Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8143d8d8-b67e-3768-841f-348f5196c7ff.roa
File:                     8143d8d8-b67e-3768-841f-348f5196c7ff.roa (raw, json)
Hash identifier:          SFgDFWxa5xozHeQWTjS+rxyRsbnHjWbFB9LpigK8mjI=
Subject key identifier:   AA:23:42:EE:1C:BC:07:5C:1D:97:0D:92:C2:77:CC:72:E4:95:EA:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD5C64689422ED316CE3F8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8143d8d8-b67e-3768-841f-348f5196c7ff.roa
Signing time:             Tue 01 Jul 2025 13:48:34 +0000
ROA not before:           Tue 01 Jul 2025 13:48:34 +0000
ROA not after:            Mon 29 Sep 2025 13:48:34 +0000
asID:                     396567
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:5c:64:68:94:22:ed:31:6c:e3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:34 2025 GMT
            Not After : Sep 29 13:48:34 2025 GMT
        Subject: CN=10715941-b604-4b4b-8fc9-a8d690941377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ba:67:fa:21:f9:b5:b8:01:de:92:f3:5d:56:
                    ea:87:f2:54:e7:74:75:10:fe:5f:72:e0:2a:7c:7a:
                    7c:e7:6b:a6:4f:16:9e:0f:80:1d:bc:0a:84:04:bc:
                    9c:43:d3:30:0c:f5:21:c3:84:30:bc:a9:80:85:06:
                    09:13:c9:aa:a8:99:53:82:8d:64:07:d5:02:11:36:
                    fd:06:56:6a:84:8b:5d:58:10:ec:d1:d5:ba:3d:d6:
                    e2:d4:86:e9:3b:13:bd:44:60:ce:d0:bc:39:cc:a4:
                    8a:c1:b0:02:8f:b6:11:3b:6b:d9:eb:83:3b:06:63:
                    ec:19:8b:76:f4:97:0a:cf:b0:3f:a0:f8:de:6d:82:
                    bf:97:8a:9e:02:14:4e:5f:3e:bf:d5:94:0c:38:9b:
                    73:28:d0:af:e5:9b:85:3a:c2:1c:2e:c9:63:e8:bc:
                    09:0d:63:91:00:fd:6b:13:54:d6:fc:25:25:86:73:
                    0c:70:a0:0f:d1:21:3e:ca:56:57:f8:bd:d7:8e:13:
                    19:3a:6e:d2:17:3f:15:f4:0f:a3:2e:f3:0f:6a:28:
                    33:43:cb:89:eb:a3:dd:c1:a4:5e:6a:c0:1b:30:04:
                    97:1e:b4:83:0b:64:7d:2c:21:7c:02:b8:2c:59:91:
                    8a:e1:2f:f8:6a:b3:7d:fb:a4:ec:d0:d0:93:e9:82:
                    e0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:23:42:EE:1C:BC:07:5C:1D:97:0D:92:C2:77:CC:72:E4:95:EA:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8143d8d8-b67e-3768-841f-348f5196c7ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:9f:67:6b:04:5d:26:41:4d:19:a4:5a:87:64:22:6e:c3:c1:
         36:d0:40:63:bb:15:db:2a:9e:5e:40:0b:e8:fc:f0:0c:4d:50:
         1b:9e:bf:cd:48:41:2b:66:49:e6:d0:c0:88:45:65:a3:30:ef:
         ac:5e:ac:14:35:7b:0f:1a:3b:03:e6:25:38:f1:e8:0b:51:d2:
         b3:b9:3d:20:7b:e7:03:ee:1c:a0:47:f3:ca:5e:eb:61:73:c8:
         9f:9c:fd:56:7b:0e:00:70:31:c0:a0:92:af:63:43:61:1f:f5:
         4a:7f:e8:c7:52:f7:e7:0a:4d:35:a3:d3:f8:fe:a2:8c:47:86:
         72:f2:00:88:0a:a5:85:ff:20:cc:38:d5:85:bf:24:61:ec:b5:
         28:ef:b8:73:6b:2f:f2:12:d2:4b:55:bc:00:4c:48:dd:80:e8:
         b4:6b:0d:c9:82:2c:00:10:e4:e6:26:33:26:2f:d1:69:bf:be:
         99:d1:00:94:b4:cc:a5:f4:25:f6:96:f1:19:a3:eb:c8:18:4f:
         7c:6a:e8:2d:b7:87:7b:8e:71:71:a4:ec:d2:a4:76:28:9e:78:
         9a:23:36:17:dd:fe:31:c7:e7:53:39:c8:da:a4:70:bd:48:55:
         57:12:70:cc:af:22:e9:7a:82:e4:81:9f:89:f3:ba:22:b4:95:
         0a:46:69:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:02:39 2025 by rpki-client