Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebd809fe-c34d-3dac-97a1-7ad7d2151cd7.roa
File:                     ebd809fe-c34d-3dac-97a1-7ad7d2151cd7.roa (raw, json)
Hash identifier:          vnFQffzqwdmmCRw2OTmi7XV45jOWMcBy7MYbtEzCpdQ=
Subject key identifier:   AF:72:5B:D9:C4:19:D0:77:B0:AF:AE:69:0D:64:71:C0:F7:59:67:1D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD5F9AC6D8D8F0D3C463B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebd809fe-c34d-3dac-97a1-7ad7d2151cd7.roa
Signing time:             Tue 01 Jul 2025 13:48:36 +0000
ROA not before:           Tue 01 Jul 2025 13:48:36 +0000
ROA not after:            Mon 29 Sep 2025 13:48:36 +0000
asID:                     396589
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:5f:9a:c6:d8:d8:f0:d3:c4:63:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:36 2025 GMT
            Not After : Sep 29 13:48:36 2025 GMT
        Subject: CN=62444ded-121e-4cf4-b2c4-9fe0784c34e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5b:ce:bd:15:65:4b:d2:80:8e:ea:36:ea:f9:
                    21:f5:ff:a7:41:48:2b:55:24:27:ce:7b:c8:7a:57:
                    85:d6:9c:b8:b2:3f:2d:03:79:11:eb:c8:af:88:38:
                    06:b7:46:c6:11:fe:27:c1:5d:a1:a8:37:7b:45:84:
                    25:5a:a3:3f:0d:84:10:ed:25:52:82:d2:42:9b:34:
                    6e:41:42:3b:97:d9:bc:83:3c:7e:fb:0e:1d:cb:96:
                    37:42:cf:5b:b7:2f:98:24:62:f1:1c:05:2b:59:f6:
                    6c:96:8d:d3:5b:08:06:43:f9:51:16:13:c6:9e:f3:
                    b4:de:a0:2f:17:8d:09:60:1f:b8:7c:0f:b1:83:7e:
                    1e:d9:58:73:ca:3b:47:a8:84:d2:72:6f:74:a1:5a:
                    a9:72:a5:90:44:1b:4d:ee:92:b9:1b:b6:d5:bd:56:
                    d8:3d:a7:7f:c4:32:86:76:44:79:b6:7f:00:8b:f2:
                    82:88:dd:cc:d2:03:4e:f9:69:d0:7f:b8:33:42:d7:
                    a3:96:04:27:5b:37:ef:d6:e8:22:c2:cf:dc:60:e7:
                    a1:fe:7c:a2:36:7c:04:66:ee:28:47:0d:82:be:85:
                    92:da:79:77:bc:d7:cd:54:09:91:b6:22:6c:18:f2:
                    91:21:05:82:e9:ca:d0:dd:a7:53:e9:6a:d2:6d:a2:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:72:5B:D9:C4:19:D0:77:B0:AF:AE:69:0D:64:71:C0:F7:59:67:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebd809fe-c34d-3dac-97a1-7ad7d2151cd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ea:91:01:b8:0f:e9:de:53:31:14:8e:b1:45:b7:03:56:80:
         71:b9:84:df:63:2e:2a:7b:ec:a8:a5:1c:a9:08:65:59:ce:f0:
         9e:21:8a:eb:22:fd:00:0b:85:38:51:b6:01:9c:75:72:81:dc:
         69:c8:05:ba:b9:aa:37:a2:af:d9:23:a8:a3:89:1d:c2:fc:8a:
         4f:03:d3:52:e6:04:3f:6e:62:d1:72:61:ba:c1:9b:39:6f:98:
         a4:81:fa:5c:1f:b7:8a:90:40:4f:d0:a6:4c:d2:21:e6:70:e7:
         6b:b4:e6:c6:1f:29:72:17:41:ff:01:68:9e:d3:11:e6:2f:3d:
         df:70:4d:98:75:95:4b:1c:a4:f8:bc:5d:56:11:31:72:cb:8a:
         b2:b7:93:96:90:37:d7:cd:a9:a2:18:d9:01:f5:08:6d:b1:a1:
         a7:5a:ae:e5:d2:61:47:4c:5d:4a:97:3e:16:e6:a1:30:91:5a:
         de:aa:1d:96:d1:05:1d:77:57:51:49:b2:f6:e3:60:5d:ae:36:
         26:2f:e8:df:1b:dd:ae:a5:1f:17:8b:77:2d:51:98:63:72:b6:
         bb:4b:5e:63:d7:b9:0f:4d:c6:55:13:29:41:52:16:30:5d:4e:
         78:1b:78:5d:14:6f:98:13:b1:df:12:69:09:0f:3e:4b:d6:1f:
         e7:40:be:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 04:15:35 2025 by rpki-client