Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a299b466-1d31-3e09-8b30-d6e652e23b9b.roa
File:                     a299b466-1d31-3e09-8b30-d6e652e23b9b.roa (raw, json)
Hash identifier:          HAKsiLlmtAfWOVMLR02WUwkc73tY77uRwUdSzQ4RXKc=
Subject key identifier:   EC:04:15:F5:98:3A:F3:FD:61:48:05:59:43:32:A5:6E:AA:7D:DC:43
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A119ABD89172644D72D374000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a299b466-1d31-3e09-8b30-d6e652e23b9b.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     36618
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:bd:89:17:26:44:d7:2d:37:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=f5c9c676-afe0-4b20-9c6f-a5c897e4aa07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:40:c1:fc:05:fe:a4:90:17:93:2b:67:04:
                    44:42:a1:d6:f4:ff:5d:a2:30:98:66:5b:54:d6:e6:
                    3f:68:73:a6:40:3c:48:b7:d0:c6:4e:be:e4:e6:cb:
                    b0:69:26:1a:01:32:fd:8c:dc:4c:2a:40:91:f0:61:
                    08:a0:b3:e4:27:92:01:f0:26:d1:e5:ba:0c:d5:a0:
                    0e:07:f6:6b:61:ed:1a:63:dd:76:59:fa:90:df:b0:
                    c1:20:25:cd:eb:7a:f3:a9:b8:65:c1:46:e3:cf:2a:
                    a1:2a:e9:20:1c:f2:5b:10:33:f1:92:59:8c:f1:ee:
                    f2:f1:db:f0:0e:cb:07:88:eb:d6:b0:66:58:32:1d:
                    e2:82:49:2a:cb:a1:9d:96:7f:2f:b7:c5:dd:27:5a:
                    79:bf:b7:4e:a1:0b:2d:4b:71:f7:eb:2c:f4:6a:36:
                    3f:ee:f3:a8:7a:2a:87:04:f5:27:0e:92:ec:77:cd:
                    d6:f0:f1:f4:12:c4:7a:c8:2f:51:a9:b5:f7:f3:12:
                    97:53:02:e3:af:7f:ba:ef:fd:db:34:a9:48:ef:d5:
                    55:77:8c:b9:ac:64:82:b2:7d:26:61:1e:fb:1e:fc:
                    f5:18:83:5f:b2:18:b6:0f:fe:e9:3e:83:47:16:a9:
                    9c:ca:8f:ea:e6:a3:e2:e1:75:5f:3c:d6:9c:df:a1:
                    45:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:04:15:F5:98:3A:F3:FD:61:48:05:59:43:32:A5:6E:AA:7D:DC:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a299b466-1d31-3e09-8b30-d6e652e23b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:9f:7d:d7:77:f2:7c:99:9a:80:55:da:09:38:55:92:0c:f9:
         2a:42:0e:65:c7:c9:e9:9f:b1:b9:e4:38:1f:0f:35:f0:aa:0b:
         6c:d4:b5:9a:b8:57:de:90:b1:57:9d:7d:a1:59:a4:8b:4e:b0:
         d9:50:bb:77:10:a3:7d:ae:99:7e:d4:f6:5b:57:9c:8d:ee:38:
         66:2e:24:4a:a3:2a:66:47:fb:87:93:cb:05:42:1b:da:b2:af:
         a7:71:4b:97:42:7a:d5:b8:19:08:0c:96:d8:bf:49:94:62:bb:
         e5:7b:c0:a9:dd:e7:87:e8:fe:bc:67:80:39:d6:97:49:0b:6d:
         af:92:5c:a4:7d:9c:16:52:c7:6b:24:e0:5f:f2:4a:99:e3:39:
         68:cd:b9:75:04:e3:23:31:12:a5:73:7f:11:74:d8:bb:89:34:
         b5:36:c7:dd:e8:93:87:13:28:a6:84:58:e1:f4:4b:15:20:93:
         20:56:18:05:76:84:15:02:db:cd:b3:10:3b:49:37:da:22:d4:
         d4:ac:f2:64:08:d3:08:73:cb:35:d4:ec:1c:83:69:59:cd:10:
         ca:5c:ba:a2:c4:88:b5:f5:33:bd:b5:ec:c6:4b:34:20:5c:2c:
         74:67:45:f6:29:74:77:f4:d2:20:b3:d9:f0:d5:38:19:8e:64:
         13:55:26:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:47:42 2025 by rpki-client