Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d686611-e937-3646-884c-e840c181a09d.roa
File:                     5d686611-e937-3646-884c-e840c181a09d.roa (raw, json)
Hash identifier:          Pb0utxHpsAPHNY6/LS0Trfej3c3/0yzDZ5XbtD0ECd8=
Subject key identifier:   74:55:50:0E:36:6D:04:25:49:BB:C1:2E:01:C5:0D:50:49:3B:16:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4F05B5900005828496E9FE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d686611-e937-3646-884c-e840c181a09d.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     22547
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:b5:90:00:05:82:84:96:e9:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=41b70bb6-a590-46c0-9dfe-f8eec3341d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:41:12:21:53:75:d2:8f:c3:c6:f8:75:18:
                    a9:85:a1:98:36:3a:03:51:cf:0e:d7:ed:76:7e:69:
                    93:90:5a:56:14:e0:33:64:65:c6:38:ec:43:10:cc:
                    9f:d6:ca:33:a0:34:aa:d1:05:78:b4:64:54:74:49:
                    6d:1f:f8:8a:97:6d:e4:21:d2:11:70:b1:0c:5a:bf:
                    f8:99:d7:18:a1:db:8c:a0:bc:b9:55:fc:e7:4a:73:
                    e4:03:30:f6:ea:b4:33:36:59:60:fa:5c:15:03:b8:
                    a9:31:e1:f0:3e:68:37:67:86:99:94:7b:7d:f9:2f:
                    6b:af:02:81:97:ce:17:56:33:40:4f:e7:3f:c3:a7:
                    bf:58:8a:b0:cb:db:55:2d:f6:2e:69:00:14:e6:b4:
                    14:a7:90:fb:05:e6:90:d5:a4:53:55:31:e1:2c:52:
                    d3:80:2a:98:eb:03:29:e7:4b:0c:5d:02:c8:32:df:
                    65:f4:86:97:3b:94:69:ce:9f:4e:4b:05:8c:08:67:
                    c4:a2:7c:9b:f4:65:c6:fd:e5:f1:71:ee:8d:f2:4e:
                    4f:b4:ac:3e:13:f9:7b:d3:78:30:dc:3c:45:86:b5:
                    d1:cc:99:48:d2:38:f2:1d:b9:39:37:eb:df:cd:07:
                    c4:e9:db:03:ce:91:7c:1b:fe:96:e4:c4:16:95:57:
                    18:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:55:50:0E:36:6D:04:25:49:BB:C1:2E:01:C5:0D:50:49:3B:16:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d686611-e937-3646-884c-e840c181a09d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6c:0c:75:13:36:76:bc:9f:56:f2:c8:43:0b:86:59:26:ae:
         4d:60:54:dd:79:a8:a3:4b:e6:69:68:aa:b9:b2:3f:b6:99:87:
         d3:17:5e:fb:f5:c6:e6:7b:19:c3:39:14:55:a2:94:18:ac:d1:
         53:2c:b9:95:d4:7c:14:b5:09:17:83:ba:0e:25:db:c6:de:af:
         9e:72:a3:e5:1f:66:f2:a4:f9:db:29:23:10:4f:b8:8e:24:da:
         70:b2:c2:9b:07:f2:67:af:67:a2:c9:54:f4:4c:78:c4:05:cf:
         04:a4:57:6c:fd:2a:f7:74:76:a8:9a:7b:e5:d1:de:96:f5:f5:
         96:a0:e5:83:88:96:9c:d0:f7:94:49:51:89:7e:56:77:18:19:
         9d:fa:5d:dd:02:20:bf:ff:e7:4e:18:b2:a8:ed:be:b0:24:9e:
         24:f6:ee:c1:91:e3:dc:c4:ae:1f:b4:5f:28:26:ac:b9:fb:c9:
         fb:07:b2:e9:6f:71:4c:75:e2:b9:e5:2c:85:a1:10:f9:3e:26:
         78:c7:04:32:dc:9d:d8:d3:6c:67:73:d5:11:ca:40:c3:47:e9:
         84:3c:10:49:86:7e:cc:f9:f9:71:f3:48:91:b7:d6:a8:21:a5:
         44:c9:a5:5e:50:ec:7f:ce:8e:ea:cb:fc:92:59:ec:35:43:7b:
         96:fb:89:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:33:02 2025 by rpki-client