Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da4e8263-8ed8-32b9-a0b3-b6863865177a.roa
File:                     da4e8263-8ed8-32b9-a0b3-b6863865177a.roa (raw, json)
Hash identifier:          bFBOp6SESIfBdJOx838SM4j9JYZ4xKOAwlWRzlQp1KU=
Subject key identifier:   FD:F6:49:D9:12:4F:DE:FA:CF:1B:10:A1:67:E5:C8:BB:E6:73:D5:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A119ABD77BBE92F9EA51F6ED0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da4e8263-8ed8-32b9-a0b3-b6863865177a.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     36620
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:bd:77:bb:e9:2f:9e:a5:1f:6e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=5e336953-6635-4bca-a88c-1126900eaae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a8:a4:8f:20:e8:39:c3:3d:ce:96:76:b8:67:
                    72:ba:cc:6b:07:3d:31:22:82:b7:7a:35:13:c8:ff:
                    59:8e:46:d7:16:33:d7:ec:93:e6:0d:1a:db:cf:48:
                    32:a9:e1:12:d5:35:5e:42:bd:7e:f5:80:53:c4:d7:
                    c6:82:75:22:bf:ab:86:7a:6b:68:5c:c6:ac:12:79:
                    e4:a2:a3:82:1d:d8:90:0f:89:43:c0:f6:38:d0:9e:
                    b6:d9:b1:4b:26:fc:44:9b:a8:c5:7c:42:c3:72:b0:
                    30:36:3e:f8:5a:43:df:eb:20:69:e7:83:1a:f8:f7:
                    a3:c7:11:dc:57:36:5b:b8:cc:53:d1:c4:9f:7f:95:
                    f4:51:36:00:05:04:2b:5a:5e:6b:e9:6e:c2:ee:60:
                    cb:d1:9b:eb:06:04:2f:7d:78:84:d2:f8:a2:c2:84:
                    46:41:bf:36:47:04:82:31:65:32:63:28:65:ec:8f:
                    67:81:3d:64:58:48:a9:cd:98:91:46:d9:d5:c2:bf:
                    d2:36:00:f2:75:9f:f5:f7:f6:ee:cb:cd:1e:79:d2:
                    b9:d4:bd:85:40:85:7d:e2:35:01:d0:c7:da:2c:a8:
                    5a:22:c8:46:e6:1f:a0:8b:d2:83:23:87:8f:c8:7e:
                    42:7b:b9:19:1d:89:ac:e1:6b:f0:25:69:e8:0f:f4:
                    e8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F6:49:D9:12:4F:DE:FA:CF:1B:10:A1:67:E5:C8:BB:E6:73:D5:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da4e8263-8ed8-32b9-a0b3-b6863865177a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:78:2f:30:2d:62:4e:8f:05:3a:e2:2e:b2:81:e1:1e:6a:01:
         38:7b:42:0f:10:80:e0:d7:0f:a1:81:a3:05:3c:ee:74:ce:80:
         a7:84:a0:13:a9:4e:fd:af:6d:fc:40:f4:13:3a:c6:23:b5:c7:
         a4:e9:54:73:d0:2f:a0:6b:df:e4:a4:4e:5a:7d:98:58:7f:29:
         dd:54:50:a5:5c:0f:ac:00:79:53:c9:35:5d:fa:85:77:1d:ef:
         81:ff:92:23:3a:da:08:b2:9f:3e:b6:f7:dc:2a:79:3e:6f:a1:
         ab:0d:1e:d1:a6:10:be:6a:ff:19:e1:dd:c4:4d:6b:db:24:9a:
         74:10:1f:2d:d8:b5:4d:18:e4:30:70:57:a2:e6:c8:17:ca:ce:
         b9:42:3f:82:b8:ee:f3:0f:37:75:d0:e7:43:e7:23:c7:9a:89:
         55:35:36:9d:02:28:1a:51:44:c1:eb:d6:bc:c9:32:62:1f:18:
         a0:b7:68:27:64:89:3c:1e:e0:c7:43:9f:6d:09:2d:8c:b5:d8:
         50:6b:3e:82:43:45:c9:46:95:8a:95:47:3b:7a:ec:53:73:f0:
         17:31:c9:5e:35:1e:38:cd:62:a2:1e:f9:e3:43:12:fa:e7:0d:
         6d:a7:15:48:bd:2c:6a:22:5f:82:1b:59:4e:5d:4f:be:2e:ad:
         e5:06:56:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:25:44 2025 by rpki-client