Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bbb3458-7571-348c-be2b-73607d9aa162.roa
File:                     3bbb3458-7571-348c-be2b-73607d9aa162.roa (raw, json)
Hash identifier:          PUXCgH+vUGfPQGBseJgfecchCc4EDJcJtzF1nTlS9PE=
Subject key identifier:   F8:4B:19:E6:59:3A:2D:13:87:74:9B:06:17:30:A2:12:AE:B0:E7:96
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4081D4DB3FEB6051E574A400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bbb3458-7571-348c-be2b-73607d9aa162.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     36626
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:d4:db:3f:eb:60:51:e5:74:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=fe7eee65-c943-49b1-ab78-6af3b7e01146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:e2:b8:f8:ad:de:d2:3e:9a:20:0f:5f:93:
                    72:6b:50:7f:d9:ea:69:42:a3:05:53:d6:87:f6:12:
                    b5:c7:80:a6:0e:28:0e:b6:38:8e:56:ca:0d:1b:01:
                    30:45:d8:07:b2:fc:61:be:42:4d:c7:fe:87:fe:80:
                    8e:0e:c6:89:95:bd:f9:2b:62:59:27:69:2c:31:99:
                    db:38:73:44:91:ad:47:27:96:ff:93:32:8e:eb:01:
                    ff:13:5b:8d:0a:cc:bf:80:08:38:f4:30:1f:7c:2a:
                    0f:29:9f:f2:2b:37:a9:20:6f:2d:61:1d:de:71:96:
                    45:d3:11:e0:41:08:57:05:e3:49:7c:4c:a0:5f:76:
                    a4:99:33:12:9d:d9:b1:87:68:02:af:dd:04:e0:f7:
                    cc:59:67:1b:9f:6c:6f:e0:5c:17:b0:f2:0d:75:d3:
                    5a:7f:cd:a3:2b:7b:a0:a3:ac:2f:2c:90:14:e4:4f:
                    ab:97:93:b2:e5:3c:4f:8b:2c:de:f9:37:ec:8e:4b:
                    c7:a1:47:32:a6:7f:11:6f:cf:aa:09:56:de:be:14:
                    b5:bf:d6:9d:f2:53:5a:a9:f8:d9:d9:9f:56:a6:6a:
                    c6:e5:3e:aa:65:4a:d1:06:80:d5:46:69:fe:38:e8:
                    db:75:08:29:ab:d3:5d:37:15:3d:0b:7c:7c:2b:0e:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4B:19:E6:59:3A:2D:13:87:74:9B:06:17:30:A2:12:AE:B0:E7:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bbb3458-7571-348c-be2b-73607d9aa162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:23:47:0d:74:ec:70:18:6a:a7:35:41:95:e8:2a:48:a4:b7:
         32:06:3d:7d:dc:1b:91:ce:77:5c:a7:12:c5:f9:19:5b:53:18:
         ef:77:9d:e2:1e:93:47:79:24:3f:8a:57:bc:c4:e7:05:d7:a4:
         69:ff:2a:0f:98:f1:e8:01:48:0c:0e:b3:7d:2e:e5:d3:07:7b:
         c5:3e:3b:d1:50:76:11:88:da:45:e0:01:09:36:48:b5:6a:df:
         1a:11:45:91:a4:a3:ba:ab:ad:ed:78:8c:6c:5f:9e:96:fc:2e:
         14:f3:e8:33:00:67:c2:82:bc:23:47:5a:c7:39:09:36:af:64:
         17:75:a5:ae:95:f8:b2:56:cf:56:6c:41:83:ef:41:80:64:30:
         40:3e:1f:fb:64:3c:80:80:b9:bf:b3:8c:5b:dd:e8:55:9f:d6:
         ed:03:ca:b5:99:f7:26:9a:8d:d1:b8:b6:19:e1:de:a0:14:93:
         5a:1a:45:c8:08:f5:53:47:d0:bf:32:dc:a4:2e:76:e5:ee:8f:
         00:a2:25:c3:fb:9c:26:f2:92:c8:c8:8a:bf:1b:89:46:5d:b1:
         f2:c2:87:03:f3:01:f5:ad:81:e5:51:58:ea:2b:62:fe:73:5e:
         2e:ca:df:5c:72:2b:9d:1c:5e:d6:3d:f6:bc:28:a3:53:ed:7a:
         9f:40:d8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:55:45 2025 by rpki-client