Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a773969-54d9-3bb6-a5f1-c7d428400972.roa
File:                     3a773969-54d9-3bb6-a5f1-c7d428400972.roa (raw, json)
Hash identifier:          DYviv07pBn8KUDmNFlndm2nJ1/pJx8zdIq8DeLDn9mk=
Subject key identifier:   62:E5:22:BB:39:22:B5:43:9F:AC:28:09:0D:0C:3F:C2:1F:B1:12:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE9F673DF32306821520D0040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a773969-54d9-3bb6-a5f1-c7d428400972.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     36631
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:73:df:32:30:68:21:52:0d:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=56e80f0b-91b7-4e6e-9a47-278fe37384af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:16:f2:54:b5:60:c9:ac:1d:32:59:cd:a6:65:
                    77:eb:f4:52:15:38:d1:f4:7e:df:2a:f8:88:77:db:
                    42:02:82:af:08:fc:42:a1:d0:a9:7d:04:d7:48:b0:
                    0b:ac:b8:d4:97:34:65:46:38:b3:24:5f:79:88:2e:
                    93:1f:4c:11:38:9a:c8:fa:41:63:12:d8:45:66:ed:
                    c1:51:ac:91:b2:42:00:fe:c1:51:44:aa:dc:09:6f:
                    c9:c4:35:cf:87:d5:60:41:55:ea:ae:cc:7e:b9:38:
                    40:75:71:a1:3f:3a:ae:36:8b:d2:cc:de:0e:f7:be:
                    c2:b5:a4:65:97:82:fa:e4:b0:e3:b2:ed:cb:85:0c:
                    1e:11:1d:37:a3:4a:c1:b8:bf:b6:20:d6:2d:7f:7c:
                    ac:20:2e:dc:d9:76:19:d1:06:81:43:03:50:4e:22:
                    ed:fa:12:45:d3:bf:a8:de:32:b5:6b:af:0a:61:37:
                    6f:70:12:2f:1c:4b:cd:5f:45:e3:9b:5b:e4:c7:72:
                    d1:65:30:2b:4b:94:f5:62:7c:e9:c2:c2:25:ac:fa:
                    19:46:05:9f:80:cc:c8:8c:33:0f:4e:5b:15:19:32:
                    5f:b9:1d:16:a0:2d:73:11:c0:0e:20:4e:db:fc:e7:
                    a6:7a:e6:d3:c7:75:5b:21:45:ec:1d:49:16:a5:eb:
                    c3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E5:22:BB:39:22:B5:43:9F:AC:28:09:0D:0C:3F:C2:1F:B1:12:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a773969-54d9-3bb6-a5f1-c7d428400972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:8a:d5:0a:68:c8:09:9e:fe:83:14:00:7b:a2:e3:9e:c9:ba:
         9f:c8:a1:35:a6:34:3f:8a:06:98:2c:cf:98:64:da:1a:3f:0a:
         a2:92:4e:68:ab:d3:1c:09:74:85:90:b5:7c:02:77:21:61:ad:
         a1:c9:71:a6:a8:40:6a:06:aa:8e:25:f9:b4:fd:56:95:a4:74:
         92:ec:a5:76:33:a3:18:40:ec:73:52:46:6e:b2:6c:c4:6c:6c:
         d6:be:6e:b6:9b:61:25:47:df:fa:df:80:9f:9e:85:05:03:58:
         46:b0:a9:d0:ca:49:da:46:67:d2:fa:56:0b:6c:85:98:f8:2f:
         28:c5:c2:64:68:83:05:09:5e:ac:44:21:48:91:08:5e:06:17:
         fd:d9:20:e0:12:5d:dc:5a:57:90:5c:93:16:c4:d1:a8:4e:74:
         bb:43:a3:3c:20:e9:e3:90:dd:0c:97:e3:46:f5:ad:b1:19:08:
         05:8e:74:5a:6e:b8:56:9a:fe:0d:93:57:86:ea:14:e1:91:11:
         1f:f0:6f:9c:e1:08:96:6c:8f:01:dc:4a:69:75:31:44:0b:2e:
         44:5b:81:04:6c:73:09:dd:6b:71:c8:32:14:98:5b:c2:79:fb:
         d4:dd:f8:bf:95:fb:81:25:c3:8b:e5:79:a2:ae:34:8d:1d:67:
         c5:23:3d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:08:49 2025 by rpki-client