Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209ae32f-e634-38d0-ae30-cca37a438043.roa
File:                     209ae32f-e634-38d0-ae30-cca37a438043.roa (raw, json)
Hash identifier:          jKJNILI8ahDEKPZC7MSV8NW/feGDoH3ORMem899fhhw=
Subject key identifier:   E0:77:53:CF:47:2D:E6:FF:82:99:AE:BA:13:B0:A5:F5:1E:76:96:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1F9051DE87C650913417E6C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209ae32f-e634-38d0-ae30-cca37a438043.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     396567
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:51:de:87:c6:50:91:34:17:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=3c4190e4-9b8f-4aa1-bc93-581fa02e8b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:34:c5:a2:be:17:da:cd:e1:58:0c:51:9b:
                    5b:ad:21:a4:95:fd:f5:22:68:75:e3:07:31:0a:e4:
                    13:35:a2:46:2c:f6:ba:31:10:ca:ca:16:ba:73:2e:
                    fb:5d:e3:16:c1:76:db:6a:d9:31:d8:3f:25:12:2b:
                    df:90:fb:07:31:62:91:2e:d2:e5:b0:27:74:0e:f0:
                    b9:d7:67:0a:95:8a:8e:84:25:86:2e:24:b9:3f:9d:
                    06:37:5d:e9:4f:77:e6:d7:2c:e5:6e:5e:44:b0:7d:
                    76:2e:8d:9f:52:a4:3d:c6:80:66:7f:2d:45:7e:d0:
                    0b:4a:df:c9:c6:20:2e:05:69:3a:b1:32:e6:d8:db:
                    61:7c:9c:2d:1c:f9:30:5c:7d:16:0d:9c:ec:6b:3a:
                    cf:45:a2:35:c1:52:1c:e7:c1:40:da:2c:52:3f:c7:
                    71:b7:b2:1c:9c:ab:c7:06:27:78:4d:ea:4d:ac:da:
                    5e:2e:5a:e5:62:ef:50:90:e0:cc:f3:47:d6:7d:b4:
                    8d:64:cf:ab:ad:a8:b2:f8:8d:cb:c3:1c:4f:bb:84:
                    00:45:7c:c2:f7:24:13:36:f7:85:5e:e5:ed:bb:80:
                    5c:5b:b7:20:ba:1e:cc:44:4b:33:c0:42:fe:e9:47:
                    3b:72:23:cb:9f:aa:bb:eb:9f:5c:0a:18:e3:a8:a3:
                    89:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:77:53:CF:47:2D:E6:FF:82:99:AE:BA:13:B0:A5:F5:1E:76:96:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209ae32f-e634-38d0-ae30-cca37a438043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:0c:bb:6c:5e:5f:13:8b:84:01:d4:40:8b:6f:3d:0b:68:7f:
         e9:4b:4b:eb:a0:c3:b0:4b:09:d7:66:6a:af:55:96:92:fa:8c:
         f8:b1:df:da:1e:ec:54:7f:e1:b9:71:25:43:5a:b1:95:56:19:
         f0:6d:d4:75:f6:f7:78:4d:9e:0e:e5:71:46:8e:10:d7:51:56:
         a3:7e:5b:ca:e1:10:9c:43:16:6d:23:bd:a1:90:dc:ae:39:43:
         b2:84:c2:85:85:f8:bd:91:c2:8f:21:6c:11:2b:8f:f4:a7:73:
         2e:00:fd:d4:be:fd:a4:b4:57:52:c3:0b:47:89:13:f5:ce:3b:
         f8:07:9a:f0:2e:7f:5a:9a:44:a9:4b:4e:f4:52:e0:03:56:ed:
         d6:da:ff:f2:2f:d1:56:4c:9c:ec:12:c6:c1:b3:65:4e:70:25:
         1f:ee:cd:1c:fb:c8:18:75:46:4d:fa:9f:02:6e:a1:08:9d:38:
         8f:ff:83:b3:2f:7f:83:4e:25:fb:72:1d:4e:e1:ec:6c:dd:ec:
         1c:9a:f3:c9:44:6e:09:b3:58:86:d7:af:a5:69:8b:eb:0e:71:
         54:9d:49:98:3c:cb:7c:54:63:b9:25:5a:b8:ef:14:f3:39:21:
         81:8b:7d:ab:49:12:de:17:5d:28:cd:e2:0c:e9:1b:51:c3:4e:
         05:ae:db:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:43:51 2025 by rpki-client