Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f89339e-fe35-36be-8a81-ad0e051a71c8.roa
File:                     2f89339e-fe35-36be-8a81-ad0e051a71c8.roa (raw, json)
Hash identifier:          aHI0xeoNDhE2zDUaHvp59aeV9EGtYqDV0NkeMWGgKlU=
Subject key identifier:   5C:0F:05:93:9F:31:CC:87:C6:D5:5D:E1:9B:61:D7:A8:A5:95:DB:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C3B3D4BA933AD65871B8C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f89339e-fe35-36be-8a81-ad0e051a71c8.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     396585
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:3d:4b:a9:33:ad:65:87:1b:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=5fc06482-5b5c-4e0b-b32c-10b0fdab5001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e4:75:31:a4:4a:e7:46:f2:54:e3:cf:6c:88:
                    46:9b:74:e5:fa:2b:4d:ed:32:ab:38:20:9a:32:73:
                    e2:e7:e9:1e:76:62:1d:e9:e6:4c:66:0d:e3:fe:58:
                    ce:39:ba:01:5d:86:bc:3a:6e:92:dd:3c:20:f3:d2:
                    38:8d:f6:11:2a:1f:cc:a5:55:cd:2b:e2:24:4b:fe:
                    95:3f:51:7d:a1:1d:af:b2:19:e4:90:cb:d1:39:8a:
                    19:e8:55:4b:99:de:38:e6:02:e0:4e:98:35:d1:ff:
                    b4:cf:0b:8d:e5:a8:25:fe:ce:60:b2:a7:45:40:dd:
                    df:fb:f5:03:d6:3e:cd:0e:6b:ab:cd:dc:9b:a5:04:
                    0f:97:69:36:d0:c0:a6:76:7b:d3:57:6b:ac:79:7d:
                    b7:34:ed:ed:13:fc:fe:4b:84:b7:9d:96:22:a7:a6:
                    76:c3:61:6b:49:cc:ca:e4:bc:a3:92:a2:69:59:1c:
                    77:2f:11:de:eb:5c:fc:2e:1f:37:7a:71:6b:d5:4c:
                    a1:c1:5b:0e:ef:cf:3a:ae:ca:c5:ce:74:8b:83:54:
                    3c:5e:52:16:7a:0e:e4:15:84:ef:96:30:8e:3d:47:
                    1b:04:74:8f:fc:2f:c7:c3:2e:6f:60:c5:4d:62:20:
                    5a:05:10:91:09:24:22:e3:bc:26:5e:22:1b:8d:22:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0F:05:93:9F:31:CC:87:C6:D5:5D:E1:9B:61:D7:A8:A5:95:DB:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f89339e-fe35-36be-8a81-ad0e051a71c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:46:ee:0a:19:66:ac:e3:f9:e2:e8:2e:24:70:a9:d5:03:b0:
         95:84:10:25:b5:cb:31:ac:55:a9:54:0e:46:20:8e:0a:46:fe:
         3c:d6:32:33:6e:87:52:36:8c:a5:a0:7b:45:1b:c3:f4:ae:2e:
         73:cb:99:be:95:6e:d1:11:aa:23:4a:f2:70:58:b4:e8:4d:f7:
         91:0c:1e:24:d2:e8:b2:dc:e8:3e:65:45:eb:d4:7b:d1:29:04:
         2d:ba:c8:5f:15:59:b5:4c:d9:a0:28:de:60:4c:94:de:13:0f:
         da:d6:5a:db:9b:c9:10:9f:93:8c:b9:63:88:2f:7d:99:54:26:
         4f:b5:7d:b5:20:3d:ab:31:1c:9a:31:c3:3b:0f:65:29:33:47:
         1b:98:54:d8:7f:7b:89:2c:f7:7d:2f:21:ea:f5:8a:9e:a2:16:
         ed:21:05:18:97:88:58:b3:1b:f7:ab:5e:69:62:c2:13:70:29:
         2f:b5:ff:d5:47:13:79:15:dd:65:74:0c:d8:b6:2d:65:87:15:
         2b:19:03:a1:50:5f:9a:a6:6c:9d:03:86:e7:73:fa:32:c2:0a:
         58:b6:91:68:58:c9:41:20:75:9e:ea:c5:9e:13:32:79:21:93:
         ab:90:8f:6c:72:0b:3c:c1:9a:2f:47:4c:9b:e5:96:d7:3f:87:
         ae:98:94:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:03:01 2025 by rpki-client