Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8db21fbd-5c1d-3864-bed3-7233d69e2b54.roa
File:                     8db21fbd-5c1d-3864-bed3-7233d69e2b54.roa (raw, json)
Hash identifier:          zDGLX9J2VxT+ElYhOmpbCAw0JH7VCBKS0jJyj8zhqWw=
Subject key identifier:   F2:B6:32:34:D9:60:6C:9A:93:23:9A:49:87:CC:1D:29:FE:A6:5C:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A119AC3D9A0FD33F6AF7B41A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8db21fbd-5c1d-3864-bed3-7233d69e2b54.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     396584
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:c3:d9:a0:fd:33:f6:af:7b:41:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=dba1c839-831e-44d5-80c0-7b5167573ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:b1:5a:02:4a:99:cc:94:f0:6c:be:5e:32:
                    24:ce:c5:ca:eb:91:8d:0c:f3:e6:bc:06:ab:e8:e0:
                    45:bc:c9:83:a9:c9:d5:ad:84:79:f9:c2:bb:87:dc:
                    5a:3c:16:c8:fa:04:61:c2:f3:d3:2f:b6:4d:a2:6b:
                    bf:36:c5:2a:ee:1c:cc:cc:e7:72:c9:cf:02:f7:02:
                    c4:32:c6:cd:f7:a7:8f:ef:2d:49:8c:2c:ab:15:83:
                    a6:f3:d4:fa:9e:ab:f5:10:78:6c:f1:ff:a4:e3:88:
                    e9:e3:07:ce:7d:dc:7f:1b:05:b1:41:bf:03:5b:0c:
                    e0:83:3d:7e:a0:eb:71:6c:51:0e:d9:ea:c7:b7:d6:
                    fc:a9:dc:91:60:04:49:92:09:5f:9f:6c:25:39:bd:
                    54:bf:81:31:63:cd:9b:2a:7f:bd:15:8e:ff:c1:ab:
                    58:68:9f:66:52:6c:f7:e0:9f:f1:14:5f:d9:5e:e6:
                    ec:07:7e:09:02:b7:c3:0d:c1:02:5e:5f:44:46:05:
                    9d:62:e8:d9:36:02:fe:fa:ef:06:cd:12:ba:86:0a:
                    59:95:44:c7:2e:72:96:4c:16:1d:ef:eb:0c:1a:d6:
                    58:f7:eb:29:b0:ff:dc:69:ab:d2:e0:9f:01:b4:06:
                    94:d9:fc:f5:0c:52:9f:18:fb:8c:73:1b:97:28:a4:
                    75:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B6:32:34:D9:60:6C:9A:93:23:9A:49:87:CC:1D:29:FE:A6:5C:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8db21fbd-5c1d-3864-bed3-7233d69e2b54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:95:4b:be:e8:f8:5f:66:98:45:d3:ac:e7:3d:df:d4:81:e5:
         2d:00:e7:36:54:a1:31:5a:f2:0b:de:ab:c2:81:b9:07:08:5b:
         89:11:6f:38:25:1c:17:18:a8:cc:9d:57:8c:76:40:b7:e7:19:
         19:33:65:0a:57:a4:61:4f:b7:dc:57:68:06:4f:8c:b5:37:64:
         f3:c4:a0:23:8c:da:a8:de:bf:3e:5a:51:a1:27:50:51:bc:bc:
         c8:45:09:8e:56:67:e2:51:c8:f3:29:04:a2:a3:9e:5f:e2:21:
         82:2b:ee:19:0a:32:fd:a9:70:0a:69:cc:91:1a:7d:59:f0:d2:
         94:e5:7a:cd:0a:40:29:6a:af:d4:02:46:3a:a6:9a:af:24:df:
         d5:8c:7c:80:6d:56:6d:bb:6a:52:44:d1:56:0f:3e:6e:66:3a:
         84:f4:68:3a:59:aa:2f:90:49:d7:3e:a8:d9:a9:cf:da:54:3a:
         15:39:9f:af:c3:85:06:05:37:5f:01:24:b8:9d:4d:3c:bd:8a:
         ec:d8:d0:12:3a:12:0e:08:af:fa:42:3c:d2:90:d8:41:14:5b:
         39:2c:3d:7d:a4:74:d3:6b:8f:86:8d:60:91:6c:9f:de:81:0d:
         08:da:67:69:af:81:51:8d:f7:bc:c7:0c:07:c9:84:bb:30:fb:
         19:fe:2e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:39:06 2025 by rpki-client