Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2117ec74-a0fe-31ba-984d-fd38b154aa02.roa
File:                     2117ec74-a0fe-31ba-984d-fd38b154aa02.roa (raw, json)
Hash identifier:          3f/3OsC7ve/xxanjgusb8K6D1lUPj6XheoH39e0WnbQ=
Subject key identifier:   C2:9A:70:12:67:83:F9:95:F7:DF:8B:1A:6B:5A:9E:A1:9A:FC:70:FF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4F05CA7E1B60BCDF6A35D2E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2117ec74-a0fe-31ba-984d-fd38b154aa02.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     396608
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:ca:7e:1b:60:bc:df:6a:35:d2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=571ba9b4-9c97-4eca-9b33-7585a616cf83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:0d:a6:c7:ed:39:cd:2b:4d:7b:69:2d:f2:
                    4a:7f:b4:4e:fa:9b:6d:d3:23:68:f4:b0:5f:c1:fd:
                    d6:fb:9d:d0:4d:84:67:10:e6:6d:b7:e7:22:35:cc:
                    d5:1a:ae:43:32:01:2d:82:0d:f9:8b:a0:e8:78:8f:
                    89:38:04:f9:60:5f:59:5e:23:b4:b6:3f:e9:80:5c:
                    e4:46:40:4e:bb:f0:a4:aa:79:fa:c9:d0:26:98:4a:
                    48:69:d1:30:be:26:b5:41:1e:b6:73:47:8b:09:91:
                    ad:a0:76:10:6a:2f:f3:dd:31:57:90:60:60:f1:51:
                    d2:c9:f2:7f:4b:0a:d5:2a:d5:ce:e1:a2:64:98:15:
                    f1:3a:ba:e8:c1:17:66:82:e0:88:5f:ae:5e:fa:7f:
                    c7:ef:56:f5:a2:f8:2d:58:84:e4:b3:62:6c:ba:1b:
                    94:dd:a4:c4:48:89:a3:6d:c0:0e:5c:10:f5:1d:a9:
                    06:87:3e:11:e9:c6:fe:dd:a5:5f:33:d3:5c:60:42:
                    ec:a6:b6:fb:38:e7:5b:4a:71:47:1e:b9:88:13:50:
                    07:a0:a9:45:39:73:f7:7d:01:fc:87:a5:47:db:27:
                    bf:9b:ad:6e:be:c6:0b:0a:fd:f5:c4:f8:a4:dd:2a:
                    77:10:9c:2d:b1:1c:21:4c:00:43:42:54:e7:d5:76:
                    0a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9A:70:12:67:83:F9:95:F7:DF:8B:1A:6B:5A:9E:A1:9A:FC:70:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2117ec74-a0fe-31ba-984d-fd38b154aa02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d1:1c:c7:ad:3d:5c:82:cd:02:c3:d1:2b:33:b8:15:ff:9e:
         be:d7:81:71:b0:30:9e:56:b2:e4:88:5f:ba:26:c8:c9:52:c7:
         a9:3c:e1:e0:7d:04:bb:1a:aa:b4:4f:98:1e:e1:fa:0c:af:04:
         8e:59:ea:fa:dc:f5:fd:ef:dc:c1:2f:f7:65:fc:05:79:13:84:
         e0:31:0e:bf:22:0b:40:dc:65:c0:b7:48:50:f7:a2:25:a6:b5:
         28:de:76:31:b7:84:6b:d7:2e:29:f9:12:e4:39:2c:6e:d8:98:
         79:b9:47:02:77:86:a7:6b:82:fa:76:4a:6e:68:76:a0:bd:c4:
         1f:86:cd:c0:0c:76:43:53:0c:21:ae:c8:14:df:48:8b:e5:39:
         31:00:a1:28:57:16:75:97:b4:83:37:4f:ca:5c:59:8a:97:e2:
         51:fa:1c:de:dc:c8:80:99:ba:30:e2:8f:eb:9e:1e:7f:ee:83:
         e6:a0:68:c8:19:b6:81:c7:71:1a:21:fe:c2:2b:5a:cd:d3:1b:
         df:20:9a:f4:e1:fb:6b:81:0f:5a:7b:59:d0:3d:10:f8:f3:ba:
         de:ab:72:61:fa:36:c6:7b:f1:e1:fe:25:7f:b2:ca:65:67:a5:
         3b:11:7b:25:13:1f:63:5d:dd:47:5f:ac:59:09:c1:bc:ee:60:
         7b:68:75:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:54:12 2025 by rpki-client