Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62eb82b5-e7e8-35f8-8ac3-4239bb0e682f.roa
File:                     62eb82b5-e7e8-35f8-8ac3-4239bb0e682f.roa (raw, json)
Hash identifier:          shd/tiY49Iz/5rup+s7R2JQahEopbCwaGabtl1G31Tg=
Subject key identifier:   A4:A7:5E:4D:67:37:F5:35:C3:09:B9:61:0E:75:6F:8B:1D:49:8E:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4F05CB01DA34DF3A07BF5C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62eb82b5-e7e8-35f8-8ac3-4239bb0e682f.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     397204
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:cb:01:da:34:df:3a:07:bf:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=ea5ae11f-9e88-4ecc-aed7-d39258f84206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:65:8c:54:fe:f2:f5:16:03:e3:77:83:a9:
                    85:78:c2:e8:fb:06:0c:26:cf:17:ab:1a:d9:05:1d:
                    f6:1c:31:c5:ed:5e:93:10:88:8a:d8:9c:0c:57:20:
                    11:fe:7f:1d:a3:26:08:1a:fe:5d:64:26:7e:6c:90:
                    b8:58:8c:e0:66:46:59:90:66:6c:e2:3f:6e:d3:04:
                    69:84:81:fc:5c:a4:63:1f:f8:4a:f8:85:57:61:f1:
                    51:b1:25:8d:e2:4b:14:89:62:99:b6:35:61:49:36:
                    04:72:8d:6f:35:78:89:c1:6d:f9:dd:d9:94:b0:b4:
                    e3:9a:d5:3e:dc:b5:1c:e1:21:33:04:a2:cf:15:c8:
                    73:6c:f1:fc:f3:4b:53:27:71:c3:cc:ee:26:4c:5d:
                    09:7e:10:bb:b1:16:c2:a7:ad:b6:10:27:0a:33:41:
                    d7:b7:15:fd:e7:52:65:13:c0:46:24:9c:5a:20:ba:
                    73:64:41:af:be:3f:2d:a2:c2:0a:46:43:c9:6e:20:
                    3e:97:b8:f3:d6:ee:da:c7:d9:df:25:5b:03:30:83:
                    14:b1:96:9a:f3:bb:42:47:8c:a6:e4:81:35:c3:a2:
                    04:57:0c:24:27:1e:4a:eb:04:60:3a:4f:7b:69:57:
                    c2:6b:36:16:be:92:b3:b8:31:be:8e:59:49:44:0c:
                    c8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A7:5E:4D:67:37:F5:35:C3:09:B9:61:0E:75:6F:8B:1D:49:8E:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62eb82b5-e7e8-35f8-8ac3-4239bb0e682f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:0d:98:ea:1e:85:95:b6:cc:5b:46:7a:8a:d5:8a:31:20:1c:
         08:d0:27:74:30:43:7c:fd:c7:0a:ea:c9:14:0d:96:ff:7f:ec:
         51:2a:f2:d7:ec:dc:82:48:88:d9:ed:93:7f:05:10:d5:e4:aa:
         ad:15:23:c8:e8:67:fa:29:d7:b9:63:64:23:12:e6:8b:75:9f:
         f3:47:75:33:7e:09:81:aa:d8:aa:a0:08:97:29:63:89:2c:60:
         14:79:8f:72:aa:a1:42:de:2d:f3:8a:e8:b1:43:59:24:53:fa:
         bb:8e:7b:10:e5:4d:f0:45:d9:c5:20:95:06:5d:82:6a:31:2e:
         46:27:51:33:c7:80:eb:33:6f:61:00:27:78:4b:0d:f6:b4:90:
         74:3e:cb:ac:3c:8d:2b:7b:1e:f2:73:f6:d9:37:18:b2:83:46:
         91:8d:3f:18:3f:df:d2:b4:eb:72:ae:86:32:ce:b0:21:95:62:
         94:23:e2:fe:2d:4d:63:cc:13:39:45:1a:12:1c:0d:bc:4d:1d:
         ff:af:63:e7:36:d1:e3:65:0a:e9:5a:72:74:ef:3b:a0:5c:66:
         2a:88:94:5e:6d:3d:db:7a:9b:fe:83:ba:89:52:18:99:5f:1b:
         38:b5:33:c5:0c:09:88:d2:8c:a7:7a:66:4c:e4:da:77:af:7e:
         c2:00:25:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:54:11 2025 by rpki-client