Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1990ffb1-145b-3ca9-a2e6-a626bc798491.roa
File:                     1990ffb1-145b-3ca9-a2e6-a626bc798491.roa (raw, json)
Hash identifier:          lHKPi4yUDtYAX6Ug9HOe1hHRwV9pmwxGsxdpKG0dEto=
Subject key identifier:   EC:E1:3C:2E:FF:7E:49:C6:F3:A0:99:24:2D:4B:3A:A6:69:97:EC:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE883FEB3D9FA9E98B9E26880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1990ffb1-145b-3ca9-a2e6-a626bc798491.roa
Signing time:             Tue 19 Aug 2025 12:34:15 +0000
ROA not before:           Tue 19 Aug 2025 12:34:15 +0000
ROA not after:            Mon 17 Nov 2025 13:34:15 +0000
asID:                     36628
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:83:fe:b3:d9:fa:9e:98:b9:e2:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 12:34:15 2025 GMT
            Not After : Nov 17 13:34:15 2025 GMT
        Subject: CN=b8214f8d-f2ec-4436-b3be-70ae1c656315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:59:89:1e:60:63:37:17:17:6d:25:f7:1f:
                    00:5c:46:b2:b3:4e:04:19:05:ac:15:ea:f4:ea:c4:
                    d3:62:9c:d6:60:68:a6:e3:82:0e:b5:2a:99:11:a1:
                    75:a7:31:0a:98:ab:b0:23:e6:3b:f1:25:7d:55:69:
                    fd:87:c6:e8:49:c1:0b:7d:c2:72:f0:97:34:4a:bb:
                    7d:6c:d8:ed:98:c5:86:f1:d2:5c:82:84:20:16:6e:
                    3c:35:d2:6c:77:c2:51:84:3e:2d:71:24:c7:14:8a:
                    bb:f6:dd:db:74:03:ea:85:d5:d1:51:15:db:2c:56:
                    48:8b:77:f5:ec:d6:05:e3:12:a6:95:88:25:6e:cd:
                    c1:c2:1b:19:3e:ba:65:9b:a5:c4:d0:94:d3:78:c5:
                    12:b8:e5:1d:25:6e:f9:40:1e:8c:bf:7f:c1:48:90:
                    0d:a3:bb:9b:d7:4d:19:32:25:a4:87:7b:05:b5:3c:
                    78:c9:34:6c:20:b9:2c:59:34:36:c0:9f:7a:92:da:
                    a6:2f:2d:39:73:d9:2c:7f:88:4f:38:e7:f4:c9:95:
                    74:09:6c:27:3b:a0:ed:89:4f:78:24:9d:90:92:56:
                    81:d3:98:47:8c:71:6b:fa:bf:ad:b3:fa:de:81:7b:
                    71:e4:07:f5:6d:2c:c1:e6:d7:0d:bc:fc:ab:db:f0:
                    0b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E1:3C:2E:FF:7E:49:C6:F3:A0:99:24:2D:4B:3A:A6:69:97:EC:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1990ffb1-145b-3ca9-a2e6-a626bc798491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:e8:c5:17:78:99:79:7c:f8:5e:9f:ce:fe:40:00:aa:16:2b:
         e4:c6:fb:67:be:41:54:19:aa:13:a8:bb:0e:48:28:68:64:d2:
         a0:f1:be:83:15:5d:fa:09:85:62:cc:1f:fd:9b:72:3b:1a:52:
         13:8b:89:28:a1:83:1b:70:dc:f3:84:f5:11:8f:6d:f4:6e:a0:
         a0:46:4b:a7:d2:1d:3b:4b:bf:c9:50:36:5e:e0:ae:9d:2f:4c:
         88:d0:14:63:18:4e:f7:a2:5b:18:c4:51:1d:da:4a:0d:2c:55:
         14:21:cc:40:c7:bf:17:ac:e5:9f:85:5e:1f:73:9b:fe:bf:09:
         24:36:99:52:61:2a:f5:0a:3b:27:b1:a1:d3:f1:7e:c7:e7:98:
         48:be:5b:65:77:10:ec:49:c2:f4:d0:ed:21:ca:d3:86:72:ad:
         e4:50:1f:ae:2a:6e:37:e4:57:2d:92:22:41:b4:bd:0a:c2:73:
         86:a9:2c:5c:17:52:25:85:28:da:b9:39:a3:d2:7e:a1:7e:b8:
         6a:dc:87:b7:a7:6c:2c:6f:61:35:1f:f8:35:87:29:3a:a5:a6:
         30:cc:24:6f:43:51:4f:af:ed:fb:98:11:3c:9f:39:79:9f:dc:
         90:b1:ac:aa:b2:9f:a3:c4:13:3e:16:d0:1e:88:4e:42:02:79:
         94:7b:9a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:00:34 2025 by rpki-client