Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf427ffd-de9a-357e-9695-68b9971007a0.roa
File:                     cf427ffd-de9a-357e-9695-68b9971007a0.roa (raw, json)
Hash identifier:          gXF5kgSzfLUcny0r9+O0m85gt73qSa6hfnFo3dR4jkI=
Subject key identifier:   37:A9:F0:3A:B8:A9:2B:73:C1:31:66:F9:54:74:B3:DF:68:9E:0A:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD6256AB01148434993A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf427ffd-de9a-357e-9695-68b9971007a0.roa
Signing time:             Tue 01 Jul 2025 13:48:37 +0000
ROA not before:           Tue 01 Jul 2025 13:48:37 +0000
ROA not after:            Mon 29 Sep 2025 13:48:37 +0000
asID:                     396561
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:62:56:ab:01:14:84:34:99:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:37 2025 GMT
            Not After : Sep 29 13:48:37 2025 GMT
        Subject: CN=f7909c72-c85b-4828-bac7-c8488577c741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:ac:fb:b7:01:32:45:db:41:54:8d:a3:20:
                    c2:c9:0f:1d:ec:e8:b6:5a:a7:3d:bd:42:a1:f2:61:
                    40:a5:eb:3f:60:b4:24:41:aa:9f:f7:6c:35:21:0c:
                    03:36:27:8f:1e:fb:17:46:c8:8d:62:3c:e5:55:3f:
                    5c:a0:a4:a8:4d:63:32:8a:56:fc:14:d1:59:73:02:
                    71:24:d7:68:f0:68:a7:8f:24:af:35:0e:fb:d9:a4:
                    72:27:96:f7:cb:af:51:58:08:d4:76:87:39:4a:e3:
                    22:b0:bc:1f:5c:64:62:ad:99:fd:39:97:f5:f1:c0:
                    03:f7:4d:ab:f3:4c:bc:40:25:98:44:84:90:f5:58:
                    58:da:76:21:1b:d8:3d:6f:ca:cb:92:c8:fc:d0:56:
                    bf:59:b4:08:bc:90:8d:ba:50:c7:a3:0d:97:ea:94:
                    72:ad:50:ce:dc:5d:6f:4c:2f:c5:e1:24:64:0f:b0:
                    f6:a4:d0:ad:a0:56:d4:b3:32:2f:a3:f0:84:cf:61:
                    70:49:5b:5a:94:62:1b:35:00:24:ff:86:57:fd:bd:
                    91:c8:7f:96:32:1b:e3:b3:f4:e3:08:70:67:08:4e:
                    56:4c:2b:f3:a3:d7:74:d4:45:99:bf:00:a5:a2:4e:
                    fc:75:57:eb:18:ec:17:61:68:e1:b2:da:07:cf:f7:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A9:F0:3A:B8:A9:2B:73:C1:31:66:F9:54:74:B3:DF:68:9E:0A:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf427ffd-de9a-357e-9695-68b9971007a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:db:a9:58:99:76:a7:0f:28:4f:52:42:ea:9f:a2:4b:c3:e6:
         d8:f7:07:74:10:37:b1:25:29:bc:e0:e2:1d:1b:e4:8b:71:07:
         2b:a5:c2:89:f0:8e:85:4c:a4:b4:07:d7:46:b3:27:09:ab:e3:
         c5:ad:9d:42:a7:46:d4:6b:d9:17:ae:92:a4:0c:46:69:f6:b3:
         09:5a:5c:cb:c9:1d:54:f2:38:65:d0:78:cb:ec:f8:41:b4:af:
         80:6f:a2:d1:7f:97:77:41:f6:ef:89:9e:df:8d:83:bf:97:e8:
         77:39:5f:3a:b2:ee:94:94:a8:93:de:38:28:e4:b4:1b:ac:67:
         f5:45:52:f7:20:4b:98:89:71:a4:cb:5a:ec:73:2a:2f:d6:7d:
         9f:b2:27:85:cc:de:90:d1:c5:d3:29:28:9a:92:1d:06:4c:8e:
         91:83:5d:68:86:d9:07:a0:8e:7b:d6:c5:41:cf:8a:b4:19:dd:
         95:46:18:94:b7:6d:20:46:0d:fe:13:25:78:a9:4e:a9:0b:60:
         ff:13:b5:b1:b5:69:4b:9b:ab:d7:f3:f1:09:33:74:cc:f9:c5:
         42:bb:b3:9b:dd:ab:67:6a:cb:6b:e9:92:74:8e:ff:7e:fb:d9:
         ce:da:e3:07:b9:50:61:bd:78:de:a3:e2:46:ae:de:f7:95:79:
         b7:1f:d5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 22:11:11 2025 by rpki-client