Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/305f28da-be5f-3a06-b9df-40c6e00684ad.roa
File:                     305f28da-be5f-3a06-b9df-40c6e00684ad.roa (raw, json)
Hash identifier:          R5Zf71l1gc9CUkkEELaEgMEPFzJWzYSsUECEaHwMVEY=
Subject key identifier:   DD:5B:F0:09:43:66:31:9F:18:C4:AC:3D:9D:EE:77:1D:A0:71:94:06
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE9F6777F4749D07D52A61240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/305f28da-be5f-3a06-b9df-40c6e00684ad.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     36621
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:77:7f:47:49:d0:7d:52:a6:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=4c081c8e-df55-4620-b277-60a3fadbb0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:54:be:10:ad:e4:4c:e6:b9:2c:48:70:b9:1c:
                    5f:c1:a2:e8:d7:40:f1:d7:01:27:86:c1:86:07:96:
                    a6:52:5e:6e:e2:cb:39:5e:3c:01:ba:0b:3c:14:83:
                    7c:18:5c:31:80:df:38:b0:27:13:9b:2b:2e:0b:75:
                    32:80:b9:2f:69:66:ec:80:ca:c7:12:05:54:a6:1a:
                    8a:21:e2:07:5d:58:56:68:69:99:e5:10:33:4b:81:
                    7a:ae:94:5d:db:bf:42:e3:79:32:b4:78:f6:50:f0:
                    eb:7f:2b:77:e1:a6:e7:a8:e7:f3:bc:53:fe:03:d0:
                    43:8b:41:b4:b9:e7:7c:8e:a7:fc:48:0b:cb:77:c9:
                    79:d5:42:15:d6:7d:63:4d:26:23:7b:88:a6:1f:eb:
                    e7:97:fa:c3:8e:cc:ed:76:87:22:99:94:b1:67:55:
                    9d:5b:59:07:da:84:f2:87:b0:73:8a:25:5a:72:85:
                    b1:9c:9c:a9:f2:79:6d:2f:b8:f7:8f:61:c9:c9:48:
                    96:67:f4:1d:23:e0:5f:b4:39:c3:f8:4d:15:33:3f:
                    c8:98:b0:1f:64:a1:a3:4c:22:02:24:14:19:bc:c7:
                    ff:f3:6e:fd:f2:69:8e:97:9d:35:e4:f9:77:97:2e:
                    e7:37:26:fe:56:49:7f:d5:1b:f4:f6:05:6d:86:18:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5B:F0:09:43:66:31:9F:18:C4:AC:3D:9D:EE:77:1D:A0:71:94:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/305f28da-be5f-3a06-b9df-40c6e00684ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:2d:34:ef:b8:b9:b8:82:26:f5:97:4d:b2:2b:38:0b:38:d4:
         3a:2a:9d:b6:c7:98:32:6e:a8:47:7d:13:f1:4b:16:26:22:b7:
         60:80:25:7b:28:b3:4e:59:f9:50:9e:6d:4d:09:65:45:41:81:
         30:e0:01:f1:50:7b:1b:25:6b:4b:ad:68:4a:79:90:b9:c7:e2:
         05:74:97:e5:2e:33:76:cc:8a:eb:e1:67:f2:02:76:96:89:e6:
         4d:21:01:9e:6a:49:a4:fe:c2:9e:87:c1:c6:2f:b3:a6:2f:b2:
         d0:58:13:96:d5:88:58:2e:bf:d2:4e:5f:31:3b:80:d3:2f:64:
         07:4a:81:a2:00:d4:f3:bd:31:23:16:5b:40:06:98:ef:a1:8b:
         9d:ac:91:39:2d:57:5a:0e:85:76:af:bf:1c:09:ee:c8:55:86:
         17:3f:aa:bd:72:1a:4a:bc:78:ef:a2:30:89:6b:bc:e2:47:3f:
         5e:2e:a5:ab:06:ca:49:3d:c6:9d:cc:64:63:99:23:d6:ef:40:
         34:3e:0c:24:99:87:57:44:dc:2e:14:17:38:6a:c2:68:59:0d:
         cd:2e:96:78:a8:8a:02:1e:eb:71:2e:cc:ee:3d:1e:de:6f:d7:
         35:6a:a7:89:da:3e:01:63:c5:90:15:d3:e8:9e:b0:a3:0d:79:
         ad:65:3a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:56 2025 by rpki-client