Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02fe4a31-0f4a-39ba-a178-68c7a9eefd64.roa
File:                     02fe4a31-0f4a-39ba-a178-68c7a9eefd64.roa (raw, json)
Hash identifier:          GYPYndp9PNRjwXdO3fRQ2co7wftEsjKIXVlstOwMqbk=
Subject key identifier:   8B:BB:AE:18:39:C2:48:DE:D3:0C:0C:87:72:8E:6B:85:80:2A:A7:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5A307E7C096C5673932844C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02fe4a31-0f4a-39ba-a178-68c7a9eefd64.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     396555
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:7e:7c:09:6c:56:73:93:28:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=b5b90c0b-8519-47bf-b944-6f0e89724fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:88:ff:cc:d9:5b:d9:d1:4a:db:bd:9f:ef:5b:
                    b2:74:90:57:43:17:ca:44:eb:97:9c:17:10:d9:75:
                    5c:42:7d:9b:ad:5f:08:11:f5:17:6f:dd:c1:4c:78:
                    ec:3d:83:35:69:1c:74:45:9b:55:da:2c:e3:41:11:
                    1f:3d:2b:ab:4f:36:98:d3:ee:1b:b8:b2:ff:e3:3b:
                    79:ed:6a:57:0f:29:83:de:50:4f:14:e4:ac:85:70:
                    30:ae:11:22:a5:e1:35:0c:f2:ed:62:ed:4a:73:f2:
                    3c:0d:a3:ba:77:5d:ca:0e:85:82:d0:96:cf:26:be:
                    6f:67:4d:e6:81:e4:54:8d:8a:de:e9:80:0b:e1:80:
                    56:e3:bb:45:f4:a8:6d:15:7b:8c:fa:59:05:03:45:
                    9e:3f:11:a1:a2:e0:d3:63:58:47:57:2f:93:e8:b4:
                    da:7c:1b:62:ea:f2:72:73:7c:d7:df:c9:a4:7a:91:
                    8f:05:5b:aa:dc:f5:da:d0:cd:23:aa:0c:da:88:7e:
                    48:e7:68:22:93:7c:c4:a8:7f:1c:83:13:9a:cd:8a:
                    01:cd:8a:61:e5:0e:6d:12:da:f9:45:cc:97:df:98:
                    ba:3c:58:8e:fa:83:a8:fd:33:f0:c3:30:1d:86:07:
                    8d:2a:e0:47:a3:cb:9f:e4:27:4d:82:b4:7d:fb:15:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BB:AE:18:39:C2:48:DE:D3:0C:0C:87:72:8E:6B:85:80:2A:A7:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02fe4a31-0f4a-39ba-a178-68c7a9eefd64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:69:77:e2:67:13:4b:16:fa:c5:9f:b8:ff:0f:db:e8:c0:ec:
         65:8e:7b:4e:7e:25:98:38:25:c5:99:93:2d:62:2c:03:62:71:
         98:75:9c:c5:76:f8:64:41:23:32:fb:a6:2c:f4:96:71:9f:7b:
         97:49:4b:ad:24:05:d0:71:c0:c9:c7:30:33:6c:93:57:90:39:
         0a:60:12:b0:79:4d:60:d9:39:e2:a3:ac:69:8c:4e:61:75:12:
         78:32:c0:8b:a3:fd:22:4b:6d:f1:9c:0a:2a:89:84:a3:ca:15:
         6d:be:8e:72:f6:8c:0b:b4:aa:dc:e6:30:78:7d:20:30:80:a3:
         0f:72:8f:6b:7f:47:d9:df:e6:c8:0a:59:65:c9:30:8f:2f:40:
         b6:ab:b2:e6:81:d8:20:d4:c0:00:4e:0d:f0:dd:e4:da:9a:9d:
         9b:ba:8d:1b:88:42:e8:e3:67:96:f4:d0:a7:bc:50:f9:70:99:
         8c:e0:ca:3f:16:25:f9:3e:5e:b6:2a:df:65:12:7e:bd:55:de:
         76:51:78:c6:d4:49:46:4d:8a:15:bf:c6:1c:9d:53:36:ca:49:
         17:7a:41:14:09:91:f5:5c:0d:a3:c8:27:88:57:4e:7d:18:0a:
         37:6a:93:43:ef:ba:4d:74:ad:e8:8b:db:59:83:34:dc:c3:d4:
         48:78:f6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:54:33 2025 by rpki-client