Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db76cbf0-ce75-329c-99e3-bca46cce89d0.roa
File:                     db76cbf0-ce75-329c-99e3-bca46cce89d0.roa (raw, json)
Hash identifier:          gAcJskF4AW6ng5UHSbsFvia/6t5QA7aW43mwu6aaoAU=
Subject key identifier:   2F:03:F1:5D:D8:4A:29:FE:15:65:99:1D:F4:1F:FF:09:B4:4E:55:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4F05B557A07B644B66CF9500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db76cbf0-ce75-329c-99e3-bca46cce89d0.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     396596
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:b5:57:a0:7b:64:4b:66:cf:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=0391c277-2dfa-45cf-a530-7828c2cbf1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:43:27:51:0b:95:8f:2c:42:bb:11:5f:86:23:
                    52:19:29:7f:b0:b3:84:d8:40:3f:d2:a6:e6:4b:7b:
                    05:25:d3:d8:b4:f6:ec:8c:1f:fb:e3:7c:23:43:ef:
                    ef:a5:03:38:fe:fa:0b:3e:8b:4a:69:62:bf:12:77:
                    ff:df:0b:36:1f:0a:04:6e:3a:84:50:dd:dd:b3:de:
                    b9:0a:3d:b1:4b:a7:62:1f:0d:d4:d7:b2:b0:f3:db:
                    8a:94:64:09:e7:37:c6:f5:ea:39:ac:5c:a9:8a:dd:
                    75:ec:6c:fe:51:92:7a:6e:2a:fc:f2:1d:d8:d9:ac:
                    d0:c9:72:0a:d5:ef:56:b4:5b:42:2d:47:ce:8c:e8:
                    55:78:2b:16:48:16:99:20:4b:1c:dc:6e:06:fa:8b:
                    d0:28:f8:b6:bd:90:5e:35:b8:3b:cb:40:1e:1a:57:
                    d8:f0:15:45:20:0f:5d:80:6b:a2:09:6e:aa:be:74:
                    36:62:d3:dc:43:01:05:df:51:75:f5:9a:fc:31:f8:
                    26:fd:21:90:dd:d7:06:3c:80:81:2a:23:c2:19:ca:
                    8d:cf:63:cd:23:d8:44:ef:05:1b:30:78:e4:0c:ed:
                    88:a7:91:4e:ac:6b:37:63:27:87:b0:57:1b:1a:b7:
                    a2:98:6f:2d:db:73:0e:2b:6c:f3:c9:9e:05:ad:07:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:03:F1:5D:D8:4A:29:FE:15:65:99:1D:F4:1F:FF:09:B4:4E:55:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db76cbf0-ce75-329c-99e3-bca46cce89d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:08:da:33:2d:d4:8a:eb:d0:d1:91:8a:ae:ba:4c:e9:97:5d:
         08:cf:e1:65:04:c7:f6:47:a8:80:f3:7d:d6:74:01:39:56:bc:
         e6:2e:b8:89:e4:f0:71:97:5e:f0:c8:dd:67:b3:3b:b1:8b:ca:
         71:c7:03:ee:15:d7:3c:b2:fc:61:32:ff:80:3d:69:85:3f:9c:
         7e:e5:b2:9d:00:f0:98:a0:12:3b:ba:36:03:e1:2f:00:a5:f6:
         c8:3a:78:5f:e9:22:a6:45:a6:ee:c6:d1:16:ba:02:51:39:4b:
         46:20:b4:f7:ad:a4:27:55:2d:99:b2:92:9c:02:a0:fa:7f:d4:
         09:ab:c9:83:70:e2:a7:9a:73:7c:4f:36:1f:75:01:f1:ef:b3:
         34:6a:0d:d6:e5:21:93:4b:26:d1:30:57:40:1f:d8:9e:c1:a8:
         4e:e5:c1:a1:c3:37:b7:e1:ac:d1:2c:b9:47:35:ac:06:a4:09:
         67:b6:32:fa:c3:f3:d1:bd:c0:1c:20:be:9b:53:d2:76:cc:28:
         2c:a0:9d:ff:f4:e2:f7:c9:c2:8a:eb:92:60:9f:db:d6:93:35:
         bb:ac:f6:8f:2f:2d:95:fc:63:cc:74:52:8e:29:f9:62:86:be:
         43:bc:31:72:07:be:6b:cf:70:de:3b:21:ae:4b:e2:59:39:77:
         89:92:5d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:40:15 2025 by rpki-client