Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f242d83-f120-34df-8667-0ba7250752b6.roa
File:                     0f242d83-f120-34df-8667-0ba7250752b6.roa (raw, json)
Hash identifier:          x+6e5Za5OkVwwOgpvoRy+m276EBp3zSx++grceLzVjg=
Subject key identifier:   AF:96:C6:48:E4:F3:07:7A:06:88:CA:E0:5E:8B:50:4D:E0:BB:BA:47
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5A30803A297F993AF66294B8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f242d83-f120-34df-8667-0ba7250752b6.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     396562
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:80:3a:29:7f:99:3a:f6:62:94:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=26f66ff6-6a79-49ea-a877-b1601188ff34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:54:64:bc:e6:f5:0f:78:b1:bc:3e:d5:e9:
                    43:f9:51:c8:e7:83:f3:65:5d:14:59:98:12:82:dd:
                    6d:08:2b:dd:e3:85:20:ea:5d:55:77:d5:1d:75:2b:
                    71:c1:0f:b4:98:38:2a:ba:51:f3:5c:61:04:87:6b:
                    aa:a8:11:6f:47:5e:f8:ce:23:fc:2b:3f:98:c0:78:
                    94:8d:4d:d9:6f:76:46:ed:f3:03:af:00:7e:ea:89:
                    f5:35:9c:d0:97:4a:72:89:35:c0:8f:d7:65:f8:46:
                    12:92:d5:f2:db:3a:ed:b7:35:01:44:94:ed:8a:f8:
                    5c:f1:30:d9:03:5f:e5:82:bd:fc:8f:f3:cd:57:76:
                    a6:56:e1:03:6a:2c:2c:be:ed:51:e2:91:c8:15:0f:
                    d1:61:33:a7:41:eb:9b:69:6d:09:bc:28:cb:5e:af:
                    6e:e1:f8:a3:4e:39:e4:06:03:29:90:7c:23:9c:a3:
                    27:1d:c4:65:f5:a2:fb:35:c4:95:66:9f:a3:8a:d9:
                    66:cc:6d:5d:ec:92:63:5f:ba:6e:15:b8:21:c5:3c:
                    89:23:a3:8e:84:64:e0:63:bd:f7:34:66:01:c5:1e:
                    c3:1e:45:b0:db:09:3e:d8:ff:c5:86:4a:8c:ee:44:
                    30:58:11:26:e9:23:96:33:e6:b5:8c:89:94:8b:61:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:96:C6:48:E4:F3:07:7A:06:88:CA:E0:5E:8B:50:4D:E0:BB:BA:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f242d83-f120-34df-8667-0ba7250752b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a6:1b:57:ca:1b:f2:c8:69:6a:91:49:39:51:a2:56:d3:ad:
         76:12:e8:86:9a:58:cf:fc:ce:e9:60:06:ca:0b:08:da:17:80:
         4f:6d:d7:c5:77:2d:31:e2:a5:f0:a8:1b:9a:04:e6:20:c9:1f:
         04:59:f4:b6:0e:f8:72:4c:12:75:5f:21:ff:83:08:16:96:0d:
         9e:f7:0d:7c:4c:46:cb:5b:34:1c:b9:cd:ae:79:3d:52:b8:b5:
         ca:c7:17:a9:17:bd:ae:98:80:9d:92:d9:3b:29:f7:3d:80:8b:
         7e:61:97:06:a1:45:ea:d8:6c:53:7f:b7:d6:c5:3e:a8:12:1f:
         5e:d8:97:4e:89:3c:cc:77:d3:4d:a5:15:b1:59:f9:7e:b5:cd:
         7e:ca:fb:fd:9d:5b:21:26:88:1a:86:03:ce:0c:7b:66:fa:39:
         5e:db:03:9c:5c:e0:a5:20:6c:e7:c0:9d:70:36:9a:7b:86:da:
         28:8a:ba:7b:f1:e3:a1:8f:8c:42:41:89:cc:a1:c5:a1:3c:3b:
         d3:e2:37:8f:16:5b:0a:3e:ab:d2:be:41:4a:c2:83:ba:20:c4:
         a8:1e:a5:67:86:3a:56:f7:a7:36:04:c2:71:3d:e0:a6:e3:aa:
         f0:f5:d1:b6:67:0c:fe:39:6c:23:a9:24:10:5d:48:d7:1b:7d:
         f6:eb:f0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:52:10 2025 by rpki-client