Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/312346ac-f423-34f4-96fb-2322686a51dd.roa
File:                     312346ac-f423-34f4-96fb-2322686a51dd.roa (raw, json)
Hash identifier:          bXTEzn+APNvpczKBg/F7u/+Ok2x91KrfOcz/s8/pyGk=
Subject key identifier:   79:09:EC:DC:56:A0:B3:6F:99:10:E3:78:A3:1B:0F:E9:DE:6F:65:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5A307FE3FCC6BD56F1F0D840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/312346ac-f423-34f4-96fb-2322686a51dd.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     36618
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:7f:e3:fc:c6:bd:56:f1:f0:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=d9deb84a-9304-46d7-b994-d0cc311a0897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8c:e7:ee:67:85:32:bd:11:bb:fc:4e:c8:23:
                    1a:0a:4e:61:00:0a:2b:b4:5d:57:e3:75:09:9e:23:
                    c3:df:e0:7f:84:f2:b0:02:30:af:39:b9:6d:31:c5:
                    f3:93:95:f8:88:98:1a:1f:07:cf:2b:b1:ef:63:07:
                    36:c8:99:06:1c:11:af:26:e7:5b:48:9c:54:9a:a7:
                    f0:af:b9:8c:bb:92:71:e0:ea:01:97:e6:af:b3:37:
                    bc:fb:2f:a3:0a:5b:d0:58:94:f5:78:cf:97:91:18:
                    f9:de:8f:a4:a5:db:bc:86:e8:63:d6:0d:0c:42:a9:
                    a4:ca:78:0a:ac:e9:79:bb:59:79:b9:35:d1:d9:c2:
                    28:ff:0b:98:80:e1:09:76:e0:83:21:8c:28:fb:55:
                    a6:ad:28:cb:66:bf:e1:db:89:d4:ab:86:12:7a:70:
                    28:22:30:af:5e:84:2d:c5:b7:68:09:12:c7:c5:04:
                    3f:d0:2a:a8:4b:5e:60:70:8c:b7:cc:75:c7:77:c5:
                    31:e1:d3:d8:d9:e1:b0:dd:76:90:99:53:d9:e4:6f:
                    7a:5c:d2:9f:00:d2:2e:b4:a0:8d:d4:fe:99:6b:11:
                    75:db:69:d6:e1:6e:0a:94:c4:f9:94:56:92:f5:40:
                    8e:68:69:4b:83:2d:0f:18:22:d6:5d:09:55:e1:57:
                    65:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:09:EC:DC:56:A0:B3:6F:99:10:E3:78:A3:1B:0F:E9:DE:6F:65:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/312346ac-f423-34f4-96fb-2322686a51dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:19:c6:8b:70:ab:0b:90:a6:e2:ba:39:5d:e7:5b:75:ce:b0:
         8a:d3:f6:4c:37:b7:ae:18:7d:2d:47:df:ae:1a:76:4b:b1:ff:
         1d:93:a1:c7:e5:25:3c:89:b6:14:66:39:e2:31:e4:51:bf:1e:
         ef:9b:3a:f0:bf:2c:2a:e7:5d:ef:de:4d:d2:c3:eb:6c:fc:25:
         c6:21:b1:c6:3f:26:68:a0:42:b0:dd:59:c3:d2:b8:e8:fa:cc:
         c3:26:3d:f2:6c:5a:b7:07:c6:8d:aa:19:09:12:7f:23:c3:4c:
         3c:10:4b:ba:89:46:b1:98:e8:a5:7a:ba:d6:3b:fd:c3:a7:a0:
         48:5e:d8:fa:9b:af:cb:67:d4:f3:34:b5:aa:97:ab:d7:8f:ee:
         1a:f4:60:21:71:7c:6b:72:f8:22:8a:56:e1:44:82:61:51:7c:
         f3:49:5e:89:df:54:0d:ee:81:3d:69:3e:69:83:7f:83:77:55:
         8a:f1:56:a8:c1:fe:71:79:ee:81:a3:8d:36:29:1c:67:c8:16:
         cd:f1:8c:db:a2:36:b4:2b:9c:88:48:88:1c:ec:b6:40:6c:98:
         f2:ee:b2:23:e3:d4:e9:e1:6a:6f:12:dc:b4:3b:c8:95:69:a9:
         af:f7:90:2c:f4:45:50:9c:af:1e:75:6d:f2:a6:d0:7e:6f:3d:
         32:28:7b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:24:26 2025 by rpki-client