Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6945648b-ca02-3fc1-9a4c-88cd70601135.roa
File:                     6945648b-ca02-3fc1-9a4c-88cd70601135.roa (raw, json)
Hash identifier:          aWF5mMoe8kDIGO9uHKD6h7xoChAB2L6Gx25u7NWR+Mg=
Subject key identifier:   5B:C1:8B:BE:A1:19:1D:19:FB:AA:71:6C:48:EF:8C:1F:53:53:EA:2B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C3B3F6E1B3996F2234B8700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6945648b-ca02-3fc1-9a4c-88cd70601135.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     396592
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:3f:6e:1b:39:96:f2:23:4b:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=8273a8dd-967e-4cd5-9b28-9d0c8555e7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d0:d3:1c:70:31:75:1b:24:3c:37:31:73:e1:
                    8d:86:78:49:f3:e3:ed:c5:35:e2:a5:89:03:9e:65:
                    46:79:4e:60:a1:91:af:d8:41:bf:a5:11:d2:37:f9:
                    0b:d7:b0:06:99:77:80:6a:d3:fa:19:0c:f9:ee:78:
                    16:29:2b:d1:9a:0d:15:3e:e1:3d:4e:dd:f3:dd:9f:
                    07:90:2e:85:d3:02:93:d9:d5:2d:54:e5:47:ae:07:
                    c9:7f:69:41:49:e2:bb:95:89:85:1a:70:b5:8c:4b:
                    dc:d7:24:7f:06:b6:dd:7c:d1:28:a9:4b:ee:99:80:
                    68:18:7e:a4:71:23:45:89:75:08:24:32:d3:ef:10:
                    7c:07:4b:d0:eb:e7:c7:fe:06:ed:f5:2a:3c:f0:e1:
                    1f:f2:93:da:09:4c:6a:b4:54:98:04:76:a8:d2:73:
                    02:31:d8:9d:0e:05:ea:33:0e:c3:ad:7f:a9:03:d3:
                    eb:db:31:83:78:56:49:7d:a1:c4:0c:6b:0d:10:05:
                    bd:f4:c2:91:c7:d7:f1:21:93:e4:0d:c8:ad:07:d7:
                    b3:4f:22:f4:11:ec:21:e5:ab:2f:f6:10:0f:88:85:
                    81:3b:e4:70:fe:9c:56:aa:79:cc:0e:51:40:e1:d3:
                    d6:71:44:b6:b9:ab:78:f1:4c:8e:64:c7:6f:3f:de:
                    7b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C1:8B:BE:A1:19:1D:19:FB:AA:71:6C:48:EF:8C:1F:53:53:EA:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6945648b-ca02-3fc1-9a4c-88cd70601135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b8:44:1d:7b:d5:b9:27:14:e7:9f:9d:c0:ed:12:df:e2:ca:
         fa:53:73:8f:79:ea:ca:03:c3:5e:85:31:e6:1b:71:e0:83:5b:
         5e:c4:90:d7:09:5c:40:98:50:af:29:09:62:23:24:33:0f:fa:
         58:38:90:1c:dc:26:a0:7d:b9:5a:b6:09:39:72:02:95:42:61:
         33:5f:5a:e5:87:6a:97:af:17:3c:3a:1a:b6:2b:64:03:47:16:
         d4:a9:bc:97:77:15:64:c8:0c:53:88:9d:e2:28:d6:7f:d9:57:
         54:c7:c5:b6:06:24:60:1d:af:56:85:45:ef:af:98:04:1a:ed:
         f5:3a:c5:43:d6:40:f8:75:95:2b:08:35:ad:37:56:ae:32:5a:
         0b:97:25:c0:2e:a0:8d:d0:ae:3c:bb:f6:8c:67:a4:a9:c0:c4:
         d5:69:06:fd:af:a5:7f:84:b5:0b:b8:e1:be:5d:d8:88:8e:2c:
         a7:3a:f4:57:d2:a2:36:d5:83:aa:e7:b5:35:c7:57:b9:10:63:
         df:cf:80:28:cf:b7:6c:56:13:08:5b:dc:fe:45:e4:9c:5b:5c:
         bb:e2:9d:90:8c:4f:5b:fd:d9:15:ad:b9:ee:6c:52:5d:f2:3e:
         eb:5a:98:08:52:05:d1:93:1b:f9:39:9b:91:74:dd:e2:65:50:
         b5:8b:59:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:55:15 2025 by rpki-client