Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/684aa8f9-c82e-3cbf-8b28-d5d076c51c59.roa
File:                     684aa8f9-c82e-3cbf-8b28-d5d076c51c59.roa (raw, json)
Hash identifier:          F5mYK+cKI67fGLx+ycfHqUDxKYbK7hLoiO9mCbe7YaY=
Subject key identifier:   90:45:B8:57:4B:F5:C0:12:42:00:F5:7C:91:50:8B:7E:50:A1:92:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD5CB4ACAC200088179A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/684aa8f9-c82e-3cbf-8b28-d5d076c51c59.roa
Signing time:             Tue 01 Jul 2025 13:48:34 +0000
ROA not before:           Tue 01 Jul 2025 13:48:34 +0000
ROA not after:            Mon 29 Sep 2025 13:48:34 +0000
asID:                     396610
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:5c:b4:ac:ac:20:00:88:17:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:34 2025 GMT
            Not After : Sep 29 13:48:34 2025 GMT
        Subject: CN=b4869073-89a0-46d0-839b-6270223fd556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:26:15:1b:92:be:7e:52:3a:88:11:7c:3f:66:
                    0a:1c:0b:7d:94:5f:79:0f:ab:a2:7f:ee:25:8a:84:
                    a0:b0:c1:c5:79:82:24:92:05:84:3d:ef:07:51:70:
                    69:78:07:f0:ed:76:e7:91:c9:58:a9:fd:c9:27:44:
                    8b:29:fa:77:8e:bc:33:b7:08:2e:2d:8d:6b:52:9a:
                    38:87:32:ae:42:da:92:0e:d2:cf:6c:d0:d8:7e:9f:
                    91:7d:85:9c:84:6d:b6:79:39:d0:3a:1e:27:65:7c:
                    fe:45:ed:16:a5:d2:81:90:b2:f2:eb:a1:f5:8b:ba:
                    c1:55:3d:08:24:9c:d8:b1:8e:2a:f4:b7:33:ba:4e:
                    60:c4:da:cb:ed:40:17:5f:c4:ce:c2:29:a5:8c:c1:
                    1b:55:d6:ca:8d:01:31:43:5a:67:ba:8f:b0:2a:1b:
                    9a:38:8f:48:76:a6:0a:a9:73:92:26:9e:91:30:fa:
                    2c:eb:6f:ba:57:20:50:f4:0c:64:b2:9d:73:37:8e:
                    0d:77:37:0a:f0:49:2b:16:81:f6:4a:fc:85:6a:37:
                    4a:7e:22:d0:e8:f3:0c:fb:44:94:7a:9f:b1:e7:08:
                    f6:86:66:f9:9f:65:92:a5:af:33:e7:f2:d6:0c:91:
                    f4:1f:2d:99:5a:0f:04:1c:fc:00:ae:32:62:76:78:
                    6a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:45:B8:57:4B:F5:C0:12:42:00:F5:7C:91:50:8B:7E:50:A1:92:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/684aa8f9-c82e-3cbf-8b28-d5d076c51c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:67:51:f4:bc:51:10:ad:65:bb:ee:1b:0f:16:68:7e:98:88:
         cd:4d:27:cc:9e:57:48:a9:fd:22:35:71:6b:0d:c9:be:a7:90:
         8a:c8:ac:57:0c:a5:31:37:0d:b0:4d:12:a5:cf:af:4b:0b:f6:
         3c:e7:eb:1a:be:e5:ae:12:8c:71:ae:ee:d9:30:be:56:0f:fd:
         0a:c0:c7:55:c2:13:b5:0d:12:66:3d:c0:4d:4c:27:08:dc:ad:
         88:40:ad:2f:5d:02:7c:c1:2b:b0:54:62:46:97:e6:f2:35:ec:
         ac:f5:78:d3:19:bc:37:90:fa:bf:24:bd:a7:cf:aa:10:d7:d9:
         d0:d6:f3:45:ad:d4:39:3b:51:56:aa:f4:35:d9:49:61:1f:88:
         c5:16:8c:65:c6:69:48:a3:b8:51:22:87:e3:4f:8d:4d:86:fd:
         16:2d:d8:49:cb:79:23:c6:42:af:45:10:66:26:9f:47:ad:54:
         3b:da:7f:a8:bf:97:dc:b6:be:d0:43:f7:f5:2b:45:d0:5d:7c:
         9a:5f:2e:55:8c:98:24:28:33:de:7b:6b:de:59:25:bb:e2:6c:
         85:ca:08:f8:86:b8:a0:d3:50:eb:48:be:a2:c3:e0:5b:60:15:
         36:fe:96:c1:4a:cc:0d:49:74:85:f8:9c:8f:00:4a:a2:e6:e8:
         05:51:3c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 12:52:28 2025 by rpki-client