Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d08d96e8-e72e-3369-b3ea-e60ea4a9962f.roa
File:                     d08d96e8-e72e-3369-b3ea-e60ea4a9962f.roa (raw, json)
Hash identifier:          znVQKHbYzP4uD57/M0zXzhUNtib59k+iKT90tNAxnuo=
Subject key identifier:   F3:E4:65:29:7E:A4:22:BE:DE:AB:7E:07:A7:86:7F:63:64:23:21:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4F05E4DA2E02B13DCE51A500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d08d96e8-e72e-3369-b3ea-e60ea4a9962f.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     396615
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:e4:da:2e:02:b1:3d:ce:51:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=808a69ef-e494-4c12-b9de-21161b789b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:73:6b:92:d4:cd:62:29:5c:4d:4d:a9:55:87:
                    6a:43:d7:1d:44:3c:76:d0:da:64:3d:43:e4:91:ca:
                    db:8c:a2:a9:11:38:b7:cd:6e:c8:d5:1a:36:99:94:
                    85:4f:10:eb:ff:71:5f:2f:ea:2f:21:e6:5e:28:73:
                    39:14:e0:b9:07:0e:1f:6c:02:96:0e:5b:fe:23:6b:
                    11:fa:f0:17:cd:49:2a:22:76:90:07:cf:ab:8d:4a:
                    e0:31:b4:e7:93:ed:fa:df:35:3e:63:bf:a7:05:5b:
                    19:32:21:58:4b:1d:3a:6f:b8:cf:56:b5:96:91:b6:
                    ce:dc:0c:47:d7:d7:84:a2:c5:70:e9:22:56:09:ab:
                    ca:7b:c8:0e:b4:06:5f:3a:d7:11:0b:79:e9:79:91:
                    f4:9e:b0:1c:b5:77:65:a3:f3:ae:a2:2e:c7:c8:2e:
                    cc:bd:4d:78:09:10:e8:90:24:7d:a8:12:2a:b0:b4:
                    7f:00:80:e0:70:e8:90:bc:e1:fd:be:c9:94:6e:10:
                    25:b8:d3:20:98:a8:6f:a9:1c:c3:73:aa:a9:22:62:
                    e3:35:f8:0d:fc:02:08:23:7e:b5:b4:3a:03:f9:79:
                    7d:85:10:0a:76:6f:66:dd:5f:e6:83:b7:46:f7:b9:
                    21:a8:8b:60:ae:23:4e:a5:3e:a8:d9:24:22:16:e9:
                    38:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E4:65:29:7E:A4:22:BE:DE:AB:7E:07:A7:86:7F:63:64:23:21:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d08d96e8-e72e-3369-b3ea-e60ea4a9962f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:35:2d:1d:06:97:81:b3:c4:1f:ad:6a:64:fa:ca:a3:89:ad:
         1e:fc:30:ae:d4:4e:5c:7c:f6:c6:0f:92:32:4d:f7:68:a3:bc:
         93:f8:44:f6:49:b7:f5:37:b2:a7:b1:f6:78:7e:f3:ce:28:db:
         e6:c7:0d:33:e9:09:4e:a6:8c:7c:63:bd:90:50:33:d6:00:8d:
         b6:51:2b:0e:56:78:e1:6d:10:2d:c8:d9:0d:3a:04:e8:ef:6f:
         fb:cf:ba:48:5e:4e:59:fb:4e:41:30:bd:67:eb:bb:4f:a3:80:
         43:81:80:fc:c4:11:da:38:c2:ee:d3:41:88:b4:b9:87:95:83:
         0a:68:3a:80:e7:60:df:5e:86:94:69:93:d5:ce:2c:7b:b6:10:
         98:5d:87:c6:3b:65:73:f9:7a:c4:d8:58:45:fd:18:64:25:01:
         5b:ac:17:ec:53:69:a8:5d:25:35:a7:00:f8:69:3f:ed:1c:ec:
         30:b1:2f:79:46:8f:92:7c:bc:df:49:37:c9:c6:16:d6:9e:29:
         07:f6:33:12:d3:78:59:b1:d6:2a:e1:c0:4a:cc:70:ab:24:c2:
         d7:44:2b:dd:54:f3:e3:3f:df:09:2c:6f:62:0f:fb:4f:d0:0b:
         4d:86:8d:7c:c0:69:40:05:23:57:63:d7:72:02:90:01:43:32:
         64:92:69:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:35:20 2025 by rpki-client