Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e1583a3-0229-3c04-9485-a0a122459f84.roa
File:                     1e1583a3-0229-3c04-9485-a0a122459f84.roa (raw, json)
Hash identifier:          3NCmdga/f9ZSvwdDOnbQ0Oz1Yqtn6Lk2jVF3eMtaZcQ=
Subject key identifier:   64:73:2D:08:F8:8D:25:B8:53:3C:00:AD:89:FD:4A:70:5B:BE:1F:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA670AD3722FF6B976F0D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e1583a3-0229-3c04-9485-a0a122459f84.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     397193
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:70:ad:37:22:ff:6b:97:6f:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=a73ffb86-2bfc-4f6a-a7f6-b766960e010c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:d6:b0:ed:d0:35:a8:0d:c6:db:40:fd:b9:
                    ad:70:6e:e1:32:20:82:c5:bf:3c:4d:9e:5d:d0:ff:
                    f4:5d:f3:dc:b5:7f:16:e0:60:6f:64:5f:79:bd:0f:
                    3a:b9:23:48:06:88:19:fc:33:71:03:89:45:30:3c:
                    43:5c:86:13:de:86:9a:54:cd:80:5c:e5:c8:82:00:
                    43:cd:35:e2:f3:d2:29:f3:c5:00:e4:e5:1c:c6:bc:
                    d0:73:4d:7d:18:69:45:8c:4f:9d:e0:ab:69:b7:01:
                    dd:53:12:8d:c5:18:e9:bc:72:29:20:01:6d:a0:10:
                    80:9d:8d:1f:92:38:41:50:78:4c:1a:0e:4e:cb:2f:
                    c0:00:f6:22:54:d2:7b:8a:29:74:d0:b9:0d:dd:9d:
                    84:2f:5a:b6:76:69:35:75:23:a2:41:1a:10:4a:a1:
                    50:ec:10:85:a6:53:9b:60:5d:f9:2c:f3:c2:78:8b:
                    22:6e:af:8d:3c:64:f0:20:e4:e2:e9:70:13:20:39:
                    1c:6c:06:71:65:04:f5:75:18:cc:0f:7c:61:da:f5:
                    f6:42:39:43:94:43:ca:32:de:df:06:19:05:d2:9a:
                    3b:46:ae:a0:a8:20:3f:f9:38:4e:a7:b7:2e:4a:60:
                    bb:92:71:7e:d0:6e:a6:7c:a2:a7:12:bc:ec:0b:a7:
                    02:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:73:2D:08:F8:8D:25:B8:53:3C:00:AD:89:FD:4A:70:5B:BE:1F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e1583a3-0229-3c04-9485-a0a122459f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a0:5f:e9:93:02:8e:3e:22:70:fb:bb:a5:f6:72:e1:1c:17:
         1c:6d:2e:7b:45:83:9b:d7:8d:fb:97:8b:94:36:44:0b:74:93:
         60:89:70:c0:f9:03:1d:8b:53:4e:40:fc:98:c3:e5:9b:6b:b1:
         f7:f9:aa:89:ef:55:51:82:52:ed:2e:d9:f2:0c:62:d5:6f:a8:
         3a:bb:e0:0c:e1:97:0d:9c:8b:2e:18:95:3a:69:17:fd:93:a9:
         04:65:d8:47:8b:e9:38:86:34:1e:c8:b2:34:27:b8:49:45:ff:
         90:eb:6b:8d:81:90:bd:79:c4:3b:7c:81:70:5f:3e:7f:4e:ef:
         22:23:c7:6e:ca:ed:2c:68:cf:c5:6e:83:e1:04:cf:cb:d4:33:
         44:63:e6:28:5b:ac:e5:12:bf:34:b5:02:aa:79:a3:b6:b8:50:
         bc:ea:49:b4:95:b4:b8:6e:14:0a:2d:d0:03:6b:79:2d:d8:5d:
         9f:64:e9:74:1f:ae:32:cf:ee:51:c2:0f:e0:11:c4:9a:32:a4:
         a8:0b:3e:9c:09:92:09:ec:f7:c7:0a:b2:57:d5:c8:9f:89:a2:
         ee:00:d4:48:82:f2:bf:e3:26:ae:e7:be:6f:96:3d:69:05:9e:
         6e:da:76:43:0d:71:eb:65:e7:51:e9:90:85:74:7e:91:ba:75:
         98:15:f2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:41:09 2025 by rpki-client