Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/234683c2-051b-3a46-95a0-579e00bc100a.roa
File:                     234683c2-051b-3a46-95a0-579e00bc100a.roa (raw, json)
Hash identifier:          VtEy/Jsr3FMTTin3b/9ToMNXmjL66NebkupzpUX8BcI=
Subject key identifier:   2D:9A:0A:11:1E:C6:81:51:9A:CF:85:FF:8A:E3:20:5E:BD:C5:18:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A119AC1A6ECD5727F3D0723B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/234683c2-051b-3a46-95a0-579e00bc100a.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     396563
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:c1:a6:ec:d5:72:7f:3d:07:23:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=939a4f5e-0fcf-4e1b-b6bb-49cc1d6e87b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:b5:32:af:00:de:77:fc:3e:1e:b1:6d:a1:
                    66:70:34:c0:0d:88:66:97:f3:8e:e7:be:bf:b5:38:
                    58:b6:4c:b3:10:4a:5d:e0:37:77:6f:30:23:85:d1:
                    5d:d0:96:ed:6e:df:c1:4f:96:65:8d:4e:ab:54:87:
                    c8:28:67:a0:5a:5b:88:87:72:fe:53:7e:3a:a4:11:
                    54:f4:ae:72:b7:a8:77:60:58:e6:60:db:98:9f:1a:
                    33:08:7c:23:15:dc:28:e2:af:72:51:75:c8:cb:78:
                    19:aa:3c:7e:51:18:c7:2e:1f:f4:d8:c8:d5:fc:3e:
                    b2:3f:dc:08:f5:5a:d3:e5:39:53:c4:cf:5b:bb:ac:
                    09:74:81:8c:eb:2a:6d:6a:07:ae:94:e4:97:1a:09:
                    ea:69:b8:ed:71:7d:c7:b1:5e:71:cb:42:f7:bd:b9:
                    c0:0e:29:dd:51:34:d9:20:04:c2:7f:ca:49:94:42:
                    8c:80:24:b0:5b:4c:2b:0e:bb:1b:83:9e:fe:23:a5:
                    2f:18:06:e0:68:1d:34:33:29:97:7a:ed:55:ff:ee:
                    c7:ae:e5:7a:78:e7:96:63:03:a7:6f:2a:c6:bf:45:
                    0e:d5:3c:de:8d:c8:25:d7:b7:42:b2:1a:3c:43:ff:
                    4c:a9:12:0e:e4:67:37:ea:d0:f0:f0:15:3b:f5:f8:
                    4d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9A:0A:11:1E:C6:81:51:9A:CF:85:FF:8A:E3:20:5E:BD:C5:18:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/234683c2-051b-3a46-95a0-579e00bc100a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:bf:a0:0e:2b:60:1d:a9:e1:8f:90:99:9b:1b:37:e5:c6:44:
         13:f1:f1:6d:11:95:6f:de:d2:e9:e7:28:2e:05:4d:9d:b5:40:
         2f:40:fc:ca:14:bd:f7:27:d7:f5:d7:bb:fd:99:c5:17:cb:08:
         ad:d7:77:2f:83:69:8b:4b:73:1a:25:07:55:87:f4:1c:8e:f9:
         17:90:32:bb:01:50:df:cb:37:13:ee:3d:5d:bc:e0:90:5c:1d:
         cf:cb:d7:7e:5a:78:1c:bc:1c:2f:64:e5:8f:06:73:dc:a0:60:
         b3:11:b9:bf:b2:da:2f:34:da:25:99:05:76:26:d2:bb:9d:cb:
         8a:4a:61:8d:a2:b2:72:d6:9f:13:8a:8c:84:8b:c6:12:8f:d3:
         b4:59:23:ac:fc:19:fd:96:71:fa:54:0a:56:c7:e7:82:6e:82:
         ce:4a:6f:b7:2e:0d:e2:02:80:a2:9d:90:b1:1f:75:55:62:aa:
         57:f0:8d:f5:2c:c3:64:5c:e4:cb:7c:af:ed:65:d3:f2:bf:0a:
         ae:28:c8:d7:6c:09:b5:3d:b3:a0:0f:ea:ce:19:d9:3d:13:9c:
         8b:e2:0b:17:d4:fe:5b:9b:73:97:c3:9b:4d:29:45:a1:41:6d:
         89:f0:e7:d9:7c:5a:89:a3:81:dd:90:9c:2b:75:c5:5a:5a:95:
         7a:1f:d0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:29:33 2025 by rpki-client