Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19768c90-eec7-3d99-82a2-fdcd73859239.roa
File:                     19768c90-eec7-3d99-82a2-fdcd73859239.roa (raw, json)
Hash identifier:          axn+WNOA4W5KvzC/DUkj5DSfnEbZChLs8QXik4NOiCQ=
Subject key identifier:   25:91:29:FC:70:55:F0:66:EF:4E:4E:57:60:CD:90:17:69:81:23:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE883FCDDD3E059CCFA3FC520
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19768c90-eec7-3d99-82a2-fdcd73859239.roa
Signing time:             Tue 19 Aug 2025 12:34:14 +0000
ROA not before:           Tue 19 Aug 2025 12:34:14 +0000
ROA not after:            Mon 17 Nov 2025 13:34:14 +0000
asID:                     396549
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:83:fc:dd:d3:e0:59:cc:fa:3f:c5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 12:34:14 2025 GMT
            Not After : Nov 17 13:34:14 2025 GMT
        Subject: CN=5d0cee79-ed41-4203-a50c-11a4c29136f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:b1:d2:15:bb:3f:1e:d0:b8:49:a9:9a:0b:
                    44:bb:61:94:be:e8:a7:7d:07:1f:04:4c:cf:3c:88:
                    a4:48:44:8b:ba:e8:36:2c:23:72:d7:65:9a:e3:40:
                    13:ca:00:a5:46:59:e3:9c:ba:c2:c9:4a:af:5b:03:
                    98:c9:9a:58:78:c5:75:3e:f4:37:28:13:ab:5c:fd:
                    95:a4:51:58:a5:eb:da:7d:e8:6a:d3:9f:7d:fb:07:
                    be:b4:c3:65:9f:33:5b:2a:ff:6b:7a:c4:00:95:87:
                    25:47:75:68:80:83:6b:f9:6a:06:d5:fd:c6:7d:1b:
                    f2:c4:2f:b7:6f:61:6c:c5:01:6e:d0:ae:2e:85:e6:
                    41:13:68:f7:43:18:0a:77:ec:af:5e:36:49:57:73:
                    cf:a3:77:b0:14:ab:e8:7c:d4:be:17:f1:3c:91:bf:
                    f1:10:9a:ab:c7:87:ec:f5:67:e9:84:89:e8:6a:e6:
                    a9:32:74:10:8a:3b:ad:72:b2:5b:aa:ad:e7:b6:c5:
                    88:06:49:26:1b:e4:07:3b:f4:c8:19:13:d7:83:63:
                    cb:a9:15:59:94:5b:81:93:44:55:ad:2e:0f:8a:c6:
                    c4:77:39:26:0d:c3:fa:f1:60:8e:40:03:0c:68:8e:
                    b5:e0:49:17:2e:f0:46:3d:31:b5:f9:48:e0:d9:60:
                    2b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:91:29:FC:70:55:F0:66:EF:4E:4E:57:60:CD:90:17:69:81:23:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19768c90-eec7-3d99-82a2-fdcd73859239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:90:4f:c2:f7:3e:d0:f2:f2:e9:9f:58:c2:57:ce:91:7f:59:
         6e:8b:11:00:72:91:62:77:83:f6:84:01:7e:32:e7:5c:3d:5c:
         6b:89:83:bf:e6:25:cf:00:f7:6f:34:47:2e:46:34:02:f6:43:
         3a:a4:61:db:7e:b9:c5:c2:5b:af:0b:2e:cf:93:a8:72:0a:24:
         34:5d:a9:04:71:86:8d:94:5f:2d:20:96:4c:81:75:83:9f:4a:
         ba:f9:34:95:a1:5c:4e:98:49:8c:2c:01:51:0a:4e:cf:71:35:
         a6:b4:ad:38:ef:ea:f3:f3:06:3b:ef:78:b8:51:a6:87:ae:ad:
         fd:46:40:78:1f:84:2f:a8:0b:df:bc:44:54:f1:d9:9e:e1:0c:
         8a:e0:d3:65:c0:20:2f:4a:ac:4c:cc:24:30:3f:69:fa:c1:bd:
         8e:a6:9b:82:d1:f3:09:b0:8b:74:3f:4a:8d:46:d3:7d:77:41:
         83:6c:ef:c3:d5:9e:83:cc:57:bb:cf:0a:92:ff:5c:5b:65:02:
         42:ed:e9:71:bf:f7:b9:0d:7e:63:04:0e:21:2a:4e:20:e9:d1:
         df:df:a5:c2:b6:1f:c7:3f:26:20:72:83:09:39:13:b4:81:a4:
         c8:80:03:f3:02:7c:d1:7a:29:a7:ff:08:ec:67:3d:0f:21:1e:
         6c:f2:16:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:02:28 2025 by rpki-client