Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/281c40fb-eb04-3195-84c2-1f0b9454355c.roa
File:                     281c40fb-eb04-3195-84c2-1f0b9454355c.roa (raw, json)
Hash identifier:          ehTuZzwxdgHYPRJZUJ+aO40aKqzbZiTzcCGFVmR8Mbo=
Subject key identifier:   DE:47:C0:5A:F0:F7:21:84:38:1A:D5:6F:9B:D7:64:57:0A:C6:6D:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA67ADCB7568E72C6A9AE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/281c40fb-eb04-3195-84c2-1f0b9454355c.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396610
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:7a:dc:b7:56:8e:72:c6:a9:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=32bf71f6-d901-436d-a622-3e4fde22f289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8a:95:8b:50:8b:75:4e:80:30:d2:11:d9:ea:
                    e6:80:cc:4d:6a:39:fa:bc:89:f3:b3:1c:4d:ae:0e:
                    b3:24:fa:a7:dd:bd:ba:92:77:11:98:4f:8e:b2:9b:
                    d6:5c:3c:dd:fd:20:47:50:a8:41:9a:2a:c9:c0:0f:
                    cf:50:d0:02:ce:dc:6b:5c:b6:0d:6b:f2:65:ac:29:
                    3d:93:72:0b:4e:f0:b0:8d:a3:6d:79:1e:c0:81:97:
                    f3:be:fd:5a:e2:27:55:98:8d:2e:de:ff:97:7b:32:
                    88:49:d2:5a:a9:10:f7:e8:2f:69:aa:92:51:cf:0a:
                    f7:a3:24:33:01:2d:0b:38:b1:c5:33:6a:be:73:b2:
                    89:4d:34:44:aa:c7:fb:b7:26:14:d6:43:1e:a2:e4:
                    96:f6:68:16:30:d2:ba:e6:d5:14:b5:d0:f4:49:05:
                    ac:75:e8:b9:c0:b6:21:8d:aa:28:15:e2:db:fd:77:
                    f1:ef:74:cd:df:f5:37:bb:b9:6a:e8:93:35:85:27:
                    a0:01:d7:2b:36:7d:83:3d:e1:96:e1:84:ec:38:fc:
                    af:9f:92:4a:46:bb:9f:14:0c:f1:42:ea:4d:ef:01:
                    0a:50:d7:06:0c:8f:c5:8a:78:91:61:ca:d6:51:5b:
                    17:85:6b:cb:86:5a:f9:19:8a:0b:3a:b4:92:cb:5c:
                    13:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:47:C0:5A:F0:F7:21:84:38:1A:D5:6F:9B:D7:64:57:0A:C6:6D:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/281c40fb-eb04-3195-84c2-1f0b9454355c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:34:a1:3e:84:86:4a:a1:01:c3:5a:fe:3e:90:25:49:3d:0d:
         54:0f:79:b4:cf:81:4b:90:3a:7b:8d:9a:ec:05:0e:35:b2:1b:
         e4:42:a1:d6:90:ca:43:1c:8a:86:08:2e:87:68:49:f1:36:c3:
         ae:5b:3c:e0:32:be:01:7a:62:43:96:e0:6b:c9:63:e5:5f:5e:
         fe:2c:6f:d1:1b:d0:d7:8d:1c:af:27:e2:42:46:7b:13:7d:78:
         70:51:2c:3d:7c:f8:b4:8a:d1:8c:1a:1c:9b:95:36:dd:22:51:
         d9:01:bf:1a:91:78:1d:2d:0d:e9:ad:b8:62:01:97:42:a6:e4:
         13:62:86:39:69:7b:9d:2d:3c:7b:86:b0:06:dc:12:3f:d7:35:
         50:21:9a:16:b8:f4:5c:23:b6:2a:71:b6:6e:e3:19:70:11:74:
         f9:fe:64:d0:0d:9c:e9:4f:aa:b1:62:3f:3f:a7:7b:f7:16:32:
         82:f0:df:b0:30:80:b2:74:61:b5:dd:34:b8:1c:ee:34:26:27:
         2d:a3:55:4b:eb:23:56:d1:5d:b5:7a:63:50:f5:fd:63:0f:bd:
         cf:7e:bb:1b:1f:17:f8:73:a0:6c:19:68:bf:5b:3c:6a:1c:ce:
         8d:d4:51:74:19:ad:d3:a0:5c:03:52:17:e8:fb:32:e9:88:09:
         0b:50:e2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:12:47 2025 by rpki-client