Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed97ac7d-1d66-3fae-adca-dd521d7c2c77.roa
File:                     ed97ac7d-1d66-3fae-adca-dd521d7c2c77.roa (raw, json)
Hash identifier:          pXDF9IELEupw7+RpCBbapaOfqbcjgnl6FKntTiodP04=
Subject key identifier:   41:B7:BD:6D:11:5E:68:4E:AF:65:EB:A3:14:B1:90:9D:1F:86:43:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C3B3FB37288F9E59295C1B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed97ac7d-1d66-3fae-adca-dd521d7c2c77.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     396594
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:3f:b3:72:88:f9:e5:92:95:c1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=8abac5c5-830b-42b6-a737-6e16d0dde1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:91:52:6b:69:c9:c5:14:1b:30:b3:16:7a:
                    5a:3e:4a:d9:0e:45:f6:04:40:79:78:ba:d6:16:6b:
                    83:85:20:0d:78:0d:c3:11:c2:6b:02:5c:88:5d:d4:
                    cb:c0:e1:5b:0b:6d:da:c8:e9:4e:46:09:a1:9b:44:
                    8b:5c:d9:ad:89:9d:0a:9a:f8:06:15:a6:db:66:0a:
                    39:31:c8:ea:fc:2b:29:9b:71:66:12:7f:32:39:77:
                    65:4b:39:60:10:bf:da:14:87:f2:b3:ae:be:5f:74:
                    fd:28:e5:7e:5a:3e:b2:a2:7e:a7:0f:e4:86:4a:37:
                    fb:15:75:22:83:a6:5f:62:96:eb:99:96:9b:28:bc:
                    01:0c:8c:fb:76:51:5c:3a:44:6a:43:82:df:a8:40:
                    b6:f0:45:8e:ff:a5:ac:90:6a:a9:de:03:2f:53:63:
                    49:7b:8c:58:bb:dc:7e:0f:5c:bd:a2:e6:6b:5d:0c:
                    12:c9:5d:c3:2b:fd:aa:e1:be:c6:34:4d:e2:d8:a6:
                    bf:7a:fe:f7:fc:20:85:80:63:60:28:da:cc:05:3d:
                    61:cc:d9:6a:7b:bd:8b:0c:8c:1f:63:0b:91:ac:d1:
                    28:a8:fe:0d:a6:98:c4:61:97:03:51:cc:cb:aa:b5:
                    64:73:89:58:41:54:fd:23:11:24:49:da:b8:8f:26:
                    98:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B7:BD:6D:11:5E:68:4E:AF:65:EB:A3:14:B1:90:9D:1F:86:43:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed97ac7d-1d66-3fae-adca-dd521d7c2c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8d:c5:b6:34:46:d2:2a:29:e2:4b:a5:0e:0b:99:e8:fc:ae:
         60:a5:b2:2a:9b:c1:72:a0:85:92:79:84:bf:97:ef:43:d1:bd:
         cf:bc:b5:11:25:7e:95:c8:7a:e7:bf:a2:e1:db:63:d3:c6:c2:
         f2:d0:97:46:d0:8e:64:95:eb:e7:16:fc:01:1d:b9:11:2c:ef:
         15:59:5d:de:3d:07:d9:58:d4:6b:ae:4b:c0:72:0c:10:71:a2:
         aa:95:ad:ff:cc:92:92:6a:0c:73:46:2d:af:95:64:8b:ea:7f:
         7f:2c:11:8f:f2:9d:96:15:4c:78:89:4f:c5:70:34:c2:cf:72:
         7a:dd:b3:97:1c:bb:c4:b5:e6:dc:86:fa:8b:04:58:97:0d:88:
         b1:cd:b5:d9:2d:13:c0:91:97:7f:7b:98:93:14:04:94:d5:75:
         b0:b9:b2:88:ff:17:79:94:7f:7d:89:c9:4c:38:50:b4:b8:55:
         da:79:e4:71:76:dd:7a:38:9d:a8:12:bd:3b:96:ef:60:28:c9:
         87:1f:43:d9:26:7d:7c:88:5d:2e:ec:8f:8b:0a:f7:b4:da:6f:
         e2:6c:55:1d:61:a4:57:60:e4:f2:d8:44:c3:21:59:83:32:a8:
         f7:ec:2a:11:1d:db:48:b2:39:49:d2:03:2a:8b:12:46:58:2f:
         71:f7:34:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:53:04 2025 by rpki-client