Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/404f3abe-6b6d-363e-b624-128d9e755400.roa
File:                     404f3abe-6b6d-363e-b624-128d9e755400.roa (raw, json)
Hash identifier:          hkBDfj2wkgocBFsGEVsmW1HqC933/aerNSU3phfi59g=
Subject key identifier:   D1:EC:21:9C:5D:23:BA:55:54:8D:33:06:25:FA:04:30:8C:E3:8D:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4F05B91EBCDB5A39D6E2FD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/404f3abe-6b6d-363e-b624-128d9e755400.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     397209
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:b9:1e:bc:db:5a:39:d6:e2:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=32b10f85-0f22-47ae-82e8-3bee8a70d15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e6:28:81:ac:d5:28:c7:5e:4b:dc:e7:15:5d:
                    7f:3a:ed:31:83:4e:10:73:e8:bd:dd:de:05:f1:b1:
                    3b:db:c4:93:0e:25:1f:8b:11:65:fb:80:64:da:86:
                    8f:ac:b6:1f:cb:de:9e:84:95:8f:f4:0a:1e:b8:9f:
                    f7:79:e3:7c:72:24:da:b9:df:ae:df:8d:51:12:0f:
                    18:a7:9f:a8:21:ae:79:63:f3:63:22:00:e5:b2:23:
                    de:26:d5:f3:6e:56:9f:0d:7c:c8:35:de:df:b8:5d:
                    07:b8:28:f1:4a:2c:e3:94:cb:1c:f8:db:a4:03:3b:
                    d1:df:6f:d1:16:7c:7f:25:16:09:d9:0b:8f:42:c6:
                    a2:ba:dd:06:fa:18:93:54:d1:70:46:67:ac:4a:11:
                    26:69:fb:c8:45:a8:50:df:49:fd:42:78:b8:78:dc:
                    d2:e6:d5:dd:02:81:e1:3d:67:7c:27:c6:4a:90:cd:
                    91:77:1b:45:14:15:b7:48:cb:74:ec:5a:6d:96:e6:
                    40:76:fe:d7:7b:7a:38:0f:f2:87:91:56:36:2e:ff:
                    5b:b6:1e:23:19:eb:00:fb:6e:92:58:19:6d:cd:40:
                    09:c2:13:80:18:fa:f4:c4:4c:e8:b3:65:df:28:79:
                    58:a6:39:eb:e3:70:62:a0:0a:87:2a:40:47:5a:c6:
                    1b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EC:21:9C:5D:23:BA:55:54:8D:33:06:25:FA:04:30:8C:E3:8D:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/404f3abe-6b6d-363e-b624-128d9e755400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:52:ac:e6:af:81:a6:51:1d:18:2d:36:1b:ca:2e:bb:ee:20:
         64:1c:07:f5:68:ad:ac:35:c0:a5:8b:09:48:bd:eb:11:16:5c:
         ba:c6:1e:42:f5:59:83:85:d3:6e:5e:7c:55:fd:4a:c3:3e:1e:
         22:97:a3:88:8c:21:92:51:8f:55:fd:63:ee:4d:b6:86:89:da:
         72:0e:07:c3:bd:e1:07:e1:48:5d:d5:6e:3c:83:bf:90:09:a3:
         55:31:ec:91:39:e0:57:e2:c6:e9:a8:04:ef:37:b9:94:4c:d7:
         be:c2:00:aa:e7:42:68:12:46:71:10:4d:5b:3a:f6:06:b2:fe:
         6f:65:d4:35:c6:68:3c:ad:e9:98:95:ca:c7:2d:08:d1:81:55:
         76:58:0f:fb:22:48:d1:59:d4:f5:b7:ff:ca:ca:aa:65:c2:09:
         ff:b3:dc:a9:f0:0e:4b:33:36:7a:cc:47:de:01:0c:74:23:9d:
         e9:fa:61:a8:4f:50:0c:fc:68:fa:f4:82:67:c4:ea:d1:b9:6e:
         80:c3:5c:52:4d:1d:07:b7:38:eb:66:54:5b:5c:24:5a:40:5c:
         47:9b:e9:5c:89:d3:24:e9:b8:ce:2f:7f:fb:a1:79:52:f1:06:
         b3:2c:a5:4c:3b:34:c5:e4:4b:71:51:3c:fc:89:33:e9:8d:e3:
         cf:92:17:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:08:25 2025 by rpki-client