Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccf46d23-998a-3676-a238-493794a9bd7f.roa
File:                     ccf46d23-998a-3676-a238-493794a9bd7f.roa (raw, json)
Hash identifier:          P7uETFcmX6XGpWbTiCrfgfLLlzHx0s0VsGvBIlWIBIw=
Subject key identifier:   0B:DA:34:02:98:93:5B:40:CA:EC:95:75:CB:36:E9:0C:E9:E7:EA:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5A307D5866CCCEB0E3058700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccf46d23-998a-3676-a238-493794a9bd7f.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     396586
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:7d:58:66:cc:ce:b0:e3:05:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=7c7b8afc-9891-45de-b620-b95c114257d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:09:14:f0:9e:5c:95:85:0c:62:b6:1b:cc:24:
                    f7:cd:05:a4:7c:da:ee:4b:b7:f3:f7:f1:64:df:49:
                    55:62:46:5c:55:86:61:f1:20:91:4e:c8:1e:ff:04:
                    61:97:10:ba:6b:84:1a:f8:7c:08:01:79:26:e6:8d:
                    ea:80:74:38:e4:c3:dd:91:9d:57:d4:0d:36:26:2d:
                    86:94:a4:3f:ae:9c:9c:11:0d:47:4d:ea:83:33:07:
                    24:19:b6:40:ca:2e:dd:d0:8d:2e:65:a3:3b:c0:78:
                    a0:eb:13:1e:0b:cf:45:26:88:4c:6d:b3:6f:c9:6e:
                    c1:84:af:28:e8:a8:b3:87:5a:fb:9d:45:07:d9:27:
                    85:e4:da:63:f1:cc:25:c8:9b:63:8c:d9:bb:36:a4:
                    b2:33:a2:c8:1f:76:70:91:2c:54:b2:3e:63:04:b8:
                    cc:64:06:3f:bc:50:c3:7c:9a:33:dc:30:ac:d3:7b:
                    cc:45:2e:51:b5:0a:c4:9a:ba:27:31:ac:05:a3:d3:
                    c5:13:51:6a:df:35:50:b8:d5:0f:b5:d0:57:41:92:
                    7c:72:3c:42:0b:f6:7c:1e:b4:25:65:9f:39:0f:ff:
                    7c:af:bc:46:8e:7a:c7:11:6b:c9:00:cf:e8:e5:09:
                    38:94:2c:09:b3:5b:b9:10:26:62:32:b2:fd:c2:80:
                    e2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DA:34:02:98:93:5B:40:CA:EC:95:75:CB:36:E9:0C:E9:E7:EA:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccf46d23-998a-3676-a238-493794a9bd7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:dc:b6:94:6a:28:87:c7:04:14:30:ef:ba:8c:14:4e:56:48:
         f6:12:11:95:83:26:55:78:36:d1:5e:f9:4f:c0:94:a9:ef:03:
         a6:e3:51:82:d7:a8:3e:66:6c:00:c2:70:5f:3a:9b:aa:88:23:
         70:31:61:8e:85:86:34:bd:6f:92:93:43:0c:1f:04:86:90:2e:
         42:4a:ab:d9:4b:28:98:f0:87:64:20:b9:2d:38:41:06:64:c8:
         f1:f4:db:9c:6d:ef:b7:19:10:44:be:30:5b:ae:2f:02:db:73:
         16:be:7d:e9:e8:64:79:48:28:f8:71:0e:bf:cc:02:98:db:83:
         c3:12:2c:b8:fc:f2:d0:ee:27:4b:fa:ba:cb:e7:f6:23:64:46:
         4b:d1:f4:c9:1b:f4:ca:be:62:96:d9:c0:a8:4a:71:8a:74:4b:
         f8:7f:b1:d7:b8:05:9f:e4:3f:7e:28:81:13:a1:e1:5c:3f:ed:
         fc:49:b0:2c:c1:f7:c3:ed:41:dc:21:2c:dd:9c:c0:6c:eb:8f:
         d4:0a:2e:a5:45:78:bf:8a:1e:4d:db:28:98:f3:c2:f7:64:83:
         e1:74:40:a8:95:1c:da:6c:0e:49:32:6c:67:79:c5:66:e7:75:
         81:87:e0:41:43:31:2d:1c:fc:89:b3:a8:fa:2c:c1:46:93:d1:
         52:ff:37:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:42:40 2025 by rpki-client