Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25679d53-0f57-368d-88ef-3d980e203f8f.roa
File:                     25679d53-0f57-368d-88ef-3d980e203f8f.roa (raw, json)
Hash identifier:          xamHYlbFNVX+qsLM/Vj75hudssJJrf6eOSNsCVDqCBo=
Subject key identifier:   26:9D:57:61:E6:E9:7D:B2:DB:FB:8C:D6:06:8D:29:25:87:41:5B:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF25694987709AD426F030800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25679d53-0f57-368d-88ef-3d980e203f8f.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     36621
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:94:98:77:09:ad:42:6f:03:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=4f45fd5d-3e20-4768-b2ae-954dddaa1f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e0:81:4e:29:cd:ed:e1:d8:24:e9:57:1c:a5:
                    43:48:5b:54:94:dd:ab:07:d7:22:eb:f2:88:bc:99:
                    69:a3:5d:70:a9:53:10:51:f7:58:f6:2d:f5:88:c1:
                    c3:a1:c2:10:eb:ce:ba:c1:76:4d:9c:6a:6d:5f:57:
                    fe:7b:d1:f3:28:6d:e7:8d:80:61:05:49:29:c9:98:
                    bb:f9:25:69:6d:f4:18:0a:43:50:33:8f:5f:ee:c2:
                    8e:a0:ca:3e:b2:f3:dc:f7:44:b3:aa:01:02:23:52:
                    17:a0:18:e2:54:51:2f:0a:fd:41:33:aa:3b:4e:bc:
                    b9:f5:a5:3e:dc:b0:63:9d:f6:2a:e3:6a:20:55:c4:
                    3b:cf:ff:15:33:bd:c2:8d:6f:5c:61:7e:d5:63:11:
                    82:2d:ca:e3:73:02:d1:14:ee:a5:f4:cf:1e:7f:4a:
                    46:fe:9f:be:b5:dd:de:d3:f4:65:72:49:88:22:0c:
                    e8:4b:6b:89:0c:e3:ae:a2:4b:82:92:a0:6a:ec:19:
                    72:c0:03:dc:b4:71:2b:1c:8d:3c:da:45:7d:f1:36:
                    3a:3e:e3:6c:33:34:96:c4:8c:82:d9:9d:f4:4e:ea:
                    a0:32:7c:4f:d2:d9:2e:c7:98:f2:8c:d8:2a:ec:eb:
                    54:48:3a:f3:95:57:61:5d:f5:b8:af:97:1f:c6:ab:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9D:57:61:E6:E9:7D:B2:DB:FB:8C:D6:06:8D:29:25:87:41:5B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25679d53-0f57-368d-88ef-3d980e203f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b5:e5:58:41:20:bd:6e:e3:9c:ca:ac:8f:44:d7:86:28:be:
         b9:df:86:82:aa:cf:94:90:fd:f4:d8:b7:b4:93:5b:70:d7:e7:
         53:1f:6e:99:16:c3:8c:36:7e:d6:ae:92:58:fb:78:dc:1b:a6:
         d4:d5:14:70:d0:1d:d3:9e:ac:0f:93:d2:4e:4d:26:b3:14:db:
         79:52:d4:90:f1:8d:c5:81:d7:5d:99:67:8a:04:46:ab:f5:ac:
         a0:d2:76:d7:3b:43:72:c4:b7:bb:48:19:5b:df:16:fb:45:eb:
         3c:3a:57:76:7f:01:d3:f5:0b:e8:3f:1b:f9:40:6a:33:0d:70:
         b3:53:4f:ac:5e:79:78:e0:00:d8:e0:75:a3:f4:2a:1e:4f:c6:
         cd:06:23:a5:cd:2f:08:8f:8e:5e:37:a8:03:f5:db:6f:23:86:
         d1:23:a5:a3:96:3c:e9:c3:20:3a:14:0b:a0:8e:da:02:32:74:
         7b:58:c3:69:7a:df:9f:18:5a:5a:34:7a:93:2a:14:8f:01:0e:
         6e:4c:fe:90:6a:c3:ec:d0:84:2d:69:90:74:7a:dc:ef:95:93:
         bf:85:54:9c:6e:30:0f:c4:80:1e:48:d3:94:6a:42:49:d0:4f:
         21:9e:16:89:18:5f:5e:56:03:61:4e:0d:71:df:eb:c2:96:b8:
         5c:8a:85:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:07:24 2025 by rpki-client