Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9c01c84-b87b-3f41-a8cf-8fd05d4afb8f.roa
File:                     e9c01c84-b87b-3f41-a8cf-8fd05d4afb8f.roa (raw, json)
Hash identifier:          7EALk9XhprSBfFvcdWMO7COUOzK79/l7RA7IlOIRy5Y=
Subject key identifier:   CC:46:EF:A2:44:7C:FF:2D:66:4D:CD:91:73:61:0E:09:9B:9E:41:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD6086A209CB9BB1B0A600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9c01c84-b87b-3f41-a8cf-8fd05d4afb8f.roa
Signing time:             Tue 01 Jul 2025 13:48:36 +0000
ROA not before:           Tue 01 Jul 2025 13:48:36 +0000
ROA not after:            Mon 29 Sep 2025 13:48:36 +0000
asID:                     20172
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:60:86:a2:09:cb:9b:b1:b0:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:36 2025 GMT
            Not After : Sep 29 13:48:36 2025 GMT
        Subject: CN=15bb92e4-4998-46cf-b613-322db06fda33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:6b:41:a0:bf:91:78:90:ef:56:10:c3:a3:
                    24:fd:d0:3c:77:83:d0:2d:90:43:dd:32:c1:a3:4a:
                    61:89:f6:ac:3e:ec:2d:5e:ca:1a:c8:d8:0e:ef:cb:
                    71:81:46:f7:16:ca:c9:ea:71:5e:31:bc:eb:d4:65:
                    fe:12:d1:bd:91:3e:d1:b7:8e:22:b2:10:b9:55:4d:
                    eb:1b:f2:f4:ac:4c:cf:6a:06:f6:70:df:c7:e6:6f:
                    74:b3:99:35:f0:1a:c1:00:09:7c:f6:df:01:76:d5:
                    eb:c0:be:5b:0c:5a:62:43:ee:4a:8b:b8:32:09:15:
                    98:67:1d:2d:e5:b7:2b:18:92:e5:18:6c:99:0e:93:
                    16:36:56:51:96:d3:89:e5:76:0b:29:c2:ad:f0:68:
                    cb:07:37:0e:8e:3d:8b:b3:02:1f:3c:c1:70:ab:eb:
                    7f:0c:56:01:13:c5:0e:ca:8f:a7:37:f9:7e:a7:37:
                    fb:af:b5:bb:69:4a:9b:84:dd:9d:60:f5:ed:dd:9b:
                    07:57:5f:33:84:1b:fd:48:66:2d:b4:45:59:7d:a0:
                    7e:00:ac:74:ab:40:16:7d:1f:6d:3b:e3:5d:e0:6d:
                    ed:28:ce:4a:fe:a9:dd:75:59:dc:e8:57:58:45:cc:
                    33:e3:b6:8d:e3:64:33:67:6b:c0:4d:3f:f4:0e:44:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:46:EF:A2:44:7C:FF:2D:66:4D:CD:91:73:61:0E:09:9B:9E:41:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9c01c84-b87b-3f41-a8cf-8fd05d4afb8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:d8:96:f2:21:53:b6:c3:22:d5:29:3b:fc:d3:5a:a0:ed:c3:
         5d:d8:f6:6a:27:49:8b:04:88:98:e2:50:02:14:dd:b7:ed:0c:
         84:3f:4b:db:61:8e:39:34:be:60:0e:59:17:20:b3:58:4f:8c:
         50:84:58:e3:b0:39:d0:f6:55:d5:b3:80:f1:f6:ea:00:76:23:
         04:07:64:f6:af:e2:b9:24:4c:82:f2:b1:f6:b1:02:d7:43:e8:
         f8:44:4a:af:68:02:a0:f4:78:8c:a0:50:2c:14:dc:d5:71:0e:
         74:c1:25:d7:74:23:c5:be:79:0f:cf:8a:ef:58:7f:8c:1c:7c:
         c8:9e:d3:72:45:77:98:aa:1f:51:b4:67:6e:8b:86:fa:62:00:
         6f:43:52:06:91:6e:27:97:2b:e9:ba:af:28:99:3f:90:b9:96:
         74:2a:f1:b0:7a:79:a5:52:0d:84:38:ec:4e:d4:70:7d:71:d0:
         10:f0:cc:2f:9a:ea:23:5d:fc:34:ae:ba:1c:df:d3:31:46:43:
         80:ad:9a:a4:db:3b:26:23:7b:ff:b6:f8:d3:73:c7:5d:7d:e1:
         ad:6b:c8:a2:5e:10:0d:9d:85:1c:ad:ad:05:0d:23:bd:2c:31:
         32:b0:fb:35:ee:72:8d:22:f1:9a:dc:9a:28:c3:ac:0e:a4:c3:
         01:98:81:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 04:04:38 2025 by rpki-client