Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e792dd8-59f1-388c-b837-0ba017a6bdb8.roa
File:                     5e792dd8-59f1-388c-b837-0ba017a6bdb8.roa (raw, json)
Hash identifier:          jCZafvf2T6qTNZc001byoZ2eENe3mlYd561NGy8YVKY=
Subject key identifier:   84:2A:B5:74:AE:D4:A2:3A:6F:8D:4D:0D:69:D2:F5:7C:5A:71:E7:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5CFDEBB125A694CEDC032980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e792dd8-59f1-388c-b837-0ba017a6bdb8.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     19836
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:eb:b1:25:a6:94:ce:dc:03:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=28da3683-6c5d-492d-b1c8-92e97a0cd370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:df:e5:8a:15:5c:87:7b:a2:7b:dd:f1:c0:3d:
                    3c:a1:1a:3a:b4:28:98:30:17:9b:1b:2f:ba:69:48:
                    cb:e0:9a:3c:a3:c6:db:f0:65:c4:07:c9:76:cb:c2:
                    32:3c:f5:9d:d5:af:92:cf:f4:e7:1e:52:1d:2f:86:
                    4b:f0:3d:42:e1:fa:8f:f1:2d:8e:cb:18:2c:5b:1a:
                    c0:93:cc:12:83:f6:a9:fe:79:9c:e5:08:61:24:9c:
                    ba:fd:23:66:fb:4a:18:e8:9c:68:b4:ce:ef:b0:59:
                    0e:41:55:a2:26:24:ba:6a:d3:0c:a3:0e:d1:6b:c6:
                    58:ae:42:7f:0e:57:e9:33:09:8a:13:fa:3c:17:d7:
                    59:9f:dd:e6:7d:fa:c2:c8:8e:bb:95:0a:fa:2a:55:
                    a4:5e:df:dd:5b:dd:6e:c7:7d:81:28:dd:43:76:ce:
                    64:50:06:1c:ce:9d:ec:64:db:e6:0a:9e:a0:27:25:
                    00:bf:00:07:5b:19:b4:52:93:41:f6:8c:fd:18:4d:
                    53:a9:74:4c:32:80:44:24:76:ed:fc:49:16:88:40:
                    3c:e3:ee:86:0e:30:86:d5:83:56:1e:9c:92:cb:dc:
                    12:e4:29:31:55:98:b0:74:67:97:29:66:6f:7f:f4:
                    88:5c:09:a4:3d:b6:0e:df:e6:5b:be:4c:6b:9e:22:
                    4d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2A:B5:74:AE:D4:A2:3A:6F:8D:4D:0D:69:D2:F5:7C:5A:71:E7:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e792dd8-59f1-388c-b837-0ba017a6bdb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:6d:14:9e:73:56:3f:77:f8:7c:c3:2a:c1:ad:4a:8f:02:e6:
         bb:f5:b4:35:d8:41:66:19:7c:f5:35:27:82:06:fe:26:2a:b9:
         c0:18:45:19:a7:bc:19:55:52:5d:f2:dc:fa:4e:d0:e4:c7:8d:
         2e:ab:9f:ed:11:1a:1d:96:52:4c:b8:f8:ad:61:01:84:12:ba:
         9e:22:97:5a:bf:f5:c7:99:3b:e1:e8:6a:81:ff:0a:b8:63:af:
         26:d4:0d:fc:36:25:6f:a4:27:93:a5:70:f2:44:0c:91:60:6a:
         c0:7c:d2:76:9c:3a:4e:5d:67:e8:e8:34:33:ea:fc:a8:f6:9d:
         46:b4:f4:39:37:d7:91:43:2d:45:56:1f:a6:66:ff:ac:a6:fc:
         2f:40:a4:e7:87:04:8a:a6:c7:d1:09:c2:e3:81:9a:a8:75:6d:
         21:22:e3:d4:4f:4f:ee:80:77:72:54:3b:59:47:08:8e:23:51:
         fc:4c:81:28:bb:93:d9:9d:f5:db:5f:26:32:c4:32:eb:db:49:
         e4:98:80:27:1f:2d:f9:0c:cb:ea:e7:b0:3d:d3:78:28:99:7d:
         c5:90:a6:57:74:9c:47:a3:b3:b2:2a:30:13:41:18:10:5b:49:
         6f:31:62:d7:c3:77:55:76:38:51:71:2b:d2:ad:68:23:b9:75:
         1b:c0:43:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:43:41 2025 by rpki-client