Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e0e5c9f-5211-3abd-b1bd-ab74a51427fc.roa
File:                     4e0e5c9f-5211-3abd-b1bd-ab74a51427fc.roa (raw, json)
Hash identifier:          gecN23wwOSbbQFuBu/FlrK6AEoap9YhQaLxsbfioyBA=
Subject key identifier:   25:A4:71:7E:5F:31:B5:E7:B9:71:43:96:7A:DB:CD:49:10:E3:BC:C5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4F05E65EE5029431B47F7700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e0e5c9f-5211-3abd-b1bd-ab74a51427fc.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     396611
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:e6:5e:e5:02:94:31:b4:7f:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=c9606e14-0853-4338-bb1c-6877efd77733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:87:52:2c:40:a4:b0:ce:ce:23:cc:9a:21:92:
                    3b:54:4a:47:ba:fd:e2:3b:21:3f:51:0a:5b:5e:63:
                    65:30:f3:db:53:af:ff:c1:ac:59:ae:00:1c:bc:c7:
                    23:74:0b:63:65:9f:35:d0:49:06:c9:4a:e2:94:6b:
                    48:08:47:f7:76:74:28:1a:55:c2:60:c0:83:87:5b:
                    c1:49:8a:8f:ee:94:8d:84:2c:25:cd:41:17:54:03:
                    5d:1a:2e:03:19:9a:e0:4f:f6:5e:49:c7:7a:59:6e:
                    61:4b:f6:e8:30:76:38:14:ac:85:75:fb:08:e8:b5:
                    2e:b2:4b:af:13:eb:d5:f1:a2:0f:68:92:46:f2:80:
                    fe:d0:fa:56:3d:cd:4d:2b:7c:b5:c9:13:73:0e:9b:
                    db:44:84:27:97:57:54:3e:b0:81:b7:15:a3:a2:2a:
                    de:e1:cd:63:d7:9e:44:23:07:fb:b2:54:59:58:bc:
                    54:c9:2c:96:e0:db:97:84:0e:5b:32:0f:a8:4a:2f:
                    a6:38:00:22:70:86:bf:d8:d3:b3:af:29:ba:20:fa:
                    0d:5f:eb:55:c4:48:b7:b4:ae:96:74:09:fe:20:fb:
                    45:6b:8c:ef:34:a9:3c:9a:0a:d9:d5:a8:16:bf:12:
                    1a:55:50:0c:9a:28:48:30:06:09:f9:4c:99:a9:14:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A4:71:7E:5F:31:B5:E7:B9:71:43:96:7A:DB:CD:49:10:E3:BC:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e0e5c9f-5211-3abd-b1bd-ab74a51427fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:51:30:8f:85:cd:90:7f:25:85:cb:78:da:e1:87:f8:02:bd:
         fe:ad:c6:2f:6b:81:f3:96:5d:5d:0b:6a:11:8d:97:da:7a:99:
         1e:1f:69:15:1a:b3:04:3d:a9:46:8c:39:64:a9:b0:9c:f2:82:
         65:07:b1:1d:40:90:8a:21:e7:d5:dd:9e:cf:c2:1c:5a:1b:fe:
         b8:03:56:ee:5a:f9:e4:f3:20:f1:c2:e0:82:7f:d3:ae:be:f5:
         29:58:3b:63:57:b7:85:e4:f3:d5:5e:31:4a:2d:b1:7a:9a:46:
         6e:90:17:e6:65:49:49:38:b9:53:f1:5f:42:02:59:0d:86:d7:
         be:9b:7b:54:36:c3:7a:6d:85:b3:e4:d7:b7:cd:a2:6a:ea:c4:
         2a:5d:35:a6:32:05:d8:81:9e:a2:9b:04:35:99:c8:ad:13:75:
         87:77:6e:26:d1:06:d8:53:f1:3e:e0:a0:b7:65:2c:1f:d7:a6:
         71:19:bb:b1:b4:11:7e:8d:49:9c:22:16:6e:0b:88:e7:d6:a9:
         43:66:9a:2c:1a:13:97:44:e2:71:61:4c:5f:81:d4:c3:33:ef:
         0c:98:75:e2:fa:65:e6:cc:e6:92:0c:55:e2:e0:0a:1d:99:68:
         03:dc:f1:d3:88:6f:c6:b3:bf:da:32:e7:e1:61:ba:82:88:06:
         94:f1:64:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:19:50 2025 by rpki-client