Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b75cf2d-1489-380e-8564-68bd4f4416d2.roa
File:                     3b75cf2d-1489-380e-8564-68bd4f4416d2.roa (raw, json)
Hash identifier:          B7/U+EQm7GnXKPQbIsiuTchKyToApDvhyMa0bjOUQes=
Subject key identifier:   C7:E4:3B:8A:D3:6D:6E:2D:15:7C:79:56:21:FB:97:48:42:A6:9F:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196FF5910E095F7EC0134C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b75cf2d-1489-380e-8564-68bd4f4416d2.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36622
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ff:59:10:e0:95:f7:ec:01:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=4ecbb7b8-f31e-4495-80ae-ba775dd10681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f0:59:14:33:85:b3:66:d5:82:ef:2d:05:4e:
                    36:66:b2:77:64:4e:52:1f:83:98:8e:f7:95:d7:81:
                    81:c7:9f:c2:5f:d8:1d:c8:80:56:3e:1d:2e:6c:21:
                    6c:8c:fd:65:ef:46:ef:f8:ab:46:8f:14:43:31:4e:
                    c9:0c:99:30:89:dc:7e:2b:f7:61:02:91:58:32:f1:
                    c5:cd:50:a7:24:bd:40:6e:8b:5f:2d:59:50:8e:c7:
                    ee:8d:a5:f2:69:56:c9:db:66:53:09:6a:4d:73:27:
                    67:3d:16:43:23:ed:78:b5:c3:52:a2:10:2f:60:72:
                    77:d9:99:7f:d1:d4:7c:64:61:45:a9:f2:ff:3d:d1:
                    40:13:81:98:d5:35:26:1e:46:0b:13:d6:93:51:eb:
                    b3:36:7b:3e:7b:d4:be:2e:e5:cd:51:87:cc:a0:43:
                    9d:ed:4a:9e:ce:75:ea:6c:eb:65:3c:97:2f:65:a8:
                    dc:b9:39:92:86:22:f4:2f:9d:13:29:3f:a1:ae:3a:
                    d1:b7:fe:5e:26:5b:fa:d3:04:07:7f:0a:f4:f9:3f:
                    a7:ce:5f:0e:bf:ec:da:60:76:49:d0:b0:7c:2f:e6:
                    4b:9e:17:24:c4:ba:bf:e5:fc:a5:be:0a:34:07:37:
                    3e:aa:87:dd:f2:30:6a:88:e9:75:7b:3a:ea:c3:83:
                    56:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E4:3B:8A:D3:6D:6E:2D:15:7C:79:56:21:FB:97:48:42:A6:9F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b75cf2d-1489-380e-8564-68bd4f4416d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:80:a2:1e:81:48:33:26:75:37:a3:74:17:15:df:42:2c:ec:
         74:ca:d5:6c:ae:5a:11:ce:b4:df:66:03:1f:aa:a3:40:a8:13:
         5a:f4:25:8f:86:28:81:b9:93:2d:e3:3d:94:2b:67:cc:5c:be:
         93:cf:75:52:97:bb:3d:34:35:77:21:74:df:1a:72:a9:ea:88:
         da:82:27:28:bf:ab:8b:8d:33:c8:15:67:90:b0:c7:43:9d:ac:
         ad:36:53:7e:3e:06:eb:8c:75:2b:2a:8b:a3:ea:81:7f:71:3c:
         6f:3c:50:bd:e9:bc:96:10:f3:33:03:db:d9:e8:55:8c:21:22:
         23:72:75:4b:48:70:f0:7b:f4:ac:ed:67:c9:c0:b9:47:24:75:
         17:ce:55:bd:8c:72:23:c9:46:88:43:3a:a4:59:ac:2e:c3:63:
         96:8f:3d:f5:79:dc:2f:47:cc:77:00:36:34:ae:00:28:cc:8b:
         4d:be:92:83:6f:eb:6d:f2:19:41:f5:5d:3a:15:f5:6b:16:c1:
         fc:5a:0e:a0:dd:be:b7:a9:d2:ba:1c:e2:05:a5:ef:45:6e:70:
         e1:19:1f:3d:e2:4b:d6:15:9e:82:54:cf:82:31:aa:f7:00:d8:
         63:3e:c4:34:54:cd:23:60:6b:a1:f8:a3:38:5f:63:13:d2:a7:
         db:1f:a6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:26:58 2025 by rpki-client