Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e73928a-0a58-3f62-8c1e-3c804511b586.roa
File:                     4e73928a-0a58-3f62-8c1e-3c804511b586.roa (raw, json)
Hash identifier:          5lj9O8K7PDyA3W2NoAYgwkZ2JnFEmrBZ0eZjI7vpODM=
Subject key identifier:   A1:33:9B:F8:DC:7C:D7:65:F8:E3:EB:D2:13:80:F2:10:16:D1:52:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD5E8DE68312AAA01D7CA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e73928a-0a58-3f62-8c1e-3c804511b586.roa
Signing time:             Tue 01 Jul 2025 13:48:35 +0000
ROA not before:           Tue 01 Jul 2025 13:48:35 +0000
ROA not after:            Mon 29 Sep 2025 13:48:35 +0000
asID:                     396590
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:5e:8d:e6:83:12:aa:a0:1d:7c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:35 2025 GMT
            Not After : Sep 29 13:48:35 2025 GMT
        Subject: CN=85d3dbdc-4ca0-43e3-9bb4-dd1f8df0ad2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:44:6e:0f:c2:30:4e:b8:3e:32:06:91:42:
                    50:68:93:cd:39:1e:3f:e8:f8:0b:d4:bf:85:9d:03:
                    fc:1e:49:fb:37:12:c0:78:73:5b:0a:20:ce:8c:14:
                    63:bc:5c:ac:28:c4:6c:34:e3:3d:bc:87:ee:53:83:
                    1b:a9:d0:4d:d3:cf:da:6d:77:b8:db:24:26:a6:a8:
                    5c:81:63:4a:60:ae:46:af:52:30:3e:99:6a:4c:f1:
                    23:4c:8b:7f:b1:4f:c5:ae:9c:1b:cb:86:ee:14:d3:
                    1b:ea:e8:13:25:d4:ff:d3:22:b7:a5:e2:94:69:af:
                    ee:96:d2:27:e9:6b:a1:fd:0f:4a:08:6a:d8:d4:f0:
                    45:d7:9d:3f:18:a8:fd:5d:aa:eb:be:9f:9f:58:8e:
                    4e:6c:0e:07:16:dd:62:93:35:d0:ff:04:f0:0d:c9:
                    28:b4:f2:6e:2f:19:d3:fa:93:d3:28:88:28:93:15:
                    a1:fe:78:6f:a8:aa:5c:0e:d7:7f:7f:f8:2a:9c:61:
                    6b:93:c1:cb:6b:15:a0:ed:52:61:d6:1f:b2:32:1f:
                    cb:8f:ea:e8:60:0c:59:16:a4:47:70:5c:2f:3a:35:
                    ca:54:3e:5d:e7:6b:66:d5:4b:77:85:59:2e:11:fb:
                    da:6e:34:73:02:16:35:d1:09:b2:e5:cf:d5:a4:84:
                    4f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:33:9B:F8:DC:7C:D7:65:F8:E3:EB:D2:13:80:F2:10:16:D1:52:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e73928a-0a58-3f62-8c1e-3c804511b586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:d5:a4:16:f2:fe:57:72:34:08:92:2e:f7:89:06:92:41:0f:
         92:3e:4a:6d:74:41:d7:5d:e6:5e:ee:a8:96:3c:11:85:0c:6f:
         90:ac:21:82:5c:36:bc:dc:20:b4:da:fd:5f:c7:cc:a1:d1:51:
         cf:37:96:7e:04:ae:1f:a4:41:68:02:84:f9:9e:f4:87:39:6b:
         6f:a0:01:72:45:98:78:9f:93:77:51:2a:70:64:71:e1:53:52:
         e9:3a:0c:e3:dd:44:d0:da:2d:c9:0f:e0:b0:9b:80:b1:ca:de:
         ea:a4:cf:9b:48:9f:4c:d2:f1:88:13:9f:e8:ed:1a:c3:3e:c9:
         ea:57:8a:70:94:1d:b2:78:bb:8e:4c:10:1e:06:10:22:1f:0c:
         a1:b5:e7:25:9f:e0:cc:c7:f3:09:0c:0b:d0:33:e4:af:0d:ce:
         0b:df:82:40:eb:27:4e:0b:33:b6:5a:e4:f1:b1:64:a1:a6:d1:
         c0:50:4c:29:08:ce:e7:a3:d6:05:74:9c:e9:7d:ab:68:d9:b5:
         2e:50:a6:0c:6f:76:61:e7:5e:f9:05:2f:cf:f6:14:2a:92:0f:
         6d:e5:7c:07:8d:17:3a:76:98:12:d3:d0:1a:2b:23:1a:a2:1e:
         29:3a:8b:6c:55:c7:b2:0c:22:2f:41:47:d6:5a:e1:d1:a9:9b:
         b7:28:34:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 04:03:25 2025 by rpki-client