Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59f81075-3aa8-3866-9190-36a49fc40e73.roa
File:                     59f81075-3aa8-3866-9190-36a49fc40e73.roa (raw, json)
Hash identifier:          tpL4sTPq/w6tYNuxVVAoMFWMzPMv0cJeTu1q/8WOQEM=
Subject key identifier:   11:75:A3:5E:9E:ED:7F:DB:E6:48:33:9B:94:F0:7C:12:5A:EC:AF:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD618C7996F4AE1CF02000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59f81075-3aa8-3866-9190-36a49fc40e73.roa
Signing time:             Tue 01 Jul 2025 13:48:37 +0000
ROA not before:           Tue 01 Jul 2025 13:48:37 +0000
ROA not after:            Mon 29 Sep 2025 13:48:37 +0000
asID:                     25485
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:61:8c:79:96:f4:ae:1c:f0:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:37 2025 GMT
            Not After : Sep 29 13:48:37 2025 GMT
        Subject: CN=d4b95d7c-7893-4330-a968-34214a65498b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:85:de:63:c0:f2:43:a9:0a:29:e7:92:6c:
                    03:a2:b5:11:85:be:40:5b:01:4c:ed:a7:8f:0c:5c:
                    c3:39:86:74:ab:85:5a:e2:6c:c5:74:5b:6b:57:58:
                    38:99:a9:b5:c2:2d:14:15:31:c0:45:1c:9d:a5:91:
                    1d:32:e4:91:d9:19:52:1c:73:c3:97:03:f7:da:6d:
                    1e:b6:1c:86:4a:25:14:5d:da:ad:d1:84:c6:ae:ad:
                    5e:b0:15:16:7b:f9:a3:81:d1:e3:c6:b9:72:b4:01:
                    36:59:be:b4:31:bd:85:92:49:5f:cc:72:a2:29:b4:
                    14:6a:51:8c:5a:3e:75:65:3a:d9:af:1c:1d:f9:df:
                    ce:82:b3:7a:ea:38:17:e9:82:f4:b7:1d:b2:0d:95:
                    18:86:1c:9f:fe:ce:b8:b9:ef:f6:43:f9:67:26:95:
                    c9:8f:69:12:83:36:2f:46:ec:e3:24:f9:43:2f:7a:
                    af:6d:3e:91:5a:ce:59:cb:7a:06:c3:5d:00:76:df:
                    15:8d:d5:7c:cf:2b:af:8a:51:19:58:05:11:fd:1c:
                    6d:08:17:27:d5:2b:17:25:0e:b9:2f:d6:20:a8:db:
                    b7:12:b8:48:76:a2:3e:3d:83:15:3d:d4:29:ae:06:
                    6d:32:b9:06:a4:85:d9:3d:13:94:39:78:8d:aa:ae:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:75:A3:5E:9E:ED:7F:DB:E6:48:33:9B:94:F0:7C:12:5A:EC:AF:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59f81075-3aa8-3866-9190-36a49fc40e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:89:4b:c1:6f:81:67:68:7a:dc:27:2f:e8:4b:8d:3d:a3:37:
         eb:d9:24:e8:19:b7:ce:ac:df:79:7e:61:9d:2d:aa:5e:4a:9c:
         7d:ee:28:a8:4b:b3:14:72:ab:aa:70:93:f4:35:4a:d6:0e:1c:
         ba:4f:60:88:6f:bc:61:cb:8a:14:98:a5:79:be:72:82:9e:29:
         00:8e:60:1d:bd:36:7d:90:f0:ff:b9:9a:bb:92:ae:72:8b:2c:
         b3:2e:6d:92:c8:53:97:82:a2:28:c5:65:4f:79:f0:9f:2d:3c:
         04:f9:16:17:a2:70:2b:f0:c0:de:6b:2f:18:60:0f:1a:9b:be:
         c4:6c:02:16:38:d4:81:aa:ca:d5:82:63:6e:2b:fd:8d:61:b9:
         8b:fe:c9:09:de:b6:bc:cf:33:59:3e:18:1c:2a:e0:eb:73:74:
         97:8c:f8:13:a5:79:47:6b:e7:98:8f:70:85:15:96:e1:70:6d:
         ea:f2:1d:83:a7:92:52:bc:17:13:c0:a6:9b:72:40:b8:77:77:
         41:1a:0f:ad:17:16:82:f9:31:17:16:eb:ad:0a:78:5a:c2:ef:
         c7:8c:4f:95:1c:07:eb:63:d0:28:79:f9:b6:79:9a:dc:27:3a:
         da:b9:2f:db:a2:49:8b:b9:ef:1d:89:90:2b:83:ac:62:ea:62:
         77:98:04:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 07:43:46 2025 by rpki-client