Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03c687d7-b710-366d-af3d-8d0d58c71c1a.roa
File:                     03c687d7-b710-366d-af3d-8d0d58c71c1a.roa (raw, json)
Hash identifier:          Fs8Lvvrd8COCpsTk3MP6aFPEYZGPmTYXeu3NyPZRd1s=
Subject key identifier:   65:0C:B4:D9:21:6C:81:D8:3E:AF:02:3E:E3:F2:DC:41:59:0F:A0:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5A307AB94413CBB36BA0B200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03c687d7-b710-366d-af3d-8d0d58c71c1a.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     396603
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:7a:b9:44:13:cb:b3:6b:a0:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=c6f43af5-4711-4565-a7da-9e77c0d5779c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:44:1b:e6:1d:42:54:b9:06:a6:96:1e:76:
                    94:66:60:bb:3f:03:8b:ce:fe:65:49:f6:81:0e:97:
                    6d:41:f9:40:83:6f:5f:6e:de:70:19:a4:6f:05:af:
                    e4:3b:12:8a:e9:56:2a:5b:f8:61:68:10:27:42:d2:
                    c7:73:89:57:68:83:c4:96:dc:ad:9b:96:ec:69:0f:
                    6a:a2:88:03:fe:73:7d:61:bc:13:90:90:c3:64:9a:
                    54:49:61:5c:5a:49:01:07:8e:79:c7:2f:5d:32:63:
                    ea:2c:f2:32:32:6e:46:09:5c:53:8a:54:35:c8:9c:
                    40:e2:20:3b:1b:eb:e2:d4:9b:c3:2b:e8:52:ed:23:
                    98:02:6a:c6:d3:23:58:64:48:90:33:3d:45:81:8b:
                    d2:f1:d6:7f:d9:fc:da:d3:a3:c8:90:9a:89:69:b1:
                    bd:79:2d:63:e8:12:0b:e9:cb:f3:fd:cc:e8:ed:ad:
                    f1:51:a1:d0:7b:41:43:ed:af:49:0d:3f:3a:2a:2b:
                    08:6c:15:8a:40:bb:16:11:8c:30:d5:b3:34:79:0a:
                    97:94:de:cb:e1:af:45:0b:0b:13:93:4b:33:ed:0e:
                    7f:35:39:0e:6c:2f:49:c1:d6:21:49:b8:e6:91:5d:
                    89:fe:45:b4:7d:80:14:2c:47:a1:a1:6c:27:ae:31:
                    d8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0C:B4:D9:21:6C:81:D8:3E:AF:02:3E:E3:F2:DC:41:59:0F:A0:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03c687d7-b710-366d-af3d-8d0d58c71c1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:3c:95:bd:2c:f0:70:e4:e8:9d:9e:82:96:5a:63:c0:fc:aa:
         db:b1:98:6b:79:7a:4e:53:b5:37:f3:f5:32:53:dd:96:70:12:
         cc:31:ea:34:ab:94:05:f6:10:2c:cf:bc:14:0c:28:38:cb:53:
         ce:44:0a:29:92:a5:d3:a5:20:22:d6:aa:c3:bf:a7:51:17:0a:
         bb:c4:2b:9c:46:69:c5:47:10:75:de:98:05:89:35:4c:be:3e:
         fe:83:c1:ad:62:9f:f2:96:e3:5c:41:6e:d4:1b:e4:f2:5c:ca:
         f7:66:7d:7b:45:2e:5f:5d:24:f1:0a:86:3f:25:07:53:6e:49:
         29:a3:e6:85:50:7a:d4:4d:e3:5d:40:5d:45:92:e9:5f:0b:54:
         43:ce:f6:26:a1:f5:f8:1d:cf:2a:9b:e8:82:c1:ae:51:ee:03:
         27:73:cf:88:f2:b7:b1:11:15:9e:e9:43:0a:db:34:0f:60:39:
         d3:04:7a:13:c4:53:c9:4b:e1:a5:b8:aa:3c:b0:4f:35:92:ed:
         6f:cc:e3:ba:c9:f5:31:3a:8f:49:31:79:4b:12:c5:1a:a6:c5:
         34:c7:25:da:ed:c3:59:de:3e:76:ca:cd:d5:76:54:f3:de:16:
         1d:c2:8c:3f:49:94:00:34:d0:87:08:c6:c2:2e:8a:cf:c0:c1:
         46:28:ba:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:40:45 2025 by rpki-client