Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51141ac0-e1cb-3138-bec6-702e2336a907.roa
File:                     51141ac0-e1cb-3138-bec6-702e2336a907.roa (raw, json)
Hash identifier:          NxSLE0bJcyeLwnvvIoIpisKeBbfrE7JIsIERB1BAHsE=
Subject key identifier:   6E:01:19:35:18:EF:3D:33:6C:10:D4:50:09:EC:E2:C0:89:2E:A8:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4F05B84B47A8941A76AE2650
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51141ac0-e1cb-3138-bec6-702e2336a907.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     211369
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:b8:4b:47:a8:94:1a:76:ae:26:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=7ef41015-6378-49ba-9a59-7da82aa28f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:76:6c:ce:63:74:94:cc:e9:5f:03:37:c6:
                    91:71:83:eb:8d:a9:4a:fb:98:9f:f7:68:0d:5e:14:
                    35:a3:ea:e7:0c:7c:d5:3e:0d:61:46:31:aa:60:e0:
                    64:9c:2c:6c:ac:ba:36:36:fe:8e:ea:1a:b2:14:a1:
                    b6:6b:52:02:f6:b1:7b:17:df:ce:83:ae:75:11:c8:
                    b5:5d:c6:3c:25:ad:45:04:0f:ac:6a:56:4d:53:da:
                    eb:53:c4:43:21:84:37:67:80:80:f0:db:dc:24:d0:
                    25:4d:44:5d:05:ba:fb:0b:44:aa:bc:d6:b0:e2:b0:
                    29:5f:01:49:a3:6d:7f:06:c2:fb:6d:c4:13:ab:d1:
                    bf:95:f2:2d:07:e7:dd:75:a5:d1:69:f4:e8:a6:8e:
                    68:77:77:37:b0:e7:9e:cd:b4:cc:59:bd:56:1f:f7:
                    b3:24:f7:85:27:10:d1:b4:71:6c:f3:e3:3f:3a:1d:
                    7a:ed:64:3e:38:19:4a:ac:5d:c7:5e:cd:7c:26:41:
                    99:2d:00:9c:26:26:3c:fc:fc:08:3f:58:12:69:f8:
                    b7:78:6b:ba:61:71:0d:64:2d:36:e4:a2:63:a1:d5:
                    a4:2c:6f:d2:3c:10:43:6d:b6:70:b4:54:a0:48:80:
                    8b:c9:59:99:25:bb:94:55:f5:a9:fb:4b:cc:0f:1e:
                    30:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:01:19:35:18:EF:3D:33:6C:10:D4:50:09:EC:E2:C0:89:2E:A8:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51141ac0-e1cb-3138-bec6-702e2336a907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:7c:ad:8b:25:13:35:1d:17:95:4b:c5:ae:e9:80:18:b6:9f:
         a5:0f:9e:42:5c:ee:5f:cb:19:60:52:76:a2:5b:db:60:6c:0a:
         75:76:1f:1f:c6:db:80:21:82:77:79:40:27:a4:98:70:0a:28:
         10:e0:99:be:40:d1:3d:33:59:64:f3:37:ab:a3:50:6d:60:66:
         ae:17:f8:eb:4b:fb:fa:66:06:3b:43:da:e5:a3:05:db:15:bc:
         37:63:61:d2:9e:c5:62:63:38:81:df:4d:13:1c:21:cf:12:bd:
         fe:94:d2:8e:6c:55:b9:b4:7f:6e:57:2b:68:53:29:28:04:a8:
         9f:20:a8:35:4e:4a:90:7c:c7:30:c9:e4:47:bb:63:95:66:f5:
         a3:c3:d7:90:7b:8b:03:04:d4:fe:f1:52:6e:c5:74:83:21:60:
         53:e7:b7:4d:cf:60:9c:87:2d:a1:2d:6d:b0:0a:42:40:db:cb:
         ea:be:6b:aa:e2:2d:b0:6a:c4:0b:4f:6f:b3:6a:de:90:00:ef:
         3f:d0:97:12:a3:ea:5c:35:8a:a6:dd:39:d2:88:1c:0f:35:52:
         4a:6e:66:c1:c1:4e:a9:24:c0:f7:8d:d5:93:e5:e4:a7:51:43:
         c7:11:b8:80:01:e8:08:5a:f7:43:61:20:7c:52:19:8b:75:4a:
         ba:12:f5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:06:37 2025 by rpki-client