Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52408233-91e6-3900-887a-522c2046ae1e.roa
File:                     52408233-91e6-3900-887a-522c2046ae1e.roa (raw, json)
Hash identifier:          UqJusa0TZNcW1KENBqmZHw4t3Pcbkx19Xv2coQY1gQ0=
Subject key identifier:   2D:A8:66:94:3F:44:A1:F4:9D:51:3D:91:CE:EC:EB:8B:F6:86:C8:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5A307C50663085A617E58A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52408233-91e6-3900-887a-522c2046ae1e.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     397199
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:7c:50:66:30:85:a6:17:e5:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=bc01d36d-c49f-43b2-b7f1-83428c8ec54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:b6:75:c4:35:20:5c:8a:06:e6:94:a1:82:
                    43:67:02:4f:b1:2b:75:bb:9e:ee:bd:9c:76:8e:75:
                    44:11:aa:71:90:19:53:85:c2:c1:ea:8b:d9:35:ec:
                    f8:8b:e5:91:87:65:32:76:42:0d:d2:3e:3d:2c:d4:
                    dc:98:25:04:0c:28:5f:06:a7:33:d2:6a:71:9c:53:
                    d3:ce:73:fc:92:ba:27:96:b0:0a:77:c4:06:f9:c2:
                    b4:7c:52:dd:98:a3:ab:b0:9d:5e:dc:87:c8:a0:2c:
                    de:c1:5d:c0:55:71:1d:c5:32:6d:74:b4:2b:32:cb:
                    be:3c:35:76:8d:49:4c:98:40:15:9f:af:25:da:0e:
                    ef:30:14:1a:db:bd:cd:e8:ad:d4:c2:54:67:a9:c1:
                    bd:30:a3:c0:69:00:97:58:2a:81:90:43:1d:39:db:
                    d6:db:ce:b7:14:5e:46:b1:19:24:13:64:88:d9:e5:
                    9c:28:7a:7d:49:48:60:3a:8c:da:e4:74:72:a2:7a:
                    3c:a8:16:71:b1:35:24:08:b3:e6:4c:d5:8e:03:0c:
                    d6:11:58:1f:11:79:01:91:78:ac:e6:60:bc:31:7d:
                    37:49:28:84:61:23:eb:d9:06:6b:43:1b:d4:68:8f:
                    f9:09:30:13:db:5f:44:c8:38:5d:62:08:98:38:7b:
                    08:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A8:66:94:3F:44:A1:F4:9D:51:3D:91:CE:EC:EB:8B:F6:86:C8:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52408233-91e6-3900-887a-522c2046ae1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:e7:89:89:88:a8:64:33:c1:58:9d:a1:46:8c:66:49:73:4d:
         0b:8d:2f:3a:6a:e7:5a:c6:cd:ba:58:5b:c8:d9:7c:27:fb:bf:
         99:f8:45:a4:f1:64:17:36:2b:5a:ce:f5:be:22:ae:83:b2:c3:
         76:a6:ed:cc:da:a7:33:c5:04:06:6c:b1:3d:c1:2c:4b:12:85:
         81:00:0c:3b:4c:e9:42:7b:6f:c5:c7:0f:77:e7:f9:68:8f:0e:
         c3:c6:06:19:17:2a:e1:ff:7e:c3:7b:2d:81:d9:90:0c:7d:d2:
         4e:af:e9:3a:3f:6f:f7:1d:0f:93:3e:c0:86:5b:0b:3a:cf:1e:
         d3:57:a4:86:b1:3e:0d:9f:dd:c9:c9:c8:59:db:05:04:39:35:
         da:e0:ee:66:d1:c0:ca:bd:28:36:51:57:ff:b0:e3:0a:f3:df:
         72:12:ee:63:ee:86:3d:c8:c2:a4:06:bf:19:31:ac:94:f0:26:
         85:f1:a2:56:63:55:8a:80:ea:60:2c:b4:a9:ce:f3:04:69:91:
         b9:34:42:03:5f:21:df:2d:75:bb:4b:78:16:26:68:e0:4d:22:
         de:36:84:6e:0f:c5:59:4b:d3:e6:de:93:19:6a:ac:9e:09:03:
         a1:15:0a:26:14:bb:2a:2d:5d:2e:56:f4:8d:e4:a6:21:e4:67:
         e1:04:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:01:58 2025 by rpki-client