Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60bc3aea-dbda-32e3-a1e7-c1fdc6a577e6.roa
File:                     60bc3aea-dbda-32e3-a1e7-c1fdc6a577e6.roa (raw, json)
Hash identifier:          XONrV07GwkeT3BgIjGB4Qv2F2hTKx//z5FVzz+NfwKg=
Subject key identifier:   2D:9D:BF:49:D1:1B:50:1F:8B:94:D8:90:D5:91:E8:20:96:ED:3F:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A119AC47766814F846DA0C380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60bc3aea-dbda-32e3-a1e7-c1fdc6a577e6.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     396582
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:c4:77:66:81:4f:84:6d:a0:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=eb91b637-968f-441b-a480-f9c2f79723a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d5:24:6e:25:8e:eb:dc:b3:4b:cd:bb:2e:64:
                    cf:1e:af:d6:df:52:d3:90:89:b0:f6:ad:a8:bd:3c:
                    32:9c:be:e0:e4:60:7b:c9:71:96:c7:79:05:7b:cc:
                    1a:a7:ec:f0:f9:f9:8b:d4:5c:42:ff:0c:10:56:18:
                    13:8e:22:c1:66:4b:1b:2c:14:9f:d1:92:b3:a0:f8:
                    1a:8e:e3:72:39:14:3a:e4:02:78:9b:62:52:fa:90:
                    c6:51:40:88:b2:67:ce:34:c0:a7:14:08:ac:22:fc:
                    ac:bb:fb:03:b2:bb:5f:ca:a8:b0:9b:16:23:fe:f1:
                    d7:54:6c:5b:84:8e:f4:7a:e4:9f:c6:25:e5:7f:37:
                    8f:63:c0:f7:ca:b3:40:4a:62:84:db:4f:3f:0c:98:
                    3e:58:a6:1f:78:79:23:28:6d:ff:3f:1b:90:b4:5b:
                    d8:3f:d6:4e:e6:d9:f8:72:32:ff:a2:bb:3c:62:13:
                    76:3d:3e:3b:54:c4:fe:7b:fc:78:e5:d4:59:3c:3f:
                    15:b7:9b:9e:8b:94:8c:80:a8:dd:32:97:d4:d1:d1:
                    9f:01:62:f8:db:4d:9a:20:8f:82:50:20:78:14:0f:
                    3a:af:1f:1a:af:09:31:33:95:52:85:dd:73:fe:cc:
                    1c:85:7f:3a:1c:11:62:cc:56:1a:28:cd:0b:c5:75:
                    02:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9D:BF:49:D1:1B:50:1F:8B:94:D8:90:D5:91:E8:20:96:ED:3F:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60bc3aea-dbda-32e3-a1e7-c1fdc6a577e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:39:be:8d:11:cc:90:21:99:42:a7:ea:a1:a8:00:47:c2:d2:
         05:91:c3:a7:07:b0:7f:3b:2d:a5:15:b5:18:34:db:ea:f0:f1:
         c8:f9:37:c3:e2:27:1c:f6:e5:f4:14:8b:a3:de:fb:31:81:f3:
         0a:29:3c:dc:65:62:3e:4e:90:e8:99:3c:b4:0c:93:fa:12:ac:
         35:3e:bf:8c:51:7c:d3:83:06:c8:46:b7:f0:6e:77:f5:e7:77:
         b8:61:e6:09:85:3a:11:f3:27:66:d3:c8:09:3f:26:a1:da:dd:
         56:55:47:ab:a5:34:7e:73:94:24:ea:42:e3:b1:4c:45:22:bc:
         5b:c1:15:89:bd:ad:14:16:cc:3d:03:b7:97:da:6d:e5:0a:be:
         71:1b:bc:05:62:ad:fd:4a:ea:ab:cc:ff:a2:0f:5f:60:ac:a9:
         c3:ac:a7:9b:ef:c8:77:6c:c2:45:92:cb:67:d5:3a:eb:63:10:
         26:76:d7:ff:01:ff:12:5f:9c:8f:e5:ee:b6:c8:54:0b:7a:ee:
         a9:2d:38:dc:55:c5:4d:62:67:b8:1f:cc:97:fc:6e:ce:f2:8c:
         e6:3a:65:b4:1f:62:8d:86:b0:06:94:3d:bf:8a:bd:ff:1d:96:
         d6:40:33:7e:c3:43:cc:b2:a4:9f:e6:b6:3e:a9:6a:0b:d2:56:
         ab:f0:e7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:04:55 2025 by rpki-client