Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b018f3-7db0-391a-8d35-7d966f62a3f5.roa
File:                     29b018f3-7db0-391a-8d35-7d966f62a3f5.roa (raw, json)
Hash identifier:          bLPb9/PlISztqgJdKkU0ewGcey6hkRf0o7dFfGvsxk0=
Subject key identifier:   A7:D6:16:3A:5B:E0:2F:8D:4B:C2:20:DB:07:8C:E6:EE:07:E2:41:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C3B3DA3FE77771808942C20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b018f3-7db0-391a-8d35-7d966f62a3f5.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     396547
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:3d:a3:fe:77:77:18:08:94:2c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=fef7c8ea-5336-4aed-9b32-73fad52571db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:dd:9e:6e:77:16:df:b3:90:45:73:b2:b7:
                    f9:7b:a2:be:a8:c7:22:21:93:33:a7:e4:03:07:b8:
                    27:cf:0f:d6:9d:7d:0f:c6:5b:f5:c9:bc:58:90:b2:
                    3a:5f:bc:39:53:87:db:2d:61:1a:03:52:90:cf:3f:
                    bc:00:ba:52:bb:9b:ed:5c:d5:91:55:f7:23:42:56:
                    aa:db:00:6b:ed:65:18:05:dc:7e:b9:ba:67:48:14:
                    e4:d1:b4:d4:f5:4f:1c:e0:21:9d:7e:d5:ac:04:8b:
                    20:9f:87:60:2c:f4:4a:5c:86:0b:41:5e:62:e9:10:
                    6f:ad:e3:18:18:83:15:6e:7a:af:4e:20:f0:da:15:
                    22:7d:70:6b:60:0c:be:e4:89:d7:7c:b2:ed:be:31:
                    5a:69:75:de:26:b2:cc:48:0f:43:78:a6:e9:c0:bd:
                    b8:f5:18:b7:96:be:4e:6a:18:f9:1f:98:65:98:11:
                    4a:5b:42:a8:d3:b9:ba:50:0d:5b:cb:99:b0:c7:59:
                    5f:e4:ea:5c:7d:49:85:ef:58:99:06:48:d9:09:60:
                    f6:b3:45:0c:ec:7f:5e:58:b7:58:43:f8:37:cc:a7:
                    b5:26:ac:2b:10:89:2b:56:6e:50:78:ba:e1:c7:56:
                    d3:af:12:3f:02:e1:e8:f2:77:73:00:f2:c4:ef:04:
                    93:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D6:16:3A:5B:E0:2F:8D:4B:C2:20:DB:07:8C:E6:EE:07:E2:41:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b018f3-7db0-391a-8d35-7d966f62a3f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:bb:cb:a7:17:f4:86:29:4b:15:5d:83:70:4f:d0:d3:f8:f1:
         b0:f1:89:bb:fc:d7:58:24:25:82:18:05:16:0a:fa:ad:18:de:
         b0:2b:f0:8b:3a:38:58:7e:7f:14:14:54:86:17:e9:13:e8:26:
         cc:82:2a:81:4f:88:9f:0b:57:00:f3:90:7d:ca:bd:34:15:83:
         0e:5b:1c:3c:48:9d:4e:d1:77:6b:7a:ca:70:07:77:6e:d7:42:
         d8:f7:48:3a:f9:b4:47:1e:11:67:80:ed:64:7b:50:c0:de:b2:
         d3:07:bf:62:30:39:05:9a:a4:71:5e:7d:9e:38:7d:ca:f7:81:
         51:f0:6a:d5:d3:69:29:a6:cf:e7:5b:63:56:ee:b2:b1:d8:ed:
         3b:48:0b:63:16:5a:89:13:4e:b2:8b:cc:f0:f4:14:5d:9e:18:
         14:7a:d8:79:9d:f4:be:9f:13:1a:a2:7a:70:86:e6:de:60:e6:
         cb:e9:be:bb:a9:65:51:cd:b7:3f:13:8b:37:93:90:6a:6e:2d:
         32:bc:b3:f7:86:35:8e:44:11:9a:00:53:ed:8f:df:ba:8f:77:
         1f:7d:4e:2a:78:39:1d:11:68:19:8f:8a:90:a2:10:c7:50:da:
         83:e7:fa:bd:ea:d1:92:57:9a:33:ad:64:4d:d9:03:ba:30:f5:
         13:34:69:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:31:54 2025 by rpki-client