Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7735eb9e-8ec5-35d5-9aba-75e10dff65a2.roa
File:                     7735eb9e-8ec5-35d5-9aba-75e10dff65a2.roa (raw, json)
Hash identifier:          rH6fqjmlNq0+2etKJnfJ6FXLEyk2Ivgu9fYnzDNVZ2s=
Subject key identifier:   CC:71:CE:11:B3:B3:99:D6:E1:07:3D:C7:4E:54:AE:14:3F:99:06:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4F05CBFB35BA6C78E5138F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7735eb9e-8ec5-35d5-9aba-75e10dff65a2.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     36626
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:cb:fb:35:ba:6c:78:e5:13:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=fc996ed6-2e26-485c-9bd0-445793efe9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2f:55:22:14:b8:ec:d8:52:a0:25:97:bd:a1:
                    7f:d8:bf:a2:3c:4c:b9:09:88:67:4e:d6:1e:81:21:
                    41:07:b5:61:be:03:db:9c:9e:53:38:d7:d8:31:b8:
                    f1:12:ff:4c:28:79:7e:24:6f:3b:2d:e8:83:f2:ae:
                    14:8f:32:df:5c:27:0c:55:3f:b0:1c:95:43:9c:e4:
                    8d:91:63:6a:dd:c6:8b:73:2c:c8:0d:22:14:b1:fa:
                    d5:e3:94:82:46:1d:fc:f9:f4:9f:f2:ca:2f:4a:54:
                    f4:ab:90:55:18:5a:d8:7d:52:a1:72:9d:58:a4:50:
                    69:d3:23:9f:93:b7:68:2a:15:80:7e:93:f0:2c:c9:
                    c4:2b:6a:a4:77:7b:33:a4:2e:66:78:c7:26:2b:53:
                    ec:5e:be:ce:85:7a:eb:66:4b:81:d7:a4:e1:10:dd:
                    75:3b:72:39:d9:86:39:b3:aa:c7:28:51:d6:e2:bc:
                    f6:98:d9:bb:ee:a7:a4:f2:26:25:71:63:d4:d2:a7:
                    bd:84:1f:1e:4e:e1:3b:8c:3e:34:00:d9:ba:7b:df:
                    d4:75:fa:3d:34:33:99:91:95:90:9a:d2:d3:b2:77:
                    cd:4a:d3:ff:a1:20:42:09:ef:28:b7:bc:14:52:e7:
                    3a:b2:1c:e2:f2:2e:06:f4:61:ad:6c:3f:a3:7e:0e:
                    f7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:71:CE:11:B3:B3:99:D6:E1:07:3D:C7:4E:54:AE:14:3F:99:06:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7735eb9e-8ec5-35d5-9aba-75e10dff65a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:74:69:3f:27:6f:4f:18:91:71:6e:2c:e5:42:d7:ba:42:d3:
         39:be:11:79:4f:88:a6:9c:50:91:0d:bc:b4:1e:88:7e:86:45:
         51:95:00:4b:b3:5b:ca:8f:06:5e:9c:d0:bf:35:09:e5:f7:bc:
         d0:c2:6e:cb:3e:97:78:9e:37:fa:7e:a2:58:54:3f:11:4d:f6:
         91:63:56:24:1b:be:82:28:ec:11:20:4e:69:cb:dc:b3:9f:11:
         7d:2c:c4:29:9c:da:36:9f:ca:44:bb:09:55:d2:b4:28:fa:2e:
         55:a8:10:53:aa:74:8e:a9:00:c7:b6:db:f4:03:db:30:e2:7b:
         e0:83:dc:97:c8:3f:b9:49:55:c9:37:cb:0b:01:a0:67:2e:b9:
         b9:69:73:bf:fb:40:8f:e1:2d:fc:a2:f3:c6:5a:75:e5:c1:96:
         18:39:c1:57:9f:d4:87:8a:72:41:a9:46:f0:7d:44:03:17:05:
         f8:fd:fe:30:67:86:32:f9:95:ff:ab:3a:9c:c0:03:61:17:5d:
         0f:44:7f:e3:d0:c0:6a:a7:7d:65:e3:c8:e4:3e:04:55:79:27:
         91:1b:1d:0f:6f:5c:ff:77:e8:07:0b:30:41:ff:d9:71:17:d7:
         06:21:3c:cb:f5:30:27:d5:97:37:25:50:33:9c:ca:8b:ce:89:
         11:41:10:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:13:48 2025 by rpki-client