Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/428875d5-6ba3-3849-8c5e-4b3ce8aa6fbd.roa
File:                     428875d5-6ba3-3849-8c5e-4b3ce8aa6fbd.roa (raw, json)
Hash identifier:          hDoY57E9iiniQVfnWnvBfJ0xGHXfxVNFGI4eAfteUVk=
Subject key identifier:   6A:1A:8A:D2:8C:32:F3:64:10:B2:8E:0E:E0:B5:0A:A9:96:28:AD:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5CFB24FB8B5DBB8991E33880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/428875d5-6ba3-3849-8c5e-4b3ce8aa6fbd.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     396610
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:24:fb:8b:5d:bb:89:91:e3:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=f4330de6-5f74-4ece-bc8c-7028da2738fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:eb:1c:01:2e:50:cd:f1:12:99:d7:bb:5a:24:
                    85:22:3f:d9:60:4f:38:79:86:25:01:93:c0:21:a8:
                    72:89:1c:8d:b8:ac:9a:75:15:67:c2:80:85:f3:2d:
                    32:f9:97:ef:71:a8:2f:32:b2:46:3e:20:64:9e:fc:
                    78:3f:02:5e:0f:16:5b:b3:aa:68:8c:89:77:f0:8a:
                    db:31:f0:fb:cf:e6:75:35:f4:b9:fb:ce:42:d9:c4:
                    4b:05:a1:f4:89:a3:9c:b9:3c:2f:c3:d8:0c:f2:a5:
                    4b:17:86:59:01:d9:c2:3d:0d:80:87:a7:b5:3f:1d:
                    47:be:07:d8:0a:38:d3:2b:fe:5d:d2:68:bb:03:41:
                    98:4c:87:39:80:28:e5:f8:6c:43:a1:d8:f5:3d:3e:
                    7a:e0:b8:ee:bd:b4:c4:39:ad:24:64:d6:17:65:c2:
                    84:49:ad:56:ce:a1:37:d6:07:e6:0a:72:4e:5b:0c:
                    27:fb:fb:8e:81:57:78:f8:f5:c9:1e:28:2b:4c:70:
                    29:ef:1a:60:0d:68:1e:ee:64:b4:4e:f5:32:27:08:
                    3f:dc:26:22:49:0e:9d:d9:2e:ea:4c:5c:c8:14:46:
                    38:cf:ea:be:b4:03:b0:99:cd:91:1a:46:26:32:ab:
                    a8:b7:2b:c7:63:fb:e5:ee:7d:d9:78:5a:3c:b3:ae:
                    30:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1A:8A:D2:8C:32:F3:64:10:B2:8E:0E:E0:B5:0A:A9:96:28:AD:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/428875d5-6ba3-3849-8c5e-4b3ce8aa6fbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:96:59:a2:85:10:c6:9b:fd:a1:7c:91:aa:5b:e0:cd:30:59:
         f8:35:22:e1:9c:72:9a:73:1e:ee:ef:19:33:ba:22:be:2b:31:
         c5:26:bb:7f:83:ab:ce:f0:fb:cc:49:45:49:17:5f:68:4d:c8:
         0f:17:cb:87:92:2b:93:da:c6:fc:41:58:70:78:3e:d4:51:0e:
         46:3b:6d:b7:a5:7b:d9:36:1e:80:70:32:0d:ca:19:16:d5:c3:
         c5:77:5a:cd:ab:3c:3c:94:81:2a:e0:5b:4b:9f:27:b5:d9:a1:
         37:2b:27:e5:26:fc:6b:98:71:92:37:49:63:45:df:ec:e7:ae:
         8d:1e:a8:95:50:7e:d4:9a:74:38:5c:1a:8a:41:de:9c:e8:ea:
         3b:a5:71:54:df:2f:8c:66:9e:1c:cc:53:ed:9c:7a:a6:e2:d9:
         67:b7:a8:a9:0b:d3:77:d8:08:26:29:65:37:e0:06:b5:90:fb:
         5d:b8:1b:c4:fb:3d:36:d7:d4:ed:b7:8a:8d:e2:13:a2:b1:1b:
         fc:4c:0a:b4:b4:a5:2d:fa:d3:74:d5:c3:6a:d3:38:45:81:d7:
         71:8f:0e:21:f3:c5:6a:3c:df:23:92:75:fc:48:e1:3d:02:02:
         29:9d:7d:ed:e8:cc:7d:f6:53:37:42:da:57:4a:fd:f0:eb:84:
         5b:40:2a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:30:19 2025 by rpki-client