Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a061081-0550-381c-b4f9-e8e4a6b9104d.roa
File:                     2a061081-0550-381c-b4f9-e8e4a6b9104d.roa (raw, json)
Hash identifier:          zBOpHQhr993p/iAgB5Tx9D6HAhkEHCC6ng3GGrmS3Co=
Subject key identifier:   B8:E9:3F:E0:E3:89:1F:9B:5F:D3:0A:DC:22:35:1C:BC:9B:B6:37:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1F905322C0EB68AC02065400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a061081-0550-381c-b4f9-e8e4a6b9104d.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     396572
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:53:22:c0:eb:68:ac:02:06:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=11228399-9d1a-4b73-bfa8-2697f234b6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:c1:9f:25:96:c2:0d:cd:31:62:84:2f:0d:
                    a6:b2:1a:00:4a:94:b3:03:64:d8:36:6e:45:80:8c:
                    64:da:6f:71:99:7f:a0:f7:6c:eb:7a:57:ad:27:bb:
                    17:62:ff:6b:fb:bf:0b:01:87:86:f6:a4:22:ce:a3:
                    12:7a:0b:15:4f:1c:42:17:9f:b9:88:cf:73:74:40:
                    ec:1b:d3:1b:d1:39:fe:35:35:a7:3a:3f:f2:b4:30:
                    15:fe:b7:25:35:0f:2f:50:64:3e:04:89:c9:2b:15:
                    36:0d:43:9e:f6:31:b4:e8:e1:c5:b1:ba:27:7d:f8:
                    8c:a8:5d:73:3e:ce:a8:87:a4:6f:fd:0f:41:6b:c3:
                    31:ae:4c:b7:af:cb:7a:0b:03:98:bf:59:b0:de:f8:
                    97:25:59:d9:d5:28:50:56:cb:ae:a8:45:a2:e2:9d:
                    2f:1d:ce:dd:6e:31:08:a6:ef:5e:0e:b5:d0:b4:88:
                    b8:2b:3f:e4:b6:d7:9b:f7:66:de:24:b8:e9:9a:9f:
                    b3:b5:25:bd:b2:f2:3e:4b:c4:5d:70:00:1d:b5:40:
                    47:2c:e6:39:f3:db:c1:f2:44:0d:ab:eb:fa:dc:63:
                    66:8d:0e:86:e1:67:ef:cb:da:ba:22:9a:f1:ec:93:
                    9e:78:35:f8:cb:f7:1d:ce:ac:96:d3:ad:54:98:1b:
                    77:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E9:3F:E0:E3:89:1F:9B:5F:D3:0A:DC:22:35:1C:BC:9B:B6:37:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a061081-0550-381c-b4f9-e8e4a6b9104d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:eb:37:93:db:d7:02:26:fa:2f:63:68:a0:91:8d:15:c4:b8:
         42:cb:39:f2:ee:f2:9b:e4:59:85:82:ea:05:26:90:d7:3e:9d:
         be:72:a2:ef:11:c6:78:8b:d9:a6:6d:ac:2a:cc:fd:f2:df:23:
         1c:96:c6:58:ad:39:8a:b4:e0:73:5a:16:90:7e:09:a1:47:09:
         6a:e8:64:01:bb:c6:76:ba:06:d0:8a:87:7b:1c:d1:3d:b2:d5:
         ed:e1:51:df:90:85:cc:35:c5:24:7f:55:5c:a0:e4:f2:8c:5e:
         fd:c2:e3:2a:16:dd:b1:69:84:88:db:63:1f:3e:09:11:99:bf:
         c5:27:b7:cd:09:22:f0:e1:25:4d:fa:e6:c1:c1:18:e8:90:00:
         8d:e9:96:90:16:da:80:7c:52:a6:4a:dc:fc:31:28:18:b9:95:
         8a:fa:97:04:fd:f1:98:cb:8d:eb:93:f3:9c:8b:c6:68:ff:d8:
         97:72:c7:b0:09:d5:91:5a:53:15:27:03:ec:c1:4a:50:a6:e2:
         a8:0e:ad:1b:3d:d9:2a:65:bb:6e:8f:62:0d:ef:0b:cf:bd:56:
         eb:f1:c7:ce:5f:95:dc:c0:35:46:6d:a9:d2:61:72:cc:c2:bf:
         24:19:64:7b:18:52:6c:62:ae:14:17:f8:54:a1:3c:cd:b3:04:
         0d:c6:fb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:56:31 2025 by rpki-client