Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b433759-0ade-3834-9c7d-81a21c7b489e.roa
File:                     5b433759-0ade-3834-9c7d-81a21c7b489e.roa (raw, json)
Hash identifier:          wKOBNU8yGOjLxEeeRgpyS8RzQCBzKrQece6cnZcZmk8=
Subject key identifier:   B4:9C:EA:F0:C4:CD:BC:46:55:22:EC:4C:F8:13:C7:93:81:87:6D:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4F05BA7CE72F057B8C6CED20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b433759-0ade-3834-9c7d-81a21c7b489e.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     396573
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:ba:7c:e7:2f:05:7b:8c:6c:ed:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=032c844c-adde-42e3-8cb4-e37b968b9cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:c0:fd:5b:ec:39:de:53:e2:38:31:b6:25:
                    78:69:44:b5:21:44:99:c7:8b:58:86:65:62:a5:ec:
                    72:d7:58:25:4d:53:99:e4:9e:b9:9b:e4:af:17:1b:
                    13:ea:37:c4:c4:f2:13:58:f7:2a:60:d0:77:9f:4a:
                    76:31:62:46:2a:13:7f:3c:64:c6:d1:82:05:ae:bf:
                    a2:e7:7c:2b:9b:fd:37:82:ee:83:ed:b9:06:3b:8e:
                    fc:38:71:0c:67:e1:15:3f:31:fb:c6:bf:4b:25:8b:
                    2c:29:99:7a:8f:cf:ca:a1:a3:7e:06:42:0a:54:00:
                    d8:16:76:a9:c2:cb:fe:1f:78:eb:d8:b9:04:1b:54:
                    77:5d:1c:02:a2:9b:75:c6:aa:16:14:1c:58:3c:ff:
                    15:d2:e8:02:bf:4d:4c:7b:5d:f3:94:da:52:ff:13:
                    e7:8b:03:27:48:56:4a:d6:8b:ac:4b:2c:51:d9:8f:
                    d6:56:ee:8e:48:f2:7f:3c:70:60:2a:04:43:c4:79:
                    5c:71:63:51:fe:84:8d:8f:f3:dc:bf:b5:1f:b2:92:
                    9e:91:29:28:a8:aa:3a:0f:b0:9b:9c:4a:ec:6d:97:
                    ff:55:7f:a6:dc:a7:b3:b9:27:c9:d2:c9:58:97:dc:
                    f1:1c:ac:25:73:22:23:4c:52:a7:8a:3b:25:04:42:
                    40:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9C:EA:F0:C4:CD:BC:46:55:22:EC:4C:F8:13:C7:93:81:87:6D:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b433759-0ade-3834-9c7d-81a21c7b489e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:68:17:4a:de:1d:83:e5:38:ff:9a:5c:c7:de:a2:bf:d6:bd:
         00:62:78:49:d9:6c:b4:b5:64:ab:e6:4e:56:62:22:3f:e6:64:
         0d:81:38:64:75:c4:ca:ec:35:51:90:a0:c9:09:8a:29:13:b6:
         1c:9b:b1:fa:7b:9d:21:5d:f1:6d:2c:7a:e0:54:3d:82:e4:7d:
         f5:55:6f:c4:c1:cd:34:6a:ee:79:b9:6f:50:48:11:37:f4:b0:
         e4:05:8c:71:39:5c:a3:5f:d4:01:13:87:3b:39:42:aa:e4:21:
         73:94:7c:38:29:2d:92:3b:28:12:08:81:18:8f:7c:9b:84:05:
         25:e6:8f:11:b1:f1:c8:5a:bf:83:44:c6:29:03:0a:a2:54:b9:
         5f:a4:7f:12:7a:1b:2d:04:5c:c8:75:86:12:c5:fb:8b:ee:31:
         2f:b2:b0:39:c8:ac:b5:65:0e:f5:45:c0:f1:40:e6:4c:98:b4:
         87:99:d3:1c:e2:dc:9d:03:00:5a:1d:e0:97:ae:8a:bc:e7:a5:
         47:29:bc:1d:01:0b:d4:69:4a:12:b7:d7:1b:e8:89:17:ad:54:
         ad:93:ee:98:b8:5b:b3:c0:bd:92:75:f7:db:99:e3:e9:1c:c0:
         31:16:c8:14:66:b4:36:21:d0:2c:47:1d:14:cf:4f:b9:db:27:
         67:41:12:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:34:24 2025 by rpki-client