Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21766191-7460-3507-9375-dc24116acb53.roa
File:                     21766191-7460-3507-9375-dc24116acb53.roa (raw, json)
Hash identifier:          3Rw7gcCvNQlSfqjyavzGM+iWuXA3vKHphPOg9hKja7w=
Subject key identifier:   73:53:66:9A:65:E9:11:51:32:4F:E3:EF:D6:01:56:CD:1C:30:29:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434C5FCBDB11CE0AD81AF700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21766191-7460-3507-9375-dc24116acb53.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     396616
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:5f:cb:db:11:ce:0a:d8:1a:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=b792cda7-7205-4ab6-ab7f-914636777fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:58:d2:2c:1d:95:55:d4:a3:8f:20:5c:fc:
                    e4:56:9f:82:1b:aa:ed:c1:74:8c:f1:4b:f4:99:6c:
                    0f:65:3c:c3:fb:34:82:4e:19:43:97:97:78:7c:be:
                    b2:19:25:07:25:2e:83:7a:96:86:1b:b7:7c:a9:9e:
                    2d:38:f2:ec:05:87:b5:95:5d:94:c4:4e:25:f6:c8:
                    1e:be:67:8f:c6:ba:4f:e0:95:73:d9:d7:67:cd:54:
                    db:34:56:67:4f:ea:c9:26:0d:bb:82:34:26:70:c9:
                    3f:f5:0f:88:56:06:37:f3:fe:4e:0e:46:c2:db:ff:
                    ce:64:7c:35:83:0c:30:c1:b4:c1:69:01:30:31:a0:
                    b1:e2:93:e8:d6:17:88:f6:43:88:53:3e:97:8e:d4:
                    23:da:f5:29:36:81:fc:f8:20:fe:36:b5:18:17:01:
                    77:5a:d8:c7:fa:0c:7a:b0:94:bf:44:4f:3e:da:50:
                    66:6d:cc:b3:58:5d:5b:f9:6a:07:4d:78:ee:34:33:
                    77:6c:b3:43:9c:f4:8b:b7:11:3a:db:13:44:e9:49:
                    a8:2c:dd:99:96:0e:3f:d3:66:8e:c7:e5:71:ba:b4:
                    5f:bc:a7:8b:bd:ba:e6:19:ab:b2:4a:52:be:42:e6:
                    dd:f2:79:b9:f2:2d:ed:9b:77:da:69:7c:15:d6:5c:
                    fa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:53:66:9A:65:E9:11:51:32:4F:E3:EF:D6:01:56:CD:1C:30:29:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21766191-7460-3507-9375-dc24116acb53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:4a:ca:3f:7b:8a:bc:52:3f:e6:e2:90:d1:31:b2:8f:25:5e:
         57:dc:72:96:26:8d:95:df:41:fb:12:f0:5d:95:6f:20:7a:1c:
         59:bb:48:52:85:91:34:e1:e9:1e:a4:8e:db:87:ce:cf:6a:85:
         46:ea:37:ab:27:7b:38:1c:1e:02:84:7d:fa:8d:7d:cf:8c:be:
         1a:00:8f:33:d9:64:85:1d:9a:ca:1b:db:7e:1e:ef:8a:5c:32:
         26:52:b8:d2:e8:ab:16:3c:72:5a:4c:d9:3b:49:b8:d9:3f:2f:
         90:b4:2d:05:2e:09:ef:02:b0:4d:a2:94:f1:f6:f9:93:31:1f:
         e9:dc:80:1b:6d:43:89:22:57:e8:79:3d:4c:99:bf:22:da:1f:
         4e:cd:12:98:60:1b:b4:fc:5c:2f:63:7c:9e:ef:99:f2:85:db:
         0e:4c:7e:7c:7c:44:53:e9:d0:36:9c:83:05:30:d1:f9:36:ac:
         78:16:af:9c:e9:43:2a:ce:2b:54:da:ee:aa:ac:a5:cb:b6:f3:
         92:46:47:cd:a4:b3:1a:97:ef:e3:04:d6:c4:e4:30:25:e3:42:
         ad:3a:78:9c:50:34:ae:04:f4:09:7a:3d:1c:4a:02:ae:71:15:
         12:28:a7:8f:cc:42:b1:79:ef:16:34:1f:c1:f4:8e:73:f8:9e:
         2c:6f:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:47:31 2025 by rpki-client