Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe8a746b-a7f4-34ee-9c91-827b52d949d0.roa
File:                     fe8a746b-a7f4-34ee-9c91-827b52d949d0.roa (raw, json)
Hash identifier:          UAnLFs0pTR9k+tsrJGP5bGGYq4CnfEOjFEyscS6oP84=
Subject key identifier:   BF:9B:F4:52:60:40:6D:BB:50:23:40:E7:31:4D:4D:A9:E2:30:72:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1F90543CA2D5EE5098ADB300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe8a746b-a7f4-34ee-9c91-827b52d949d0.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     397208
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:54:3c:a2:d5:ee:50:98:ad:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=306bdfa2-fa3c-4919-ba48-7916ee239170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:de:55:ce:66:1e:6b:37:f4:c6:1e:dd:ee:0c:
                    6e:6d:bd:ce:97:c7:a6:0d:c5:0d:8e:d4:12:f5:2c:
                    55:8b:94:d1:eb:35:dd:7d:aa:dc:a5:7d:17:c1:12:
                    fe:4b:84:c6:3a:f4:9d:d8:89:64:8e:c3:10:3f:18:
                    a0:3b:9f:bc:44:78:45:0b:3a:d1:69:3c:b0:8f:cb:
                    85:df:2c:df:11:5c:c5:8d:c9:f2:e7:f6:a1:b7:55:
                    c8:e8:ff:97:ec:7a:30:ad:a8:57:33:2f:5b:27:55:
                    51:39:f9:61:cd:e6:e8:ab:e3:c0:15:ca:31:ff:13:
                    6a:2a:ab:a2:6c:e1:a9:ed:5d:54:02:67:91:4f:c9:
                    f8:59:f2:0b:87:49:cf:4d:7f:27:f8:08:09:23:dd:
                    33:6e:b4:7a:04:e4:85:46:39:d0:fc:30:11:6b:8d:
                    77:70:91:ee:c4:59:ba:1a:c6:e2:1e:d4:18:30:a8:
                    9d:bc:e3:c5:4c:e3:0a:12:56:cb:d5:2e:dc:41:96:
                    fd:98:36:a0:b9:df:85:7c:d3:93:ab:9e:68:39:98:
                    84:66:d6:23:2a:d4:ad:d5:6b:51:b4:69:df:ee:c0:
                    0c:82:d3:86:3c:78:8d:bc:86:97:a9:78:e0:73:3d:
                    73:51:9f:e4:a2:59:6b:fa:e5:93:8f:d9:4d:79:08:
                    1e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9B:F4:52:60:40:6D:BB:50:23:40:E7:31:4D:4D:A9:E2:30:72:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe8a746b-a7f4-34ee-9c91-827b52d949d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:11:8b:da:31:52:17:46:80:54:ca:99:76:00:49:a0:f3:1f:
         f9:fd:fe:eb:49:97:65:68:6e:4c:90:c5:96:2c:0d:89:68:17:
         c7:34:a2:0f:af:d4:e6:3e:8c:49:11:90:ae:91:fc:e2:9f:04:
         27:df:c4:7d:ff:2e:e7:fb:95:ec:66:a6:2e:e2:c1:b3:44:86:
         35:a0:13:e7:bf:17:e7:35:85:27:5a:96:32:7f:bc:24:07:85:
         b1:9f:1b:c5:c5:05:59:d6:30:74:b6:27:d4:b4:06:f8:39:96:
         c2:36:1e:ce:db:18:a7:fd:b0:21:f7:00:4d:b6:ce:52:ba:d0:
         0b:55:cb:4e:06:41:bb:d9:dc:a3:65:c4:e7:80:3f:ce:9f:4f:
         13:2b:42:f7:7b:06:8d:66:56:4f:44:57:9c:ca:f5:59:05:7c:
         af:47:2b:10:53:ce:38:9e:2d:3a:6a:39:e2:93:e3:66:a8:27:
         4c:81:0f:76:9f:7e:e0:e3:6c:5b:4f:c4:84:34:33:d6:34:14:
         8e:db:0e:6a:00:2c:aa:bc:56:30:9f:57:07:fc:13:c1:07:11:
         79:9a:87:74:e4:f4:5f:35:72:fd:20:89:81:ad:80:46:ae:e8:
         12:2f:ae:de:2c:3e:12:93:7c:46:2e:01:60:67:d3:c2:3d:92:
         58:e2:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:24:02 2025 by rpki-client