c9:ee:81:f9:69:97:3e:34:6f:e4:2f:7c:
                    cc:53:71:fc:7a:63:40:f5:9f:71:03:17:f3:22:64:
                    be:f8:fc:4a:26:c2:42:ab:7e:3d:94:0d:3b:0c:8f:
                    e4:ce:f2:b2:c9:ac:35:3e:aa:96:88:14:a2:7d:c5:
                    1a:0b:92:7f:63:ec:fb:02:bb:29:77:54:9b:ed:c7:
                    a5:bd:b6:e8:ab:d0:53:63:b0:c7:8e:2e:d8:2a:c1:
                    5c:e2:a7:45:8a:86:36:6e:0a:68:fa:3a:ce:c9:3f:
                    b4:a6:14:00:85:69:07:ac:3f:19:ef:4b:4c:60:3d:
                    92:8e:e3:4f:62:05:c7:72:8b:f1:4c:9a:05:73:43:
                    8c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7E:C0:D0:84:E7:38:EE:65:3E:B5:7C:FE:F4:4C:27:A6:98:52:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/344f65ef-c2f9-37a7-abd5-c18a92d7e543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:38:f2:10:79:11:2a:9e:46:0d:27:9e:38:b2:11:04:d7:00:
         dc:81:6e:85:82:76:1b:f3:07:10:c8:e5:51:1d:26:88:30:52:
         ca:81:79:e0:be:a1:0e:75:46:c8:f6:5f:00:e5:3b:30:ee:4b:
         d0:1f:1b:71:87:e7:69:4c:cd:a4:f1:bd:a0:d3:26:3f:d6:e8:
         a2:6c:8d:2f:af:9b:5a:65:0a:00:39:ac:5e:4c:28:5e:82:90:
         41:21:1d:88:1b:0e:36:b3:94:2c:30:13:3a:20:f2:53:17:e6:
         10:2e:73:2b:e5:b4:cf:b1:79:37:94:31:94:fe:1f:d7:ee:6b:
         e2:2a:fb:71:ce:be:ed:b3:23:10:af:69:6d:b2:95:6a:32:bb:
         89:84:e6:c5:25:5c:b5:e4:ea:be:08:b5:21:73:45:f6:8d:45:
         f4:94:ee:bd:e3:3a:67:64:09:06:97:ec:dc:ea:db:f8:8d:78:
         c5:8d:d7:a2:df:7e:27:6a:ca:5c:b4:b1:57:ee:e8:db:da:9b:
         68:df:36:c6:c4:26:ea:e8:f9:af:2b:47:eb:15:c0:ad:59:cb:
         63:bb:85:6c:37:bc:76:cc:70:95:27:5d:d8:f4:6d:cc:01:7c:
         4a:d6:f3:a2:e0:03:37:b2:b1:44:8b:25:10:b5:75:c9:76:0f:
         aa:23:4a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 04:13:35 2025 by rpki-client