Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b1386d9-7043-36f5-8587-38c78da0c30b.roa
File:                     3b1386d9-7043-36f5-8587-38c78da0c30b.roa (raw, json)
Hash identifier:          q3sJFGjlckT37N3fAae3mgLOp70bxJsxMs7dAQ31xQ0=
Subject key identifier:   07:62:F3:D9:38:B7:0B:09:C8:BD:3E:20:6E:20:F6:3B:A3:DF:E8:F6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE883F897DEBC69944A5E87A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b1386d9-7043-36f5-8587-38c78da0c30b.roa
Signing time:             Tue 19 Aug 2025 12:34:12 +0000
ROA not before:           Tue 19 Aug 2025 12:34:12 +0000
ROA not after:            Mon 17 Nov 2025 13:34:12 +0000
asID:                     396540
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:83:f8:97:de:bc:69:94:4a:5e:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 12:34:12 2025 GMT
            Not After : Nov 17 13:34:12 2025 GMT
        Subject: CN=feef011f-2557-4cf0-bf2b-9bdb5f4d4bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:24:3e:19:76:76:50:bd:7c:f5:cb:d0:4c:
                    a3:ca:51:07:b0:4b:fc:a2:e3:c6:fe:57:e7:b3:cd:
                    cb:41:66:49:5f:69:3d:ed:5d:aa:2b:45:69:80:a7:
                    b2:37:5a:b5:be:3b:7a:00:c1:08:79:f0:47:f8:17:
                    3d:1c:bc:74:69:4a:fb:9e:af:e0:83:d0:6f:0f:8b:
                    e9:12:b0:88:2a:8c:9e:6c:ec:43:58:7a:72:73:46:
                    7c:ea:57:8a:c7:25:45:e1:51:a0:ea:3a:aa:30:17:
                    40:0a:23:5b:a6:0f:92:19:d9:62:d9:6b:93:f0:96:
                    0d:b1:73:75:4e:a8:24:6d:14:3f:70:aa:71:83:18:
                    f9:15:e7:86:cb:a7:3d:29:ab:11:ef:89:22:6c:6a:
                    04:01:41:f3:7b:61:94:7e:d3:aa:6e:5b:f9:f5:1b:
                    16:08:95:6e:f3:cb:13:bf:62:bb:64:53:97:0f:7c:
                    74:e0:35:97:e8:a7:50:45:d7:41:ca:95:51:9a:fd:
                    3a:0b:06:ef:60:0e:65:dd:c2:df:a3:3f:29:ed:7e:
                    d6:4d:3e:bc:0b:55:b7:d6:ee:19:2e:09:df:52:75:
                    94:b1:18:2d:2c:b1:ba:f4:da:86:80:34:bb:e2:23:
                    32:4a:7a:cd:15:1b:3c:8a:5c:bc:8e:b1:c6:95:bf:
                    90:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:62:F3:D9:38:B7:0B:09:C8:BD:3E:20:6E:20:F6:3B:A3:DF:E8:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b1386d9-7043-36f5-8587-38c78da0c30b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:16:81:76:d6:11:a9:f8:7a:9d:85:a3:5c:62:69:14:65:b4:
         f9:be:26:8d:f0:66:ff:c2:e9:0b:d3:fe:16:fa:3b:e3:d2:8d:
         2b:3c:78:16:55:27:05:72:a3:6c:e0:dc:a4:0e:81:ab:de:79:
         bb:f6:fc:28:c1:83:04:03:0d:9b:b1:57:7d:a0:5b:35:b0:de:
         10:e7:b9:00:b7:33:31:b2:ff:43:dd:38:16:99:7b:bd:7c:18:
         9a:cc:05:b6:92:d7:02:7e:33:1c:8b:bd:68:47:a9:4c:93:c7:
         ed:ba:26:96:8d:28:62:fd:4b:8e:af:3f:d3:2a:48:79:6e:f8:
         6c:30:6d:f4:9f:b0:0a:28:fc:c9:c3:e9:d8:ba:9b:35:aa:ba:
         57:cc:10:ee:e4:b7:47:aa:c2:3c:2a:79:71:68:0f:92:5c:da:
         f2:97:b9:52:6e:14:39:0e:14:95:11:6d:54:83:a5:82:83:e2:
         f0:bc:6b:f3:f6:4a:0e:fa:a5:50:a3:dc:1e:04:39:b8:bb:61:
         1c:a0:54:03:13:58:f2:63:cd:5d:25:f0:b5:95:87:32:85:00:
         09:2f:36:99:8f:f6:95:cf:e3:f4:1f:02:4f:c7:85:66:f6:c2:
         20:16:ae:48:f1:a4:05:4c:f7:d2:ed:f2:77:85:f9:6a:e6:ba:
         36:29:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:18 2025 by rpki-client